Table reference

The data lake tables are organized across 8 domains, kept in sync with the platform's source systems. This page documents the full schema for every table, organized by domain.

Common columns

Most tables share system columns that are omitted from the per-table schemas below:

Column	Type	Description
`nrn`	String	NRN for row-level access control
`_version`	UInt64	Replication version
`_deleted`	UInt8	Soft-delete flag, `1` = deleted
`_synced_at`	DateTime64	Last sync timestamp

Always add WHERE _deleted = 0 to exclude soft-deleted rows. Exception: audit_events uses a different engine and has no _deleted column.

Domain index

Domain	Tables	Description
Audit	1	Immutable log of every API operation
Auth	5	Users, roles, API keys, and access grants
Core	22	Resource hierarchy, builds, releases, deployments, and runtime configuration
Approvals	18	Approval policies, requests, replies, and entity hooks
Governance	4	Action items, categories, suggestions, and measurement units
Parameters	3	Configuration parameters, values, and versions
SCM	2	Repositories and commits from source control providers
Services	7	Service catalog, instances, links, actions, and parameter bindings

Audit

Centralized, immutable record of every API event executed on the platform. Each row represents an individual operation performed by a user or service. This is the primary source for security audits, change traceability, and activity analysis.

`audit_events`

Main audit table. Each row is an immutable event representing a request processed by the platform. Partitioned by day and sorted by NRN and date for efficient queries by resource and time range.

Engine: ReplicatedMergeTree | Sorting key: nrn, date | Partition key: toYYYYMMDD(date)

Column	Type	Description
`entity`	`String`	Entity type affected (e.g. `application`, `namespace`, `deployment`, `parameter`, `scope`)
`method`	`String`	HTTP method of the operation (`GET`, `POST`, `PUT`, `PATCH`, `DELETE`)
`request_body`	`JSON(max_dynamic_paths=0)`	Full JSON payload of the incoming request
`status`	`Int16`	HTTP response code (200, 201, 400, 403, 500, etc.)
`url`	`String`	Full endpoint URL including path and query string
`ips`	`String`	Client IP address(es); may contain multiple comma-separated IPs if proxies are involved
`headers`	`JSON(max_dynamic_paths=0)`	HTTP request headers (the `Authorization` header is omitted for security)
`auth`	`JSON(max_dynamic_paths=0)`	Authentication context: JWT token claims, credential type, and authorized scopes
`organization_id`	`String`	ID of the organization that performed the operation; references `core_entities_organization.org_id`
`application`	`String`	Name or identifier of the application in context
`scope`	`String`	OAuth/JWT scope of the token used (e.g. `openid email phone`)
`entity_id`	`String`	ID of the specific entity that was created, modified, or deleted
`user_id`	`String`	ID of the actor who executed the action; references `auth_user.id`
`date`	`DateTime64(3, 'UTC')`	Event timestamp with millisecond precision in UTC
`response_body`	`JSON(max_dynamic_paths=0)`	Full JSON payload of the response sent to the client
`entity_context`	`JSON(max_dynamic_paths=0)`	Additional entity state at the time of the operation (useful for reconstructing context)
`user_email`	`String`	Email of the user who executed the action
`user_type`	`String`	Actor type: `human` for users, `service` for API keys/service accounts
`organization_name`	`String`	Human-readable organization name
`organization_slug`	`String`	URL-safe organization slug
`request_body_fields`	`JSON(max_dynamic_paths=0)`	Specific request body fields indexed for optimized searches
`entity_data`	`JSON(max_dynamic_paths=0)`	Additional structured data about the affected entity at the time of the event

Relationships:

organization_id references core_entities_organization.org_id, identifying the organization that originated the event
user_id references auth_user.id, identifying the actor who executed the action
entity_id + entity references the ID in the corresponding domain table (e.g. if entity='application', references core_entities_application.app_id)

Auth

Authentication and authorization tables: platform users, available roles, issued API keys, and the grants that assign roles to users on specific resources.

`auth_apikey`

API keys issued for programmatic access to the platform. They allow external services or automations to authenticate without user credentials.

Engine: ReplicatedReplacingMergeTree | Sorting key: id

Column	Type	Description
`id`	`Int32`	Unique API key identifier
`name`	`Nullable(String)`	Human-readable label describing the purpose of the key
`organization_id`	`Nullable(Int32)`	Organization that owns the key
`account_id`	`Nullable(Int32)`	Account the key is associated with (optional)
`user_id`	`Nullable(Int32)`	User who owns the key
`tags`	`Nullable(String)`	Key-value tags in JSON format for classification and search
`roles`	`Nullable(String)`	Roles assigned to this key in JSON format; defines its permissions
`status`	`Nullable(String)`	Key status: `active`, `inactive`, `revoked`
`created_at`	`Nullable(DateTime64(6))`	Creation date
`updated_at`	`Nullable(DateTime64(6))`	Last update
`masked_api_key`	`Nullable(String)`	Masked version of the key for safe display (e.g. `sk_****abc`)
`owner_id`	`Nullable(Int32)`	User who created the key
`used_at`	`Nullable(DateTime64(6))`	Last time the key was used to authenticate
`internal`	`Nullable(UInt8)`	Flag indicating whether this is an internal system key (`1`) or a customer key (`0`)

Relationships:

organization_id references core_entities_organization.org_id, the organization that owns the key
account_id references core_entities_account.account_id, the account the key is restricted to
user_id / owner_id references auth_user.id, the user who owns and created the key

`auth_resource_grants`

Access grants that assign a role to a user on a specific NRN. This is the central RBAC mechanism: a grant expresses that user X has role Y on resource Z (NRN).

Engine: ReplicatedReplacingMergeTree | Sorting key: id

Column	Type	Description
`id`	`Int32`	Unique grant identifier
`user_id`	`Nullable(Int32)`	User the role is granted to
`role_id`	`Nullable(Int32)`	Role being granted
`created_at`	`Nullable(DateTime64(6))`	Date the access was granted
`updated_at`	`Nullable(DateTime64(6))`	Last modification of the grant
`status`	`Nullable(String)`	Grant status: `active`, `inactive`

Relationships:

user_id references auth_user.id, the user the grant applies to
role_id references auth_role.id, the role assigned by the grant
For the version with denormalized role data, see auth_resource_grants_expanded

`auth_resource_grants_expanded`

View that enriches auth_resource_grants with the assigned role data. Simplifies queries that need to display role name, slug, and level without a manual JOIN.

Engine: View (based on auth_resource_grants JOIN auth_role)

Column	Type	Description
`id`	`Int32`	Grant ID
`user_id`	`Nullable(Int32)`	User the grant applies to
`role_id`	`Nullable(Int32)`	Assigned role
`role_name`	`Nullable(String)`	Role name (denormalized from `auth_role.name`)
`role_slug`	`Nullable(String)`	Role slug (denormalized from `auth_role.slug`)
`role_level`	`Nullable(String)`	Hierarchical role level: `organization`, `account`, `namespace`, `application`
`status`	`Nullable(String)`	Grant status
`created_at`	`Nullable(DateTime64(6))`	Grant creation date
`updated_at`	`Nullable(DateTime64(6))`	Last update of the grant

Relationships:

This view already materializes the JOIN between auth_resource_grants and auth_role
user_id references auth_user.id, the user the grant applies to

`auth_role`

Roles available on the platform for access control. Each role defines a set of permissions. Roles can be predefined by the platform or customized per organization.

Engine: ReplicatedReplacingMergeTree | Sorting key: id

Column	Type	Description
`id`	`Int32`	Unique role identifier
`name`	`Nullable(String)`	Human-readable role name (e.g. `Admin`, `Developer`, `Viewer`)
`description`	`Nullable(String)`	Description of the role's permissions and responsibilities
`status`	`Nullable(String)`	Status: `active`, `inactive`
`created_at`	`Nullable(DateTime64(6))`	Creation date
`updated_at`	`Nullable(DateTime64(6))`	Last modification
`level`	`Nullable(String)`	Hierarchical level where it applies: `organization`, `account`, `namespace`, `application`
`slug`	`Nullable(String)`	URL-safe role identifier (e.g. `org-admin`, `app-developer`)
`assignment_restriction`	`Nullable(String)`	Restriction on who can assign this role (e.g. admins only)
`organization_id`	`Nullable(Int32)`	If a custom role, ID of the org that created it; null for system roles

Relationships:

organization_id references core_entities_organization.org_id, only for custom roles
id is referenced by auth_resource_grants.role_id, the grants that use this role
id is referenced by auth_apikey.roles, API keys include role IDs in JSON

`auth_user`

Users registered on the platform. Includes both human users who log in via SSO/OAuth and service accounts created programmatically.

Engine: ReplicatedReplacingMergeTree | Sorting key: id

Column	Type	Description
`id`	`Int32`	Unique user identifier on the platform
`email`	`Nullable(String)`	User email address; unique per organization
`organization_id`	`Nullable(Int32)`	Organization the user belongs to
`first_name`	`Nullable(String)`	User first name
`last_name`	`Nullable(String)`	User last name
`status`	`Nullable(String)`	Account status: `active`, `inactive`, `invited`, `suspended`
`user_type`	`Nullable(String)`	User type: `human` or `service`
`provider`	`Nullable(String)`	Identity provider used for login (e.g. `google`, `github`, `saml`)
`avatar`	`Nullable(String)`	URL to the user's profile picture
`created_at`	`Nullable(DateTime64(6))`	Account creation date
`updated_at`	`Nullable(DateTime64(6))`	Last profile update

Relationships:

organization_id references core_entities_organization.org_id, the organization the user belongs to
id is referenced by auth_resource_grants.user_id, grants assigned to this user
id is referenced by auth_apikey.user_id / auth_apikey.owner_id, keys owned by the user
id is referenced by audit_events.user_id, actions recorded by this user
id is referenced by parameters_parameter_version.user_id, parameter versions created by the user

Core

Fundamental platform entities. Represents the resource hierarchy: Organization, Account, Namespace, Application, Scope. Also includes builds, releases, deployments, runtime configurations, scope types, and technology templates.

`core_entities_organization`

Organizations on the platform. An organization is the root unit of the tenancy model: all other entities belong to an organization. Contains branding settings (logos), alternate domains, and global organization configuration.

Engine: ReplicatedReplacingMergeTree | Sorting key: org_id

Column	Type	Description
`org_id`	`Int32`	Unique organization identifier
`org_name`	`Nullable(String)`	Organization name
`status`	`Nullable(String)`	Status: `active`, `inactive`, `suspended`
`created_at`	`Nullable(DateTime64(6))`	Creation date
`updated_at`	`Nullable(DateTime64(6))`	Last update
`org_slug`	`Nullable(String)`	URL-safe organization slug
`org_logo`	`Nullable(String)`	Organization logo URL (light theme)
`org_short_logo`	`Nullable(String)`	Reduced logo URL (light theme)
`org_logo_dark`	`Nullable(String)`	Organization logo URL (dark theme)
`org_short_logo_dark`	`Nullable(String)`	Reduced logo URL (dark theme)
`org_settings`	`Nullable(String)`	JSON with general organization settings
`org_alt_domains`	`Array(String)`	Alternate domains configured for the organization

Relationships:

org_id is referenced by core_entities_account.org_id, accounts that belong to this organization
org_id is referenced by auth_user.organization_id, users in this organization
org_id is referenced by auth_role.organization_id, roles defined in this organization
org_id is referenced by auth_apikey.organization_id, API keys in this organization

`core_entities_account`

Accounts within an organization. An account groups namespaces and is associated with an SCM provider (GitHub, GitLab, etc.). It is the second level of the hierarchy and defines the prefix used to name repositories created under it.

Engine: ReplicatedReplacingMergeTree | Sorting key: account_id

Column	Type	Description
`account_id`	`Int32`	Unique account identifier
`account_name`	`Nullable(String)`	Account name
`org_id`	`Nullable(Int32)`	Parent organization
`repo_provider`	`Nullable(String)`	SCM provider: `github`, `gitlab`, `bitbucket`
`repo_prefix`	`Nullable(String)`	Prefix used to name repositories created under this account
`status`	`Nullable(String)`	Status: `active`, `inactive`
`created_at`	`Nullable(DateTime64(6))`	Creation date
`updated_at`	`Nullable(DateTime64(6))`	Last update
`slug`	`Nullable(String)`	URL-safe slug
`settings`	`Nullable(String)`	JSON with account settings
`deleted_at`	`Nullable(DateTime64(6))`	Logical deletion date

Relationships:

org_id references core_entities_organization.org_id, the organization it belongs to
account_id is referenced by core_entities_namespace.account_id, namespaces in this account

`core_entities_namespace`

Namespaces within an account. A namespace groups related applications (e.g. a team, a product). It is the third level of the hierarchy and acts as a logical container for organizing applications by domain or owner.

Engine: ReplicatedReplacingMergeTree | Sorting key: namespace_id

Column	Type	Description
`namespace_id`	`Int32`	Unique namespace identifier
`namespace_name`	`Nullable(String)`	Namespace name
`account_id`	`Nullable(Int32)`	Parent account
`created_at`	`Nullable(DateTime64(6))`	Creation date
`updated_at`	`Nullable(DateTime64(6))`	Last update
`namespace_slug`	`Nullable(String)`	URL-safe slug
`status`	`Nullable(String)`	Status: `active`, `inactive`

Relationships:

account_id references core_entities_account.account_id, the account it belongs to
namespace_id is referenced by core_entities_application.namespace_id, applications in this namespace

`core_entities_application`

Applications within a namespace. An application represents a deployable unit: a microservice, a function, a job. It has an associated source code repository and can have multiple scopes (environments). Supports monorepos via repository_app_path.

Engine: ReplicatedReplacingMergeTree | Sorting key: app_id

Column	Type	Description
`app_id`	`Int32`	Unique application identifier
`app_name`	`Nullable(String)`	Application name
`namespace_id`	`Nullable(Int32)`	Parent namespace
`repository_url`	`Nullable(String)`	URL of the application's source code repository
`created_at`	`Nullable(DateTime64(6))`	Creation date
`updated_at`	`Nullable(DateTime64(6))`	Last update
`status`	`Nullable(String)`	Status: `active`, `inactive`, `archived`
`application_slug`	`Nullable(String)`	URL-safe application slug
`template_id`	`Nullable(Int32)`	Technology template used when creating the application
`auto_deploy_on_creation`	`Nullable(UInt8)`	Whether to automatically deploy when a new scope is created (`1` = yes)
`is_mono_repo`	`Nullable(UInt8)`	Whether the code lives in a shared monorepo (`1` = yes)
`repository_app_path`	`Nullable(String)`	Path within the monorepo where this application's code resides
`tags`	`Nullable(String)`	JSON with classification tags
`messages`	`Nullable(String)`	JSON with system messages about the status
`settings`	`Nullable(String)`	JSON with additional application settings

Relationships:

namespace_id references core_entities_namespace.namespace_id, the namespace it belongs to
template_id references core_entities_technology_template.template_id, the technology template used
app_id is referenced by core_entities_scope.application_id, scopes (environments) of this application
app_id is referenced by core_entities_build.app_id, builds generated for this application
app_id is referenced by core_entities_release.app_id, releases of this application

`core_entities_scope`

Scopes of an application. A scope is a deployment environment (e.g. production, staging, dev). Each scope has a type, enabled capabilities, and can have dimensions that describe it (e.g. region, cloud provider). It is the fourth level of the hierarchy and the final target of deployments.

Engine: ReplicatedReplacingMergeTree | Sorting key: id

Column	Type	Description
`id`	`Int32`	Unique scope identifier
`name`	`Nullable(String)`	Scope name (e.g. `production`, `staging`)
`type`	`Nullable(String)`	Scope type according to its `scope_type`
`application_id`	`Nullable(Int32)`	Parent application
`created_at`	`Nullable(DateTime64(6))`	Creation date
`updated_at`	`Nullable(DateTime64(6))`	Last update
`status`	`Nullable(String)`	Status: `active`, `inactive`, `creating`, `deleting`
`requested_spec`	`Nullable(String)`	JSON with the specification requested when creating the scope
`scope_slug`	`Nullable(String)`	URL-safe slug
`scope_domain`	`Nullable(String)`	Base domain assigned to the scope by the platform
`tier`	`Nullable(String)`	Resource tier of the scope (e.g. `small`, `medium`, `large`)
`capabilities`	`Nullable(String)`	JSON with capabilities enabled in the scope
`tags`	`Array(String)`	Tags for classification and filtering
`messages`	`Nullable(String)`	JSON with system messages about the status
`asset_name`	`Nullable(String)`	Infrastructure asset name (e.g. ECS service name)
`external_created`	`Nullable(UInt8)`	Whether it was created externally and imported into the platform (`1` = yes)
`profiles`	`Nullable(String)`	JSON with active configuration profiles
`provider`	`Nullable(String)`	Cloud provider of the scope (e.g. `aws`, `gcp`, `azure`)
`instance_id`	`Nullable(String)`	Instance ID in the cloud provider

Relationships:

application_id references core_entities_application.app_id, the application it belongs to
id is referenced by core_entities_deployment.scope_id, deployments performed in this scope
id is referenced by core_entities_runtime_configuration_scope.scope_id, runtime configurations active in this scope
id is referenced by core_entities_scope_dimension.scope_id, dimensions assigned to this scope
id is referenced by core_entities_scope_domain.scope_id, custom domains of this scope

`core_entities_scope_type`

Available scope types. Defines the categories of environments that can be created (e.g. kubernetes, ecs, lambda). Each type has an associated infrastructure provider and can be linked to compatible deployment strategies.

Engine: ReplicatedReplacingMergeTree | Sorting key: id

Column	Type	Description
`id`	`Int32`	Unique scope type identifier
`type`	`Nullable(String)`	Technical type identifier (e.g. `kubernetes`, `ecs`, `lambda`)
`name`	`Nullable(String)`	Human-readable scope type name
`status`	`Nullable(String)`	Status: `active`, `inactive`
`description`	`Nullable(String)`	Description of the scope type and its characteristics
`provider_type`	`Nullable(String)`	Associated infrastructure provider type
`provider_id`	`Nullable(String)`	Specific provider ID
`created_at`	`Nullable(DateTime64(6))`	Creation date
`updated_at`	`Nullable(DateTime64(6))`	Last update

Relationships:

id is referenced by core_entities_deployment_strategy_scope_type.scope_type_id, compatible deployment strategies for this type

`core_entities_scope_dimension`

Dimensions assigned to a specific scope. Dimensions are key-value attributes that characterize a scope (e.g. region=us-east-1, cloud=aws). They are used for filtering and to determine which runtime configuration values apply to that scope.

Engine: ReplicatedReplacingMergeTree | Sorting key: id

Column	Type	Description
`id`	`Int32`	Unique assigned dimension identifier
`dimension_slug`	`Nullable(String)`	Dimension slug (e.g. `region`, `cloud`)
`value_slug`	`Nullable(String)`	Value assigned to the dimension in this scope (e.g. `us-east-1`, `aws`)
`scope_id`	`Nullable(Int32)`	Scope this dimension belongs to
`created_at`	`Nullable(DateTime64(6))`	Creation date
`updated_at`	`Nullable(DateTime64(6))`	Last update

Relationships:

scope_id references core_entities_scope.id, the scope this dimension belongs to

`core_entities_scope_domain`

Custom domains assigned to a scope. Allows a scope to be accessible via customer-owned domain URLs (e.g. api.mycompany.com) instead of the platform-generated domain. Records the domain assignment status.

Engine: ReplicatedReplacingMergeTree | Sorting key: id

Column	Type	Description
`id`	`UUID`	Unique domain assignment identifier
`domain`	`Nullable(String)`	Custom domain assigned (e.g. `api.mycompany.com`)
`scope_id`	`Nullable(Int32)`	Scope the domain is assigned to
`organization_id`	`Nullable(Int32)`	Organization that owns the domain
`status`	`Nullable(String)`	Assignment status: `pending`, `active`, `failed`
`created_at`	`Nullable(DateTime64(6))`	Creation date
`updated_at`	`Nullable(DateTime64(6))`	Last update
`type`	`Nullable(String)`	Domain type: `custom`, `platform`

Relationships:

scope_id references core_entities_scope.id, the scope the domain is assigned to
organization_id references core_entities_organization.org_id, the owning organization

`core_entities_build`

Application builds (compilations). A build is the artifact resulting from compiling an application's source code at a specific commit. A successful build can produce multiple assets (Docker images, packages, etc.) and can give rise to one or more releases.

Engine: ReplicatedReplacingMergeTree | Sorting key: id

Column	Type	Description
`id`	`Int32`	Unique build identifier
`app_id`	`Nullable(Int32)`	Application that generated the build
`status`	`Nullable(String)`	Status: `pending`, `building`, `success`, `failed`, `cancelled`
`commit`	`Nullable(String)`	SHA hash of the commit that generated the build
`commit_permalink`	`Nullable(String)`	URL to the commit in the SCM provider
`branch`	`Nullable(String)`	Source code branch compiled
`description`	`Nullable(String)`	Description or notes associated with the build
`created_at`	`Nullable(DateTime64(6))`	Build start date
`updated_at`	`Nullable(DateTime64(6))`	Last update

Relationships:

app_id references core_entities_application.app_id, the application that generated the build
id is referenced by core_entities_asset.build_id, assets produced by this build
id is referenced by core_entities_release.build_id, releases created from this build
commit correlates with scm_code_commits.sha, the SCM repository commit

`core_entities_asset`

Assets generated by a build. An asset is a concrete artifact produced during the compilation process: a Docker image, an npm package, a zip file, etc. A build can generate multiple assets for different platforms (multi-arch).

Engine: ReplicatedReplacingMergeTree | Sorting key: id

Column	Type	Description
`id`	`Int32`	Unique asset identifier
`build_id`	`Nullable(Int32)`	Build that produced this asset
`type`	`Nullable(String)`	Asset type: `docker`, `zip`, `npm`, `jar`
`url`	`Nullable(String)`	Artifact URL in the registry or storage (e.g. ECR URI, S3 URL)
`metadata`	`Nullable(String)`	JSON with asset metadata (digest, tags, size)
`created_at`	`Nullable(DateTime64(6))`	Creation date
`updated_at`	`Nullable(DateTime64(6))`	Last update
`name`	`Nullable(String)`	Asset name
`platform`	`Nullable(String)`	Target platform of the asset (e.g. `linux/amd64`, `linux/arm64`)

Relationships:

build_id references core_entities_build.id, the build that generated this asset

`core_entities_release`

Versioned application releases. A release packages a build with a semantic version. It is the unit that gets deployed to scopes. It can pass through different states from creation until it is deprecated.

Engine: ReplicatedReplacingMergeTree | Sorting key: id

Column	Type	Description
`id`	`Int32`	Unique release identifier
`semver`	`Nullable(String)`	Semantic version of the release (e.g. `1.2.3`, `2.0.0-beta.1`)
`build_id`	`Nullable(Int32)`	Build included in this release
`status`	`Nullable(String)`	Status: `pending`, `active`, `deprecated`, `failed`
`app_id`	`Nullable(Int32)`	Application the release belongs to
`created_at`	`Nullable(DateTime64(6))`	Creation date
`updated_at`	`Nullable(DateTime64(6))`	Last update

Relationships:

build_id references core_entities_build.id, the build packaged in this release
app_id references core_entities_application.app_id, the application it belongs to
id is referenced by core_entities_deployment.release_id, deployments of this release
id is referenced by core_entities_deployment_group.release_id, deployment groups for this release

`core_entities_deployment`

Individual deployments of a release to a scope. A deployment is the act of delivering a release to an environment (scope). It records the strategy used, the lifecycle status, who initiated it, and operation timeouts.

Engine: ReplicatedReplacingMergeTree | Sorting key: id

Column	Type	Description
`id`	`Int32`	Unique deployment identifier
`scope_id`	`Nullable(Int32)`	Target scope of the deployment
`release_id`	`Nullable(Int32)`	Release being deployed
`strategy`	`Nullable(String)`	Deployment strategy used (e.g. `rolling`, `blue-green`, `canary`)
`status`	`Nullable(String)`	Overall status: `pending`, `deploying`, `success`, `failed`, `cancelled`
`strategy_data`	`Nullable(String)`	JSON with deployment strategy-specific data
`created_at`	`Nullable(DateTime64(6))`	Deployment start date
`updated_at`	`Nullable(DateTime64(6))`	Last update
`status_in_scope`	`Nullable(String)`	Deployment status in the target scope
`messages`	`Nullable(String)`	JSON with deployment process messages
`deployment_token`	`Nullable(String)`	Unique token to authenticate the deployment session
`expires_at`	`Nullable(DateTime64(6))`	When the deployment expires if pending
`deployment_group_id`	`Nullable(Int32)`	Deployment group it belongs to
`created_by`	`Nullable(Int32)`	User who created the deployment
`updated_by`	`Nullable(Int32)`	User who performed the last update
`status_started_at`	`Nullable(String)`	Timestamp when the current status started
`parameters`	`Nullable(String)`	JSON with additional deployment parameters
`external_strategy_id`	`Nullable(Int32)`	ID of the external strategy used

Relationships:

scope_id references core_entities_scope.id, the target scope of the deployment
release_id references core_entities_release.id, the release being deployed
deployment_group_id references core_entities_deployment_group.id, the deployment group it belongs to
created_by references auth_user.id, the user who initiated the deployment

`core_entities_deployment_group`

Deployment groups. A deployment group aggregates multiple deployments of the same release that are performed in a coordinated manner (e.g. simultaneous deployment across multiple scopes). Enables managing complex rollouts with centralized control of the global state.

Engine: ReplicatedReplacingMergeTree | Sorting key: id

Column	Type	Description
`id`	`Int32`	Unique deployment group identifier
`status`	`Nullable(String)`	Group status: `pending`, `in_progress`, `success`, `failed`, `cancelled`
`application_id`	`Nullable(Int32)`	Application the group belongs to
`strategy_data`	`Nullable(String)`	JSON with group strategy data
`created_at`	`Nullable(DateTime64(6))`	Creation date
`updated_at`	`Nullable(DateTime64(6))`	Last update
`release_id`	`Nullable(Int32)`	Release deployed by all deployments in the group
`last_directive`	`Nullable(String)`	Last instruction executed in the group
`deployments_amount`	`Nullable(Int32)`	Total number of deployments in the group
`created_by`	`Nullable(Int32)`	User who created the group
`updated_by`	`Nullable(Int32)`	User who performed the last update

Relationships:

application_id references core_entities_application.app_id, the group's application
release_id references core_entities_release.id, the release being deployed
created_by references auth_user.id, the user who created the group
id is referenced by core_entities_deployment.deployment_group_id, individual deployments in the group

`core_entities_deployment_strategy`

Available deployment strategies on the platform. Defines how a deployment is carried out (e.g. rolling update, blue-green, canary). Each strategy has configurable parameters and applies to specific scope types via the corresponding join table.

Engine: ReplicatedReplacingMergeTree | Sorting key: id

Column	Type	Description
`id`	`Int32`	Unique deployment strategy identifier
`name`	`Nullable(String)`	Strategy name (e.g. `Rolling Update`, `Blue-Green`)
`description`	`Nullable(String)`	Description of the strategy's behavior
`dimensions`	`Nullable(String)`	JSON with dimensions that define the application context
`parameters`	`Nullable(String)`	JSON with configurable strategy parameters
`created_by`	`Nullable(Int32)`	User who created the strategy
`updated_by`	`Nullable(Int32)`	User who performed the last update
`created_at`	`Nullable(DateTime64(6))`	Creation date
`updated_at`	`Nullable(DateTime64(6))`	Last update

Relationships:

id is referenced by core_entities_deployment_strategy_scope_type.deployment_strategy_id, compatible scope types for this strategy

`core_entities_deployment_strategy_scope_type`

Join table between deployment strategies and scope types. Defines which deployment strategies are available for each scope type, allowing the platform to offer only strategies compatible with the target infrastructure.

Engine: ReplicatedReplacingMergeTree | Sorting key: id

Column	Type	Description
`id`	`Int32`	Unique link identifier
`deployment_strategy_id`	`Nullable(Int32)`	Linked deployment strategy
`scope_type_id`	`Nullable(Int32)`	Linked scope type
`created_at`	`Nullable(DateTime64(6))`	Creation date
`updated_at`	`Nullable(DateTime64(6))`	Last update

Relationships:

deployment_strategy_id references core_entities_deployment_strategy.id, the deployment strategy
scope_type_id references core_entities_scope_type.id, the compatible scope type

`core_entities_runtime_configuration`

Runtime configurations for applications. A runtime configuration groups a set of environment variables or settings that are injected into scopes. It has dimensions that determine in which specific contexts the configuration applies.

Engine: ReplicatedReplacingMergeTree | Sorting key: id

Column	Type	Description
`id`	`Int32`	Unique runtime configuration identifier
`profile`	`Nullable(String)`	Configuration profile (e.g. `default`, `production`)
`status`	`Nullable(String)`	Status: `active`, `inactive`, `draft`
`stored_keys`	`Array(String)`	List of configuration keys stored in this runtime configuration
`created_at`	`Nullable(DateTime64(6))`	Creation date
`updated_at`	`Nullable(DateTime64(6))`	Last update
`dimensions`	`Nullable(String)`	JSON with dimensions that determine when this configuration applies

Relationships:

id is referenced by core_entities_runtime_configuration_scope.rc_id, scopes where this configuration is active
id is referenced by core_entities_runtime_configuration_values.rc_id, concrete values of this configuration by dimension

`core_entities_runtime_configuration_dimension`

Definition of available dimensions for runtime configurations. Dimensions allow segmenting configurations by context (e.g. by region, by environment, by tenant). The order field determines priority when resolving which value applies in a given context.

Engine: ReplicatedReplacingMergeTree | Sorting key: id

Column	Type	Description
`id`	`Int32`	Unique dimension identifier
`name`	`Nullable(String)`	Human-readable dimension name (e.g. `Region`, `Environment`)
`slug`	`Nullable(String)`	URL-safe slug (e.g. `region`, `environment`)
`status`	`Nullable(String)`	Status: `active`, `inactive`
`order`	`Nullable(Int32)`	Priority order for dimension resolution
`created_at`	`Nullable(DateTime64(6))`	Creation date
`updated_at`	`Nullable(DateTime64(6))`	Last update

Relationships:

id is referenced by core_entities_runtime_configuration_dimension_value.dimension_id, possible values of this dimension
id is referenced by core_entities_runtime_configuration_values.runtime_configuration_dimension_id, RC values that use this dimension

`core_entities_runtime_configuration_dimension_value`

Possible values of a runtime configuration dimension. For example, for the region dimension, the possible values might be us-east-1, eu-west-1, etc. Each value is linked to its parent dimension and can be active or inactive.

Engine: ReplicatedReplacingMergeTree | Sorting key: id

Column	Type	Description
`id`	`Int32`	Unique dimension value identifier
`name`	`Nullable(String)`	Human-readable value name (e.g. `US East (N. Virginia)`)
`slug`	`Nullable(String)`	URL-safe slug (e.g. `us-east-1`)
`status`	`Nullable(String)`	Status: `active`, `inactive`
`created_at`	`Nullable(DateTime64(6))`	Creation date
`updated_at`	`Nullable(DateTime64(6))`	Last update
`dimension_id`	`Nullable(Int32)`	Dimension this value belongs to

Relationships:

dimension_id references core_entities_runtime_configuration_dimension.id, the dimension it belongs to
id is referenced by core_entities_runtime_configuration_values.runtime_configuration_dimension_value_id, RC values that use this dimension value

`core_entities_runtime_configuration_scope`

Join table between runtime configurations and scopes. Defines which runtime configurations are active in each scope, allowing multiple configurations to apply simultaneously to the same scope with different dimensions.

Engine: ReplicatedReplacingMergeTree | Sorting key: id

Column	Type	Description
`id`	`Int32`	Unique link identifier
`rc_id`	`Nullable(Int32)`	Linked runtime configuration
`scope_id`	`Nullable(Int32)`	Scope where the configuration is active
`created_at`	`Nullable(DateTime64(6))`	Creation date
`updated_at`	`Nullable(DateTime64(6))`	Last update

Relationships:

rc_id references core_entities_runtime_configuration.id, the active runtime configuration
scope_id references core_entities_scope.id, the scope it applies to

`core_entities_runtime_configuration_values`

Concrete values of a runtime configuration according to its dimensions. Resolves which value applies for a specific combination of dimensions (e.g. configuration X with dimension region=us-east-1 has a given value). Contains references in both legacy (rc_dimension_id) and current format.

Engine: ReplicatedReplacingMergeTree | Sorting key: id

Column	Type	Description
`id`	`Int32`	Unique value identifier
`rc_id`	`Nullable(Int32)`	Runtime configuration this value belongs to
`rc_dimension_id`	`Nullable(Int32)`	Applied dimension (legacy field)
`rc_value_id`	`Nullable(Int32)`	Applied dimension value (legacy field)
`created_at`	`Nullable(DateTime64(6))`	Creation date
`updated_at`	`Nullable(DateTime64(6))`	Last update
`runtime_configuration_dimension_id`	`Nullable(Int32)`	Applied dimension (current field)
`runtime_configuration_dimension_value_id`	`Nullable(Int32)`	Applied dimension value (current field)

Relationships:

rc_id references core_entities_runtime_configuration.id, the runtime configuration it belongs to
runtime_configuration_dimension_id references core_entities_runtime_configuration_dimension.id, the applied dimension
runtime_configuration_dimension_value_id references core_entities_runtime_configuration_dimension_value.id, the dimension value

`core_entities_metadata`

Generic metadata associated with any platform entity. Allows extending entities with additional data without modifying their schema. Uses an EAV (Entity-Attribute-Value) model with typing via metadata_type.

Engine: ReplicatedReplacingMergeTree | Sorting key: entity, id, metadata_type

Column	Type	Description
`pk`	`String`	Composite partition key for efficient lookups
`sk`	`String`	Composite sort key
`id`	`String`	ID of the entity the metadata belongs to
`entity`	`String`	Entity type (e.g. `application`, `scope`, `deployment`)
`metadata_type`	`String`	Metadata type (e.g. `tags`, `annotations`, `settings`)
`specification_id`	`Nullable(String)`	ID of the specification that defines the metadata schema
`data`	`Nullable(String)`	JSON with the metadata data
`created_at`	`Nullable(DateTime64(6))`	Creation date
`updated_at`	`DateTime64(6)`	Last update

Relationships:

id + entity references the corresponding entity in its table (e.g. if entity='application', then id references core_entities_application.app_id)

`core_entities_technology_template`

Technology templates for application creation. A template defines the base structure of a new application: which template repository to use, which components to include, which tags to apply, and which configuration rules to follow. Can be scoped to an organization or account.

Engine: ReplicatedReplacingMergeTree | Sorting key: template_id

Column	Type	Description
`template_id`	`Int32`	Unique template identifier
`name`	`Nullable(String)`	Template name
`organization_id`	`Nullable(Int32)`	Organization that created the template
`account_id`	`Nullable(Int32)`	Account that owns the template
`status`	`Nullable(String)`	Status: `active`, `inactive`, `deprecated`
`url`	`Nullable(String)`	URL of the template repository used as a base
`provider`	`Nullable(String)`	SCM provider of the template repository
`components`	`Nullable(String)`	JSON with components included in the template
`metadata`	`Nullable(String)`	JSON with descriptive metadata about the template
`tags`	`Nullable(String)`	JSON with tags applied to applications created from this template
`created_at`	`Nullable(DateTime64(6))`	Creation date
`updated_at`	`Nullable(DateTime64(6))`	Last update
`repository_name`	`Nullable(String)`	Suggested name for the repository generated when using the template
`rules`	`Nullable(String)`	JSON with automatic configuration rules applied when creating apps from this template

Relationships:

organization_id references core_entities_organization.org_id, the owning organization
account_id references core_entities_account.account_id, the owning account
template_id is referenced by core_entities_application.template_id, applications created with this template

Approvals

Approval system for controlling changes on the platform. Allows defining policies that require explicit approval before executing operations (e.g. deployments to production, changes to secret parameters). Includes two subsystems: manual approvals (approvals_approval_*) and entity hooks (approvals_entity_hook_*) that trigger automations when changes are detected.

`approvals_policy`

Base policies of the approval system. Defines the general rules evaluated to decide whether an operation requires approval. It is the root entity of the policy tree and can be linked to multiple approval actions via the approvals_approval_action_policy join table.

Engine: ReplicatedReplacingMergeTree | Sorting key: id

Column	Type	Description
`id`	`Int32`	Unique policy identifier
`name`	`Nullable(String)`	Descriptive policy name
`slug`	`Nullable(String)`	URL-safe policy slug
`status`	`Nullable(String)`	Status: `active`, `inactive`
`created_at`	`Nullable(DateTime64(6))`	Creation date
`updated_at`	`Nullable(DateTime64(6))`	Last update

Relationships:

id is referenced by approvals_policy_value.policy_id, configuration versions of this policy
id is referenced by approvals_approval_action_policy.policy_id, approval actions that use this policy

`approvals_policy_value`

Configuration versions of a policy. Each time a policy is modified, a new value is created with the updated configuration. Contains the conditions and selectors that define when the policy applies, maintaining a complete change history.

Engine: ReplicatedReplacingMergeTree | Sorting key: id

Column	Type	Description
`id`	`Int32`	Unique policy value identifier
`policy_id`	`Nullable(Int32)`	Policy this configuration version belongs to
`version`	`Nullable(Int32)`	Version number of this configuration
`conditions`	`Nullable(String)`	JSON with conditions that must be met to activate the policy
`created_at`	`Nullable(DateTime64(6))`	Creation date
`updated_at`	`Nullable(DateTime64(6))`	Last update
`selector`	`Nullable(String)`	JSON with entity selectors this version applies to

Relationships:

policy_id references approvals_policy.id, the base policy this version belongs to

`approvals_approval_action`

Actions (operations) that require approval. Defines which entity and which action on that entity is subject to the approval flow (e.g. entity=deployment, action=create). Includes timeout configuration and the platform's behavior upon approval or rejection.

Engine: ReplicatedReplacingMergeTree | Sorting key: id

Column	Type	Description
`id`	`Int32`	Unique approval action identifier
`entity`	`Nullable(String)`	Entity type subject to approval (e.g. `deployment`, `parameter`)
`action`	`Nullable(String)`	Specific action controlled (e.g. `create`, `delete`, `update`)
`status`	`Nullable(String)`	Status: `active`, `inactive`
`dimensions`	`Nullable(String)`	JSON with dimensions that scope when this approval action applies
`on_policy_success`	`Nullable(String)`	Behavior when the request is approved (e.g. `proceed`, `notify`)
`on_policy_fail`	`Nullable(String)`	Behavior when the request is rejected (e.g. `block`, `notify`)
`time_to_reply`	`Nullable(Int64)`	Maximum time in seconds for approvers to respond
`allowed_time_to_execute`	`Nullable(Int64)`	Maximum time in seconds to execute the action once approved
`created_at`	`Nullable(DateTime64(6))`	Creation date
`updated_at`	`Nullable(DateTime64(6))`	Last update

Relationships:

id is referenced by approvals_approval_action_policy.approval_action_id, policies evaluated for this action
id is referenced by approvals_approval_request.approval_action_id, approval requests generated by this action

`approvals_approval_action_policy`

Join table between approval actions and policies. Defines which policies must be evaluated for a specific approval action. An approval action can require the evaluation of multiple policies simultaneously.

Engine: ReplicatedReplacingMergeTree | Sorting key: id

Column	Type	Description
`id`	`Int32`	Unique link identifier
`approval_action_id`	`Nullable(Int32)`	Linked approval action
`policy_id`	`Nullable(Int32)`	Linked policy
`created_at`	`Nullable(DateTime64(6))`	Creation date
`updated_at`	`Nullable(DateTime64(6))`	Last update

Relationships:

approval_action_id references approvals_approval_action.id, the action that requires approval
policy_id references approvals_policy.id, the policy to be evaluated

`approvals_approval_policy`

Approval-specific policies. Defines the approval rules for entity-action combinations: who must approve, how many approvals are needed, and in which dimensions the policy applies. It is the entry point for notifications and approval forms.

Engine: ReplicatedReplacingMergeTree | Sorting key: id

Column	Type	Description
`id`	`Int32`	Unique approval policy identifier
`entity`	`Nullable(String)`	Entity type the policy applies to
`action`	`Nullable(String)`	Action controlled by the policy
`status`	`Nullable(String)`	Status: `active`, `inactive`
`dimensions`	`Nullable(String)`	JSON with dimensions that scope the policy's applicability
`created_at`	`Nullable(DateTime64(6))`	Creation date
`updated_at`	`Nullable(DateTime64(6))`	Last update

Relationships:

id is referenced by approvals_approval_policy_notification.approval_policy_id, notification configuration for this policy
id is referenced by approvals_approval_policy_spec.approval_policy_id, forms linked to this policy
id is referenced by approvals_approval_request.approval_policy_id, requests generated by this policy

`approvals_approval_policy_notification`

Notification configuration for an approval policy. Defines through which channels and with what configuration approvers are notified when a new approval request is generated. Supports multiple channels per policy.

Engine: ReplicatedReplacingMergeTree | Sorting key: id

Column	Type	Description
`id`	`Int32`	Unique notification configuration identifier
`approval_policy_id`	`Nullable(Int32)`	Approval policy this notification belongs to
`type`	`Nullable(String)`	Notification channel: `slack`, `email`, `webhook`
`configuration_id`	`Nullable(Int32)`	ID of the channel configuration (credentials, recipients)
`created_at`	`Nullable(DateTime64(6))`	Creation date
`updated_at`	`Nullable(DateTime64(6))`	Last update

Relationships:

approval_policy_id references approvals_approval_policy.id, the policy this notification configuration belongs to

`approvals_approval_policy_spec`

Join table between approval policies and approval specs. Links which forms or data specifications must be completed by approvers when approving an approval request.

Engine: ReplicatedReplacingMergeTree | Sorting key: id

Column	Type	Description
`id`	`Int32`	Unique link identifier
`approval_policy_id`	`Nullable(Int32)`	Linked approval policy
`approval_spec_id`	`Nullable(Int32)`	Linked approval spec (form)
`created_at`	`Nullable(DateTime64(6))`	Creation date
`updated_at`	`Nullable(DateTime64(6))`	Last update

Relationships:

approval_policy_id references approvals_approval_policy.id, the policy this link belongs to
approval_spec_id references approvals_approval_spec.id, the form linked to the policy

`approvals_approval_spec`

Approval form specifications. Defines what additional information approvers must provide when approving or rejecting a request (e.g. "rejection reason", "reference ticket"). Each spec can have multiple versions of its validation rules.

Engine: ReplicatedReplacingMergeTree | Sorting key: id

Column	Type	Description
`id`	`Int32`	Unique form specification identifier
`name`	`Nullable(String)`	Form or specification name
`slug`	`Nullable(String)`	URL-safe slug
`status`	`Nullable(String)`	Status: `active`, `inactive`
`created_at`	`Nullable(DateTime64(6))`	Creation date
`updated_at`	`Nullable(DateTime64(6))`	Last update

Relationships:

id is referenced by approvals_approval_policy_spec.approval_spec_id, policies that use this form
id is referenced by approvals_approval_spec_value.approval_spec_id, validation rule versions of this form

`approvals_approval_spec_value`

Configuration versions of an approval spec. Each version contains the form's validation rules (required fields, types, constraints). Allows evolving the form structure without losing the history of previous versions.

Engine: ReplicatedReplacingMergeTree | Sorting key: id

Column	Type	Description
`id`	`Int32`	Unique spec version identifier
`approval_spec_id`	`Nullable(Int32)`	Form specification this version belongs to
`version`	`Nullable(Int32)`	Version number of this configuration
`rules`	`Nullable(String)`	JSON with form validation rules (fields, types, requirements)
`created_at`	`Nullable(DateTime64(6))`	Creation date
`updated_at`	`Nullable(DateTime64(6))`	Last update

Relationships:

approval_spec_id references approvals_approval_spec.id, the form this rule version belongs to

`approvals_approval_request`

Approval requests generated when a user attempts to execute an operation subject to a policy. Each request encapsulates all information about the intercepted operation, the status of its approval process, the HTTP requests involved, and expiration times.

Engine: ReplicatedReplacingMergeTree | Sorting key: id

Column	Type	Description
`id`	`Int32`	Unique approval request identifier
`entity_name`	`Nullable(String)`	Entity type in the intercepted operation
`entity_action`	`Nullable(String)`	Intercepted action (e.g. `create`, `delete`)
`entity_id`	`Nullable(String)`	ID of the entity affected by the operation
`status`	`Nullable(String)`	Status: `pending`, `approved`, `denied`, `cancelled`, `expired`, `executed`
`original_http_request_id`	`Nullable(Int32)`	ID of the original intercepted HTTP request
`authority_http_request_id`	`Nullable(Int32)`	ID of the authorization request sent to the originating service
`approval_http_request_id`	`Nullable(Int32)`	ID of the HTTP request sent upon approval
`denial_http_request_id`	`Nullable(Int32)`	ID of the HTTP request sent upon rejection
`approval_policy_id`	`Nullable(Int32)`	Policy that generated this request
`user_id`	`Nullable(Int32)`	User who originated the intercepted operation
`execution_status`	`Nullable(String)`	Post-approval execution status: `pending`, `success`, `failed`
`dimensions`	`Nullable(String)`	JSON with the intercepted operation's dimensions
`cancel_http_request_id`	`Nullable(Int32)`	ID of the HTTP request sent upon cancellation
`approval_action_id`	`Nullable(Int32)`	Approval action that triggered the creation of this request
`expires_at`	`Nullable(DateTime64(6))`	When the request expires if not answered by approvers
`execution_expires_at`	`Nullable(DateTime64(6))`	Time limit to execute the action once approved
`aggregator_entity_id`	`Nullable(String)`	ID of the aggregator entity if the request belongs to a larger process
`created_at`	`Nullable(DateTime64(6))`	Creation date
`updated_at`	`Nullable(DateTime64(6))`	Last update

Relationships:

approval_policy_id references approvals_approval_policy.id, the policy that generated this request
approval_action_id references approvals_approval_action.id, the action that triggered the request
user_id references auth_user.id, the user who originated the operation
id is referenced by approvals_approval_reply.approval_request_id, approver responses to this request

`approvals_approval_reply`

Approver responses to approval requests. Each reply records the decision made (approve or reject), the response body with the justification, and the headers of the request sent to execute the decision.

Engine: ReplicatedReplacingMergeTree | Sorting key: id

Column	Type	Description
`id`	`Int32`	Unique approver response identifier
`status`	`Nullable(String)`	Decision taken: `approved`, `denied`
`approval_request_id`	`Nullable(Int32)`	Approval request this response corresponds to
`created_at`	`Nullable(DateTime64(6))`	Response date
`updated_at`	`Nullable(DateTime64(6))`	Last update

Relationships:

approval_request_id references approvals_approval_request.id, the approval request this response belongs to

`approvals_entity_hook_policy`

Entity hook subsystem policies. Entity hooks allow triggering automations (HTTP webhooks, notifications) when events occur on entities. This table defines the policies that control which hooks fire and under what conditions.

Engine: ReplicatedReplacingMergeTree | Sorting key: id

Column	Type	Description
`id`	`UUID`	Unique hook policy identifier
`name`	`Nullable(String)`	Descriptive hook policy name
`slug`	`Nullable(String)`	URL-safe slug
`status`	`Nullable(String)`	Status: `active`, `inactive`
`created_at`	`Nullable(DateTime64(6))`	Creation date
`updated_at`	`Nullable(DateTime64(6))`	Last update

Relationships:

id is referenced by approvals_entity_hook_policy_value.policy_id, configuration versions of this policy
id is referenced by approvals_entity_hook_action_policy.policy_id, entity hook actions that use this policy

`approvals_entity_hook_policy_value`

Configuration versions of entity hook policies. Contains the conditions that determine when a hook fires, allowing you to update the activation logic without losing the history of previous versions.

Engine: ReplicatedReplacingMergeTree | Sorting key: id

Column	Type	Description
`id`	`UUID`	Unique policy version identifier
`policy_id`	`Nullable(Int32)`	Hook policy this version belongs to
`version`	`Nullable(Int32)`	Version number
`conditions`	`Nullable(String)`	JSON with hook activation conditions
`created_at`	`Nullable(DateTime64(6))`	Creation date
`updated_at`	`Nullable(DateTime64(6))`	Last update

Relationships:

policy_id references approvals_entity_hook_policy.id, the policy this configuration version belongs to

`approvals_entity_hook_action`

Entity hook action configuration. Defines which entities and actions activate the hook, what type of hook it is, and when it fires (pre or post operation). This is the base hook configuration and can be linked to one or more policies that condition its activation.

Engine: ReplicatedReplacingMergeTree | Sorting key: id

Column	Type	Description
`id`	`UUID`	Unique hook configuration identifier
`status`	`Nullable(String)`	Status: `active`, `inactive`
`entity`	`Nullable(String)`	Entity type that triggers the hook (e.g. `deployment`, `parameter`)
`action`	`Nullable(String)`	Action that triggers the hook (e.g. `create`, `update`, `delete`)
`dimensions`	`Nullable(String)`	JSON with dimensions that scope when this hook applies
`on_policy_success`	`Nullable(String)`	Platform behavior after policy success
`on_policy_fail`	`Nullable(String)`	Platform behavior on policy failure
`type`	`Nullable(String)`	Hook type: `webhook`, `notification`
`when`	`Nullable(String)`	Trigger timing: `pre` (before the operation) or `post` (after)
`on`	`Nullable(String)`	Specific event that triggers the hook
`created_at`	`Nullable(DateTime64(6))`	Creation date
`updated_at`	`Nullable(DateTime64(6))`	Last update

Relationships:

id is referenced by approvals_entity_hook_action_policy.entity_hook_action_id, policies evaluated for this hook
id is referenced by approvals_entity_hook_request.entity_hook_action_id, executions of this hook

`approvals_entity_hook_action_policy`

Join table between entity hook actions and entity hook policies. Links which policies are evaluated for a specific entity hook action before deciding whether the hook should fire.

Engine: ReplicatedReplacingMergeTree | Sorting key: id

Column	Type	Description
`id`	`UUID`	Unique link identifier
`entity_hook_action_id`	`Nullable(UUID)`	Linked entity hook action
`policy_id`	`Nullable(UUID)`	Linked hook policy
`created_at`	`Nullable(DateTime64(6))`	Creation date
`updated_at`	`Nullable(DateTime64(6))`	Last update

Relationships:

entity_hook_action_id references approvals_entity_hook_action.id, the linked hook configuration
policy_id references approvals_entity_hook_policy.id, the policy that conditions hook firing

`approvals_entity_hook_request`

Individual entity hook executions. Each record represents a hook firing attempt for a specific event. Captures the execution status, process messages, and the full context of the entity that originated the event.

Engine: ReplicatedReplacingMergeTree | Sorting key: id

Column	Type	Description
`id`	`UUID`	Unique hook execution identifier
`entity_name`	`Nullable(String)`	Entity type that originated the event
`entity_action`	`Nullable(String)`	Action that occurred on the entity
`entity_id`	`Nullable(String)`	ID of the affected entity
`status`	`Nullable(String)`	Execution status: `pending`, `processing`, `success`, `failed`
`user_id`	`Nullable(Int32)`	User who originated the event
`execution_status`	`Nullable(String)`	HTTP webhook execution status
`dimensions`	`Nullable(String)`	JSON with the event dimensions
`entity_hook_action_id`	`Nullable(UUID)`	Hook configuration that was triggered
`type`	`Nullable(String)`	Hook type executed: `webhook`, `notification`
`when`	`Nullable(String)`	Trigger timing: `pre` or `post`
`on`	`Nullable(String)`	Specific event that originated this execution
`dependencies`	`Nullable(String)`	JSON with dependencies of this request (related hooks)
`created_at`	`Nullable(DateTime64(6))`	Execution start date
`updated_at`	`Nullable(DateTime64(6))`	Last update

Relationships:

entity_hook_action_id references approvals_entity_hook_action.id, the hook configuration that generated this execution
user_id references auth_user.id, the user who originated the event
id is referenced by approvals_entity_hook_http_request.entity_hook_request_id, the HTTP request detail

`approvals_entity_hook_http_request`

HTTP request detail sent as part of an entity hook execution. Stores the full information of the HTTP call made to the webhook endpoint: method, URL, headers, body, and number of retries performed.

Engine: ReplicatedReplacingMergeTree | Sorting key: id

Column	Type	Description
`id`	`UUID`	Unique HTTP request identifier
`entity_hook_request_id`	`Nullable(UUID)`	Hook execution this request belongs to
`headers`	`Nullable(String)`	JSON with HTTP headers sent in the request
`method`	`Nullable(String)`	HTTP method used (e.g. `POST`, `PUT`)
`url`	`Nullable(String)`	Destination endpoint URL of the webhook
`retries`	`Nullable(Int32)`	Number of retries performed until a response was obtained
`type`	`Nullable(String)`	Request type within the hook flow
`created_at`	`Nullable(DateTime64(6))`	Send date
`updated_at`	`Nullable(DateTime64(6))`	Last update

Relationships:

entity_hook_request_id references approvals_entity_hook_request.id, the hook execution it belongs to
id is referenced by approvals_entity_hook_http_response.entity_hook_http_request_id, the HTTP response received

`approvals_entity_hook_http_response`

HTTP response received after executing an entity hook webhook. Stores the status code, headers, and response body for diagnostics and auditing. Allows verifying whether the external endpoint successfully processed the event.

Engine: ReplicatedReplacingMergeTree | Sorting key: id

Column	Type	Description
`id`	`UUID`	Unique HTTP response identifier
`status`	`Nullable(Int32)`	HTTP response code (200, 4xx, 5xx)
`entity_hook_http_request_id`	`Nullable(UUID)`	HTTP request this response corresponds to
`created_at`	`Nullable(DateTime64(6))`	Response reception date
`updated_at`	`Nullable(DateTime64(6))`	Last update

Relationships:

entity_hook_http_request_id references approvals_entity_hook_http_request.id, the HTTP request this response corresponds to

Governance

Platform governance system. Manages action items that represent tasks, recommendations, or compliance issues that must be resolved on resources. Action items are categorized, prioritized, and can have automatic resolution suggestions.

`governance_action_items_action_items`

Governance action items. Each record represents a task, alert, or compliance recommendation linked to a platform resource. They can be generated automatically by the system or created manually. They have priority, score, and a due date for SLA management.

Engine: ReplicatedReplacingMergeTree | Sorting key: action_item_id

Column	Type	Description
`action_item_id`	`String`	Unique action item identifier
`action_item_slug`	`Nullable(String)`	URL-safe action item slug for external references
`title`	`Nullable(String)`	Descriptive action item title (e.g. `Missing health check configuration`)
`description`	`Nullable(String)`	Detailed description of the problem or task to resolve
`status`	`Nullable(String)`	Status: `open`, `in_progress`, `resolved`, `deferred`, `dismissed`
`priority`	`Nullable(String)`	Priority: `critical`, `high`, `medium`, `low`
`score`	`Nullable(Int32)`	Numeric impact score for sorting and maturity index calculations
`created_by`	`Nullable(String)`	Identifier of who or what system generated the action item
`category_id`	`Nullable(String)`	Action item category
`unit_id`	`Nullable(String)`	Measurement unit for the value
`value`	`Nullable(String)`	Current metric value associated with the action item
`due_date`	`Nullable(DateTime64(6))`	Deadline to resolve the action item
`deferred_until`	`Nullable(DateTime64(6))`	Date until which it was postponed (if `status = deferred`)
`resolved_at`	`Nullable(DateTime64(6))`	Timestamp when it was marked as resolved
`labels`	`Nullable(String)`	JSON labels for additional classification
`affected_resources`	`Nullable(String)`	JSON with resources affected by this action item
`references`	`Nullable(String)`	JSON with external references (documentation, tickets, links)
`metadata`	`Nullable(String)`	Additional metadata in JSON format
`config`	`Nullable(String)`	Action item type-specific configuration in JSON
`comments`	`Nullable(String)`	JSON with user comments on the action item
`audit_logs`	`Nullable(String)`	JSON with the action item's status change history
`deferral_count`	`Nullable(Int32)`	Number of times the item was deferred
`created_at`	`Nullable(DateTime64(6))`	Creation date
`updated_at`	`Nullable(DateTime64(6))`	Last update

Relationships:

category_id references governance_action_items_categories.category_id, the thematic category of the action item
unit_id references governance_action_items_units.unit_id, the measurement unit for the reported value
action_item_id is referenced by governance_action_items_suggestions.action_item_id, resolution suggestions for this action item
nrn references the affected resource (application, namespace, etc.)

`governance_action_items_categories`

Categories for classifying governance action items. Allow grouping action items by topic (e.g. Security, Observability, Costs). Support parent-child hierarchy for subcategories.

Engine: ReplicatedReplacingMergeTree | Sorting key: category_id

Column	Type	Description
`category_id`	`String`	Unique category identifier
`category_slug`	`Nullable(String)`	URL-safe category slug
`parent_id`	`Nullable(String)`	Parent category for hierarchies
`category_name`	`Nullable(String)`	Human-readable category name (e.g. `Security`, `Cost Optimization`)
`description`	`Nullable(String)`	Description of the types of action items this category encompasses
`color`	`Nullable(String)`	Hex color for UI visualization
`icon`	`Nullable(String)`	Icon identifier for the UI
`config`	`Nullable(String)`	Additional category configuration in JSON
`status`	`Nullable(String)`	Status: `active`, `inactive`
`created_at`	`Nullable(DateTime64(6))`	Creation date
`updated_at`	`Nullable(DateTime64(6))`	Last update

Relationships:

parent_id references governance_action_items_categories.category_id, self-reference for subcategories
category_id is referenced by governance_action_items_action_items.category_id, action items classified in this category

`governance_action_items_suggestions`

Automatic or manual suggestions for resolving an action item. A suggestion can be executed directly by the system (e.g. apply a recommended configuration) or serve as guidance for the user.

Engine: ReplicatedReplacingMergeTree | Sorting key: suggestion_id

Column	Type	Description
`suggestion_id`	`String`	Unique suggestion identifier
`suggestion_slug`	`Nullable(String)`	URL-safe suggestion slug
`action_item_id`	`Nullable(String)`	Action item this suggestion belongs to
`status`	`Nullable(String)`	Status: `pending`, `applied`, `dismissed`, `expired`
`created_by`	`Nullable(String)`	Who or what system generated the suggestion
`owner`	`Nullable(String)`	User or system responsible for executing the suggestion
`confidence`	`Nullable(String)`	Confidence level in the suggestion: `high`, `medium`, `low`
`description`	`Nullable(String)`	Description of the proposed action
`metadata`	`Nullable(String)`	Metadata from the system that generated the suggestion
`user_metadata`	`Nullable(String)`	Additional metadata entered by the user
`user_metadata_config`	`Nullable(String)`	Expected user configuration schema
`executed_at`	`Nullable(DateTime64(6))`	Execution timestamp if applied
`execution_result`	`Nullable(String)`	Execution result (success, error, output)
`expires_at`	`Nullable(DateTime64(6))`	Suggestion expiration date
`created_at`	`Nullable(DateTime64(6))`	Creation date
`updated_at`	`Nullable(DateTime64(6))`	Last update

Relationships:

action_item_id references governance_action_items_action_items.action_item_id, the action item this suggestion belongs to

`governance_action_items_units`

Measurement units used by action items to express their value (e.g. %, USD, ms, count). Allow interpreting and comparing the value field of action items.

Engine: ReplicatedReplacingMergeTree | Sorting key: unit_id

Column	Type	Description
`unit_id`	`String`	Unique unit identifier
`unit_slug`	`Nullable(String)`	URL-safe unit slug
`unit_name`	`Nullable(String)`	Human-readable name (e.g. `Percentage`, `US Dollar`, `Milliseconds`)
`symbol`	`Nullable(String)`	Unit symbol (e.g. `%`, `$`, `ms`)
`status`	`Nullable(String)`	Status: `active`, `inactive`
`created_at`	`Nullable(DateTime64(6))`	Creation date
`updated_at`	`Nullable(DateTime64(6))`	Last update

Relationships:

unit_id is referenced by governance_action_items_action_items.unit_id, action items that use this measurement unit

Parameters

Configuration parameter management system (environment variables, secrets, and configurations). Parameters can be versioned and support different value contexts through dimensions.

`parameters_parameter`

Configuration parameter definition. Represents the parameter "declaration": its name, type, whether it is secret, and how it is encoded. The actual values are stored in parameters_parameter_value and the change history in parameters_parameter_version.

Engine: ReplicatedReplacingMergeTree | Sorting key: id

Column	Type	Description
`id`	`Int32`	Unique parameter identifier
`name`	`Nullable(String)`	Parameter name as exposed (e.g. `DATABASE_URL`, `API_KEY`)
`type`	`Nullable(String)`	Parameter type: `string`, `integer`, `boolean`, `json`
`secret`	`Nullable(UInt8)`	Whether the value is sensitive and must be encrypted (`1` = yes)
`handle`	`Nullable(String)`	Immutable technical identifier of the parameter, used in integrations
`created_at`	`Nullable(DateTime64(6))`	Creation date
`updated_at`	`Nullable(DateTime64(6))`	Last definition modification
`encoding`	`Nullable(String)`	Value encoding: `plain`, `base64`
`read_only`	`Nullable(UInt8)`	Whether it is in read-only mode (`1` = cannot be modified via API)

Relationships:

id is referenced by parameters_parameter_value.parameter_id, concrete values of this parameter
id is referenced by parameters_parameter_version.parameter_id, version history of this parameter

`parameters_parameter_value`

Concrete parameter value for a given context (dimensions). A single parameter can have multiple active values depending on the dimensions (e.g. different values for different environments or regions). The actual value may be stored in an external backend referenced by the external field.

Engine: ReplicatedReplacingMergeTree | Sorting key: id

Column	Type	Description
`id`	`Int64`	Unique value identifier
`location`	`Nullable(String)`	Value location in the storage backend (e.g. SSM path, Secrets Manager ARN)
`created_at`	`Nullable(DateTime64(6))`	Value creation date
`updated_at`	`Nullable(DateTime64(6))`	Last update
`parameter_id`	`Nullable(Int32)`	Parameter this value belongs to
`parameter_version`	`Nullable(Int32)`	Parameter version in which it was created
`strategy_data`	`Nullable(String)`	JSON with encryption strategy data used (includes strategy ID)
`dimensions`	`Nullable(String)`	JSON with dimensions that determine when this value applies (e.g. `{"env": "production"}`)
`external`	`Nullable(String)`	JSON with reference to the external storage where the actual value is stored
`checksum`	`Nullable(String)`	Value checksum for integrity verification without exposing the content

Relationships:

parameter_id references parameters_parameter.id, the parameter this value corresponds to
parameter_version references parameters_parameter_version.id, the parameter version in which it was created

`parameters_parameter_version`

Parameter version history. Each time a parameter definition is modified, a new version is created. Allows auditing who changed a parameter and when, and is referenced by values to indicate in which version they were created.

Engine: ReplicatedReplacingMergeTree | Sorting key: id

Column	Type	Description
`id`	`Int32`	Parameter version number
`parameter_id`	`Nullable(Int32)`	Parameter this version corresponds to
`user_id`	`Nullable(Int32)`	User who created this version
`created_at`	`Nullable(DateTime64(6))`	Date this version was created
`updated_at`	`Nullable(DateTime64(6))`	Last update

Relationships:

parameter_id references parameters_parameter.id, the parameter this version belongs to
user_id references auth_user.id, the user who made the change
id is referenced by parameters_parameter_value.parameter_version, values created under this version

SCM

Integration with version control providers (GitHub, GitLab, Bitbucket). Stores repository and commit metadata synchronized from customers' SCM systems.

note

SCM tables require the nullplatform SCM integration to be enabled for your organization. Reach out to the nullplatform team to set it up.

`scm_code_repositories`

Source code repositories registered on the platform. Each repository belongs to an SCM organization (GitHub/GitLab/Bitbucket account) and is linked to one or more nullplatform applications.

Engine: ReplicatedReplacingMergeTree | Sorting key: nrn, id

Column	Type	Description
`id`	`UUID`	Unique repository identifier in nullplatform
`external_repository_id`	`String`	Repository ID in the external SCM system (e.g. the GitHub repo ID)
`name`	`String`	Repository name as it appears in the SCM
`provider`	`String`	SCM provider: `github`, `gitlab`, `bitbucket`
`stars`	`Int64`	Number of stars on the repository
`forks`	`Int64`	Number of repository forks
`language`	`Nullable(String)`	Primary programming language detected
`private`	`UInt8`	Whether the repository is private (`1`) or public (`0`)
`description`	`Nullable(String)`	Repository description from the SCM
`url`	`Nullable(String)`	Repository web URL (e.g. `https://github.com/org/repo`)
`date_created`	`Nullable(DateTime64(6))`	Creation date in the external SCM
`scm_organization_id`	`UUID`	ID of the SCM organization the repository belongs to
`scm_organization_name`	`Nullable(String)`	Organization name in the SCM (e.g. the GitHub org name)
`scm_organization_provider`	`Nullable(String)`	SCM organization provider
`scm_organization_host`	`Nullable(String)`	SCM host for self-hosted installations (e.g. `github.example.com`)
`scm_organization_installation_status`	`Nullable(String)`	Installation status of the SCM app in the organization
`tags`	`Map(String, String)`	Key-value tags for classification and filtering
`created_at`	`DateTime64(6)`	Sync/creation date in nullplatform
`updated_at`	`DateTime64(6)`	Last update

Relationships:

id is referenced by scm_code_commits.code_repository_id, commits belonging to this repository
nrn correlates with core_entities_application.nrn, applications reference repositories via repository_url

`scm_code_commits`

Individual commits synchronized from SCM repositories. Allows correlating deployments with the source code that originated them, tracking development activity, and calculating commit frequency metrics.

Engine: ReplicatedReplacingMergeTree | Sorting key: nrn, code_repository_id, date, id

Column	Type	Description
`id`	`UUID`	Unique commit identifier in nullplatform
`sha`	`String`	Commit SHA hash in the SCM system (e.g. `a3f8c2d...`)
`message`	`Nullable(String)`	Commit message
`author_name`	`Nullable(String)`	Commit author name from git configuration
`author_email`	`Nullable(String)`	Commit author email
`date`	`DateTime64(6)`	Date and time the commit was made
`code_repository_id`	`UUID`	Repository this commit belongs to
`created_at`	`DateTime64(6)`	Ingestion date in nullplatform
`updated_at`	`DateTime64(6)`	Last update

Relationships:

code_repository_id references scm_code_repositories.id, the repository the commit belongs to
sha is referenced by core_entities_build.commit, builds reference the SHA of the commit that originated them

Services

Infrastructure service catalog that applications can consume (databases, message queues, caches, etc.). A service is an instance of an infrastructure type; specifications define the available types. Links connect applications to services.

`services_service_specifications`

Specifications for available service types in the catalog. Defines which infrastructure types can be created (e.g. PostgreSQL, Redis, SQS). Each specification is a "template" that describes the attributes, dimensions, and behavior of the service type, and determines which organizations or entities can use it.

Engine: ReplicatedReplacingMergeTree | Sorting key: id

Column	Type	Description
`id`	`UUID`	Unique specification identifier
`name`	`Nullable(String)`	Human-readable service type name (e.g. `PostgreSQL Database`, `Redis Cache`)
`slug`	`Nullable(String)`	URL-safe type slug (e.g. `postgresql`, `redis`)
`created_at`	`Nullable(DateTime64(6))`	Creation date
`updated_at`	`Nullable(DateTime64(6))`	Last update
`deleted_at`	`Nullable(DateTime64(6))`	Logical deletion date
`attributes`	`Nullable(String)`	JSON with configurable service attributes (e.g. version, size)
`selectors`	`Nullable(String)`	JSON with selectors that determine application compatibility
`visible_to`	`Nullable(String)`	Defines which organizations or user types can see this specification
`type`	`Nullable(String)`	Service category: `database`, `queue`, `cache`, `storage`
`dimensions`	`Nullable(String)`	JSON with dimensions available for instances of this type
`assignable_to`	`Nullable(String)`	Defines which entity types this service can be assigned to
`use_default_actions`	`Nullable(UInt8)`	Whether it uses the platform's default actions (`1` = yes)
`scopes`	`Nullable(String)`	JSON with scopes where this type can be deployed

Relationships:

id is referenced by services_services.specification_id, service instances of this type
id is referenced by services_action_specifications.service_specification_id, actions available for this service type
id is referenced by services_link_specifications.specification_id, link types available for this service type

`services_services`

Concrete infrastructure service instances. Each service is an instance of a service_specification that has been provisioned for an application. It has lifecycle state and is linked to the NRN of the resource that consumes it. It may be in the process of updating to a desired_specification_id different from the active one.

Engine: ReplicatedReplacingMergeTree | Sorting key: id

Column	Type	Description
`id`	`UUID`	Unique service instance identifier
`name`	`Nullable(String)`	Instance name (e.g. `prod-db`, `cache-main`)
`slug`	`Nullable(String)`	URL-safe instance slug
`messages`	`Nullable(String)`	JSON with system messages about the service status
`created_at`	`Nullable(DateTime64(6))`	Creation date
`updated_at`	`Nullable(DateTime64(6))`	Last update
`deleted_at`	`Nullable(DateTime64(6))`	Deletion date
`dimensions`	`Nullable(String)`	JSON with dimensions applied to this instance (e.g. `{"size": "large"}`)
`attributes`	`Nullable(String)`	JSON with instance attributes (endpoints, non-secret credentials, region)
`selectors`	`Nullable(String)`	JSON with active selectors for this instance
`status`	`Nullable(String)`	Lifecycle status: `creating`, `active`, `updating`, `deleting`, `failed`
`linkable_to`	`Nullable(String)`	Defines which entity types this service can be linked to
`specification_id`	`Nullable(UUID)`	Active service specification
`desired_specification_id`	`Nullable(UUID)`	Target specification if an update is in progress
`entity_nrn`	`Nullable(String)`	NRN of the entity (application or link) this service is associated with
`type`	`Nullable(String)`	Type inherited from the specification: `database`, `queue`, `cache`, `storage`

Relationships:

specification_id references services_service_specifications.id, the active service type
desired_specification_id references services_service_specifications.id, the target service type in case of update
id is referenced by services_links.service_id, links that consume this service
id is referenced by services_actions.service_id, actions executed on this service
id is referenced by services_parameters.service_id, parameters exported by this service

`services_link_specifications`

Link type specifications. Links connect applications to services. A link specification defines the attributes, dimensions, and constraints of a connection type (e.g. "PostgreSQL database connection"). Each link specification belongs to a parent service specification.

Engine: ReplicatedReplacingMergeTree | Sorting key: id

Column	Type	Description
`id`	`UUID`	Unique link specification identifier
`name`	`Nullable(String)`	Human-readable link type name
`slug`	`Nullable(String)`	URL-safe slug
`created_at`	`Nullable(DateTime64(6))`	Creation date
`updated_at`	`Nullable(DateTime64(6))`	Last update
`deleted_at`	`Nullable(DateTime64(6))`	Deletion date
`dimensions`	`Nullable(String)`	JSON with dimensions available for links of this type
`attributes`	`Nullable(String)`	JSON with configurable connection attributes (e.g. pool size, SSL)
`selectors`	`Nullable(String)`	JSON with selectors for determining entity compatibility
`specification_id`	`Nullable(UUID)`	Parent service specification
`visible_to`	`Nullable(String)`	Visibility of this link type
`unique`	`Nullable(UInt8)`	Whether only one instance can exist per entity (`1` = yes)
`assignable_to`	`Nullable(String)`	Defines which entity types it can be assigned to
`use_default_actions`	`Nullable(UInt8)`	Whether it uses the platform's default actions (`1` = yes)
`scopes`	`Nullable(String)`	JSON with scopes where it can be created
`external`	`Nullable(String)`	JSON with external integration configuration

Relationships:

specification_id references services_service_specifications.id, the service type this link type belongs to
id is referenced by services_links.specification_id, link instances of this type
id is referenced by services_action_specifications.link_specification_id, actions available for this link type

`services_links`

Link instances: concrete connections between an entity (application, scope) and a service. When a link is created, the platform provisions the credentials and configuration necessary for the application to access the service. Like services, a link may be in the process of updating to a desired_specification_id.

Engine: ReplicatedReplacingMergeTree | Sorting key: id

Column	Type	Description
`id`	`UUID`	Unique link identifier
`name`	`Nullable(String)`	Connection name
`slug`	`Nullable(String)`	URL-safe slug
`messages`	`Nullable(String)`	JSON with system messages about the status
`created_at`	`Nullable(DateTime64(6))`	Creation date
`updated_at`	`Nullable(DateTime64(6))`	Last update
`deleted_at`	`Nullable(DateTime64(6))`	Deletion date
`dimensions`	`Nullable(String)`	JSON with connection dimensions
`attributes`	`Nullable(String)`	JSON with active connection attributes
`selectors`	`Nullable(String)`	JSON with active selectors
`status`	`Nullable(String)`	Status: `creating`, `active`, `updating`, `deleting`, `failed`
`specification_id`	`Nullable(UUID)`	Active link specification
`desired_specification_id`	`Nullable(UUID)`	Target specification if an update is in progress
`service_id`	`Nullable(UUID)`	Service this link connects to
`entity_nrn`	`Nullable(String)`	NRN of the entity (application, scope) that consumes the link
`parameter_slug_algorithm_version`	`Nullable(String)`	Version of the algorithm for generating link parameter slugs

Relationships:

specification_id references services_link_specifications.id, the active link type
desired_specification_id references services_link_specifications.id, the target link type in case of update
service_id references services_services.id, the service it connects to
id is referenced by services_actions.link_id, actions executed on this link

`services_action_specifications`

Action specifications available for services and links. An action specification defines an operation that can be executed (e.g. restart, resize, create-backup). It can belong to a service specification or a link specification, but not both simultaneously.

Engine: ReplicatedReplacingMergeTree | Sorting key: id

Column	Type	Description
`id`	`UUID`	Unique action specification identifier
`name`	`Nullable(String)`	Human-readable action name (e.g. `Restart Service`, `Create Backup`)
`slug`	`Nullable(String)`	URL-safe action slug (e.g. `restart`, `create-backup`)
`created_at`	`Nullable(DateTime64(6))`	Creation date
`updated_at`	`Nullable(DateTime64(6))`	Last update
`deleted_at`	`Nullable(DateTime64(6))`	Deletion date
`parameters`	`Nullable(String)`	JSON with input parameters the action accepts
`results`	`Nullable(String)`	JSON with the result structure the action returns
`type`	`Nullable(String)`	Action type: `sync`, `async`, `webhook`
`service_specification_id`	`Nullable(UUID)`	Service specification this action belongs to
`link_specification_id`	`Nullable(UUID)`	Link specification this action belongs to (alternative)
`retryable`	`Nullable(UInt8)`	Whether the action can be automatically retried on failure (`1` = yes)
`annotations`	`Nullable(String)`	JSON with annotations and UI metadata
`enabled_when`	`Nullable(String)`	JSON condition that determines when the action is available
`icon`	`Nullable(String)`	Icon to display in the UI
`parallelize`	`Nullable(UInt8)`	Whether it can be executed in parallel on multiple instances (`1` = yes)
`external`	`Nullable(String)`	JSON with external execution configuration

Relationships:

service_specification_id references services_service_specifications.id, the service type this action belongs to
link_specification_id references services_link_specifications.id, the link type this action belongs to
id is referenced by services_actions.specification_id, executions of this action

`services_actions`

Action instances executed on services or links. Each record represents a concrete execution of an action_specification (e.g. a restart executed at 14:30). Has its own execution lifecycle status and records the input parameters and the result obtained.

Engine: ReplicatedReplacingMergeTree | Sorting key: id

Column	Type	Description
`id`	`UUID`	Unique action execution identifier
`name`	`Nullable(String)`	Name of the executed action
`slug`	`Nullable(String)`	Action slug
`created_at`	`Nullable(DateTime64(6))`	Execution start date
`updated_at`	`Nullable(DateTime64(6))`	Last update
`deleted_at`	`Nullable(DateTime64(6))`	Deletion date
`parameters`	`Nullable(String)`	JSON with input parameters the action was invoked with
`results`	`Nullable(String)`	JSON with the execution result
`status`	`Nullable(String)`	Execution status: `pending`, `running`, `success`, `failed`, `cancelled`
`specification_id`	`Nullable(UUID)`	Specification of the executed action
`desired_specification_id`	`Nullable(UUID)`	Target specification if an update is in progress
`service_id`	`Nullable(UUID)`	Service the action was executed on
`link_id`	`Nullable(UUID)`	Link the action was executed on (alternative to `service_id`)
`is_test`	`Nullable(UInt8)`	Whether it is a test execution (`1` = yes)
`created_by`	`Nullable(String)`	Identifier of the user or system that triggered the action

Relationships:

specification_id references services_action_specifications.id, the definition of the executed action
service_id references services_services.id, the service it was executed on
link_id references services_links.id, the link it was executed on

`services_parameters`

Parameters exported by services and links to the entities that consume them. When a link is activated, it generates parameters (e.g. DATABASE_URL, REDIS_HOST) that are automatically injected into the application. This table records those binding relationships between the service and the resulting parameter.

Engine: ReplicatedReplacingMergeTree | Sorting key: id

Column	Type	Description
`id`	`UUID`	Unique parameter binding identifier
`entity_nrn`	`Nullable(String)`	NRN of the entity that receives the parameter (application or scope)
`type`	`Nullable(String)`	Binding type: how the parameter is injected (e.g. `env_var`, `file`)
`target`	`Nullable(String)`	Name under which the parameter is exposed in the entity (e.g. `DATABASE_URL`)
`parameter_id`	`Nullable(String)`	Reference to the parameter in the parameter management system
`service_id`	`Nullable(UUID)`	Service that exports the parameter
`created_at`	`Nullable(DateTime64(6))`	Creation date
`updated_at`	`Nullable(DateTime64(6))`	Last update
`deleted_at`	`Nullable(DateTime64(6))`	Deletion date

Relationships:

service_id references services_services.id, the service that generates this parameter
parameter_id references parameters_parameter.id, the parameter created in the parameter management system

Next steps

Connect with a driver: set up a connection from Java, Kotlin, Python, or Node.js.
Data lake overview: query syntax, restrictions, access control, and rate limits.

Common columns
Domain index
Audit
- audit_events
Auth
Core
Approvals
Governance
Parameters
SCM
- scm_code_repositories
- scm_code_commits
Services
Next steps

Common columns​

Domain index​

Audit​

audit_events​

Auth​

auth_apikey​

auth_resource_grants​

auth_resource_grants_expanded​

auth_role​

auth_user​

Core​

core_entities_organization​

core_entities_account​

core_entities_namespace​

core_entities_application​

core_entities_scope​

core_entities_scope_type​

core_entities_scope_dimension​

core_entities_scope_domain​

core_entities_build​

core_entities_asset​

core_entities_release​

core_entities_deployment​

core_entities_deployment_group​

core_entities_deployment_strategy​

core_entities_deployment_strategy_scope_type​

core_entities_runtime_configuration​

core_entities_runtime_configuration_dimension​

core_entities_runtime_configuration_dimension_value​

core_entities_runtime_configuration_scope​

core_entities_runtime_configuration_values​

core_entities_metadata​

core_entities_technology_template​

Approvals​

approvals_policy​

approvals_policy_value​

approvals_approval_action​

approvals_approval_action_policy​

approvals_approval_policy​

approvals_approval_policy_notification​

approvals_approval_policy_spec​

approvals_approval_spec​

approvals_approval_spec_value​

approvals_approval_request​

approvals_approval_reply​

approvals_entity_hook_policy​

approvals_entity_hook_policy_value​

approvals_entity_hook_action​

approvals_entity_hook_action_policy​

approvals_entity_hook_request​

approvals_entity_hook_http_request​

approvals_entity_hook_http_response​

Governance​

governance_action_items_action_items​

governance_action_items_categories​

governance_action_items_suggestions​

governance_action_items_units​

Parameters​

parameters_parameter​

parameters_parameter_value​

parameters_parameter_version​

SCM​

scm_code_repositories​

scm_code_commits​

Services​

services_service_specifications​

services_services​

services_link_specifications​

services_links​

services_action_specifications​

services_actions​

services_parameters​

Next steps​

Common columns

Domain index

Audit

`audit_events`

Auth

`auth_apikey`

`auth_resource_grants`

`auth_resource_grants_expanded`

`auth_role`

`auth_user`

Core

`core_entities_organization`

`core_entities_account`

`core_entities_namespace`

`core_entities_application`

`core_entities_scope`

`core_entities_scope_type`

`core_entities_scope_dimension`

`core_entities_scope_domain`

`core_entities_build`

`core_entities_asset`

`core_entities_release`

`core_entities_deployment`

`core_entities_deployment_group`

`core_entities_deployment_strategy`

`core_entities_deployment_strategy_scope_type`

`core_entities_runtime_configuration`

`core_entities_runtime_configuration_dimension`

`core_entities_runtime_configuration_dimension_value`

`core_entities_runtime_configuration_scope`

`core_entities_runtime_configuration_values`

`core_entities_metadata`

`core_entities_technology_template`

Approvals

`approvals_policy`

`approvals_policy_value`

`approvals_approval_action`

`approvals_approval_action_policy`

`approvals_approval_policy`

`approvals_approval_policy_notification`

`approvals_approval_policy_spec`

`approvals_approval_spec`

`approvals_approval_spec_value`

`approvals_approval_request`

`approvals_approval_reply`

`approvals_entity_hook_policy`

`approvals_entity_hook_policy_value`

`approvals_entity_hook_action`

`approvals_entity_hook_action_policy`

`approvals_entity_hook_request`

`approvals_entity_hook_http_request`

`approvals_entity_hook_http_response`

Governance

`governance_action_items_action_items`

`governance_action_items_categories`

`governance_action_items_suggestions`

`governance_action_items_units`

Parameters

`parameters_parameter`

`parameters_parameter_value`

`parameters_parameter_version`

SCM

`scm_code_repositories`

`scm_code_commits`

Services

`services_service_specifications`

`services_services`

`services_link_specifications`

`services_links`

`services_action_specifications`

`services_actions`

`services_parameters`

Next steps