Encore OS — Documentation

Generated by npm run db:docs:generate — DO NOT EDIT BY HAND. Change the schema via a migration, then regenerate.

Core: fw_ · Tables: 102 · Source generated: 2026-06-10T02:55:32.169Z

Entity relationships

Tables

`fw_action_templates`

Pre-built action templates for common automation workflows RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`name`	text	no
`description`	text	yes
`action_type`	action_type	no
`template_config`	jsonb	no
`category`	text	yes
`is_system`	boolean	yes	false
`organization_id`	uuid	yes
`created_by`	uuid	yes
`created_at`	timestamp with time zone	yes	now()
`updated_at`	timestamp with time zone	yes	now()
`custom_fields`	jsonb	no	’{}‘::jsonb	Action template metadata (e.g., cost center, approval requirements)
`updated_by`	uuid	yes		User who last updated this record

Foreign keys:

created_by → pf_profiles(id)
organization_id → pf_organizations(id)
updated_by → users(id)

Policies:

Authenticated users can view templates (SELECT)
Users can create org templates (INSERT)
Users can delete own templates (DELETE)
Users can update own templates (UPDATE)

`fw_api_connections`

RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`connection_name`	text	no
`connection_type`	text	no
`description`	text	yes
`base_url`	text	yes
`default_headers`	jsonb	yes	’{}‘::jsonb
`auth_type`	text	yes
`auth_config_secret_id`	text	yes
`sftp_host`	text	yes
`sftp_port`	integer	yes	22
`sftp_username`	text	yes
`sftp_auth_type`	text	yes
`sftp_credential_secret_id`	text	yes
`is_active`	boolean	yes	true
`last_tested_at`	timestamp with time zone	yes
`last_test_success`	boolean	yes
`custom_fields`	jsonb	no	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes

Foreign keys:

created_by → pf_profiles(id)
organization_id → pf_organizations(id)
updated_by → pf_profiles(id)

Policies:

fw_api_connections_delete (DELETE)
fw_api_connections_insert (INSERT)
fw_api_connections_select (SELECT)
fw_api_connections_update (UPDATE)

`fw_approval_assignments`

RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`request_id`	uuid	no
`step_id`	uuid	no
`assignee_id`	uuid	no
`assigned_at`	timestamp with time zone	no	now()
`delegated_from_id`	uuid	yes
`delegation_id`	uuid	yes
`status`	text	no	’pending’::text
`action_at`	timestamp with time zone	yes
`action`	text	yes
`action_comment`	text	yes
`action_reason`	text	yes
`reminder_sent_at`	timestamp with time zone	yes
`escalated_at`	timestamp with time zone	yes
`escalated_to_id`	uuid	yes
`custom_fields`	jsonb	no	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes

Foreign keys:

assignee_id → pf_profiles(id)
created_by → pf_profiles(id)
delegated_from_id → pf_profiles(id)
delegation_id → fw_approval_delegations(id)
escalated_to_id → pf_profiles(id)
organization_id → pf_organizations(id)
request_id → fw_approval_requests(id)
step_id → fw_approval_steps(id)
updated_by → pf_profiles(id)

Policies:

fw_approval_assignments_delete (DELETE)
fw_approval_assignments_insert (INSERT)
fw_approval_assignments_select (SELECT)
fw_approval_assignments_update (UPDATE)

`fw_approval_chains`

RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`site_id`	uuid	yes
`name`	text	no
`description`	text	yes
`automation_rule_id`	uuid	yes
`is_active`	boolean	no	true
`config`	jsonb	no	’{}‘::jsonb
`custom_fields`	jsonb	no	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes
`template_id`	uuid	yes		Reference to PF-64 approval chain template used to create this chain instance. NULL for manually created chains.
`is_default`	boolean	no	false	FW-54: Whether this chain is the default for its entity type when no routing rules match.
`applies_entity_type`	text	yes		FW-54: Entity type this chain defaults for. NULL means not a default chain.

Foreign keys:

automation_rule_id → fw_automation_rules(id)
created_by → pf_profiles(id)
organization_id → pf_organizations(id)
site_id → pf_sites(id)
template_id → pf_approval_chain_templates(id)
updated_by → pf_profiles(id)

Policies:

fw_approval_chains_delete (DELETE)
fw_approval_chains_insert (INSERT)
fw_approval_chains_select (SELECT)
fw_approval_chains_update (UPDATE)

`fw_approval_delegations`

RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`delegator_id`	uuid	no
`delegatee_id`	uuid	no
`start_date`	date	no
`end_date`	date	no
`reason`	text	yes
`is_active`	boolean	no	true
`custom_fields`	jsonb	no	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes

Foreign keys:

created_by → pf_profiles(id)
delegatee_id → pf_profiles(id)
delegator_id → pf_profiles(id)
organization_id → pf_organizations(id)

Policies:

fw_approval_delegations_delete (DELETE)
fw_approval_delegations_insert (INSERT)
fw_approval_delegations_select (SELECT)
fw_approval_delegations_update (UPDATE)

`fw_approval_history`

RLS: ✅ enabled (2 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`request_id`	uuid	no
`event_type`	text	no
`actor_id`	uuid	yes
`step_id`	uuid	yes
`assignment_id`	uuid	yes
`event_data`	jsonb	yes	’{}‘::jsonb
`comment`	text	yes
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	yes	now()

Foreign keys:

actor_id → pf_profiles(id)
assignment_id → fw_approval_assignments(id)
organization_id → pf_organizations(id)
request_id → fw_approval_requests(id)
step_id → fw_approval_steps(id)

Policies:

fw_approval_history_insert (INSERT)
fw_approval_history_select (SELECT)

`fw_approval_requests`

RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`site_id`	uuid	yes
`chain_id`	uuid	no
`source_type`	text	no
`source_id`	uuid	no
`source_table`	text	yes
`title`	text	no
`description`	text	yes
`request_data`	jsonb	no	’{}‘::jsonb
`priority`	text	no	’normal’::text
`status`	text	no	’pending’::text
`current_step`	integer	no	1
`submitted_by`	uuid	no
`submitted_at`	timestamp with time zone	no	now()
`completed_at`	timestamp with time zone	yes
`completed_by`	uuid	yes
`final_decision`	text	yes
`custom_fields`	jsonb	no	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes
`routing_rule_id`	uuid	yes		FW-54: Routing rule that selected this chain, for audit trail.
`routing_decision_table_id`	uuid	yes		FW-54: Decision table used for routing, if any.
`routing_matched_conditions`	jsonb	yes		FW-54: Snapshot of matched conditions at evaluation time (no PHI).
`routing_evaluated_at`	timestamp with time zone	yes		FW-54: Timestamp when routing evaluation occurred.

Foreign keys:

chain_id → fw_approval_chains(id)
completed_by → pf_profiles(id)
created_by → pf_profiles(id)
organization_id → pf_organizations(id)
routing_decision_table_id → fw_decision_tables(id)
routing_rule_id → fw_approval_routing_rules(id)
site_id → pf_sites(id)
submitted_by → pf_profiles(id)
updated_by → pf_profiles(id)

Policies:

fw_approval_requests_delete (DELETE)
fw_approval_requests_insert (INSERT)
fw_approval_requests_select (SELECT)
fw_approval_requests_update (UPDATE)

`fw_approval_routing_rules`

FW-54: Per-entity-type approval chain routing rules (FW-17 conditions or FW-45 decision table). First-match by priority. RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`site_id`	uuid	yes
`entity_type`	text	no		Entity type identifier (e.g. fa_expense_reports, hr_leave_requests) for which this rule applies.
`name`	text	no
`description`	text	yes
`conditions`	jsonb	no	’{}‘::jsonb	FW-17 condition builder JSON. Empty object {} when decision_table_id is set (XOR constraint).
`decision_table_id`	uuid	yes		Optional FW-45 decision table for complex multi-variable routing. Mutually exclusive with conditions.
`target_chain_id`	uuid	no		The approval chain selected when this rule matches.
`priority`	integer	no	0	Lower = higher priority. Unique per (org, entity_type). First match wins.
`is_active`	boolean	no	true
`custom_fields`	jsonb	no	’{}‘::jsonb	Organization-specific metadata (e.g. {“notes”: “High-value approvals”}).
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes

Foreign keys:

created_by → pf_profiles(id)
decision_table_id → fw_decision_tables(id)
organization_id → pf_organizations(id)
site_id → pf_sites(id)
target_chain_id → fw_approval_chains(id)
updated_by → pf_profiles(id)

Policies:

fw_approval_routing_rules_delete (DELETE)
fw_approval_routing_rules_insert (INSERT)
fw_approval_routing_rules_select (SELECT)
fw_approval_routing_rules_update (UPDATE)

`fw_approval_steps`

RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`chain_id`	uuid	no
`organization_id`	uuid	no
`step_order`	integer	no
`name`	text	no
`description`	text	yes
`approver_type`	text	no
`approver_config`	jsonb	no
`parallel_mode`	text	no	’any’::text
`conditions`	jsonb	yes
`timeout_hours`	integer	yes	48
`reminder_hours`	integer	yes	24
`escalation_config`	jsonb	yes
`custom_fields`	jsonb	no	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes

Foreign keys:

chain_id → fw_approval_chains(id)
created_by → pf_profiles(id)
organization_id → pf_organizations(id)
updated_by → pf_profiles(id)

Policies:

fw_approval_steps_delete (DELETE)
fw_approval_steps_insert (INSERT)
fw_approval_steps_select (SELECT)
fw_approval_steps_update (UPDATE)

`fw_automation_actions`

RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`rule_id`	uuid	no
`action_type`	action_type	no
`action_config`	jsonb	no
`execution_order`	integer	no
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	yes	now()

Foreign keys:

rule_id → fw_automation_rules(id)

Policies:

Users can view automation actions (SELECT)
fw_automation_actions_delete (DELETE)
fw_automation_actions_insert (INSERT)
fw_automation_actions_update (UPDATE)

`fw_automation_logs`

RLS: ✅ enabled (1 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`rule_id`	uuid	no
`triggered_by`	uuid	yes
`trigger_data`	jsonb	yes
`execution_status`	text	no
`execution_result`	jsonb	yes
`executed_at`	timestamp with time zone	no	now()
`created_at`	timestamp with time zone	yes	now()
`updated_at`	timestamp with time zone	yes	now()

Foreign keys:

rule_id → fw_automation_rules(id)
triggered_by → pf_profiles(id)

Policies:

Users can view automation logs (SELECT)

`fw_automation_rules`

RLS: ✅ enabled (5 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`site_id`	uuid	yes
`name`	text	no
`description`	text	yes
`trigger_type`	trigger_type	no
`trigger_config`	jsonb	no
`conditions`	jsonb	yes	’[]‘::jsonb
`status`	automation_status	no	’draft’::automation_status
`created_by`	uuid	no
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`custom_fields`	jsonb	no	’{}‘::jsonb	Organization-specific automation metadata (e.g., {“owner_department”: “IT”, “business_critical”: true, “external_webhook_id”: “hook-123”, “escalation_path”: [“admin@org.com”]})
`circuit_breaker_tripped`	boolean	yes	false	Automation auto-paused after 5 consecutive failures
`circuit_breaker_tripped_at`	timestamp with time zone	yes
`last_execution_at`	timestamp with time zone	yes
`consecutive_failures`	integer	yes	0
`requires_approval`	boolean	yes	false	High-risk automations require approval before activation
`approved_by`	uuid	yes
`approved_at`	timestamp with time zone	yes
`approval_notes`	text	yes
`event_config`	jsonb	yes		Configuration for event-based triggers: {event_name, filters[]}
`date_relative_config`	jsonb	yes		Configuration for date-relative triggers: {entity_type, date_field, offset_direction, offset_value, offset_unit, trigger_time, timezone}
`updated_by`	uuid	yes		User who last updated this record
`retry_config`	jsonb	yes	’{}‘::jsonb	FW-25: Workflow-level default retry configuration (merged with node-level configs)

Foreign keys:

approved_by → pf_profiles(id)
created_by → pf_profiles(id)
organization_id → pf_organizations(id)
site_id → pf_sites(id)
updated_by → users(id)

Policies:

Users can create automation rules (INSERT)
Users can delete automation rules (DELETE)
Users can update automation rules (UPDATE)
Users can view automation rules (SELECT)
fw_automation_rules_update (UPDATE)

`fw_business_calendars`

FW-35: Business calendars defining working hours and timezone per organization. RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`name`	text	no
`description`	text	yes
`timezone`	text	no	’UTC’::text
`business_hours`	jsonb	no	’[{“day”: 1, “end”: “17:00”, “start”: “09:00”}, {“day”: 2, “end”: “17:00”, “start”: “09:00”}, {“day”: 3, “end”: “17:00”, “start”: “09:00”}, {“day”: 4, “end”: “17:00”, “start”: “09:00”}, {“day”: 5, “end”: “17:00”, “start”: “09:00”}]‘::jsonb	JSON array of {day, start, end} objects. day: 0=Sunday..6=Saturday. start/end: HH:MM format.
`is_default`	boolean	no	false
`custom_fields`	jsonb	no	’{}‘::jsonb	Organization-specific metadata.
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes

Foreign keys:

created_by → pf_profiles(id)
organization_id → pf_organizations(id)
updated_by → pf_profiles(id)

Policies:

business_calendars_delete (DELETE)
business_calendars_insert (INSERT)
business_calendars_select (SELECT)
business_calendars_update (UPDATE)

`fw_calendar_holidays`

FW-35: Holidays/closures for business calendars. Dates excluded from business hours calculations. RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`calendar_id`	uuid	no
`organization_id`	uuid	no
`name`	text	no
`holiday_date`	date	no
`holiday_type`	text	no	’full’::text	full = all day off, half_am = morning off, half_pm = afternoon off.
`custom_fields`	jsonb	no	’{}‘::jsonb	Organization-specific metadata.
`created_at`	timestamp with time zone	no	now()

Foreign keys:

calendar_id → fw_business_calendars(id)
organization_id → pf_organizations(id)

Policies:

calendar_holidays_delete (DELETE)
calendar_holidays_insert (INSERT)
calendar_holidays_select (SELECT)
calendar_holidays_update (UPDATE)

`fw_compliance_audit_entries`

FW-43: Formal compliance audit records for regulatory reporting. Immutable — no UPDATE/DELETE. RLS: ✅ enabled (1 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`audit_type`	text	no
`entity_type`	text	no
`entity_id`	uuid	no
`actor_id`	uuid	no
`action`	text	no
`details`	jsonb	yes	’{}‘::jsonb
`ip_address`	text	yes
`user_agent`	text	yes
`correlation_id`	uuid	yes
`compliance_category`	text	yes
`data_classification`	text	yes	’internal’::text
`retention_until`	timestamp with time zone	yes
`created_at`	timestamp with time zone	no	now()

Foreign keys:

actor_id → pf_profiles(id)
organization_id → pf_organizations(id)

Policies:

org_select_compliance_audit (SELECT)

`fw_dead_letter_queue`

FW-47: Dead Letter Queue for failed automation executions. Stores permanently failed messages for admin triage, retry, or discard. RLS: ✅ enabled (3 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`source_type`	text	no		Type of source that failed: execution, event, webhook, notification, step
`source_id`	uuid	no		ID of the failed entity (e.g., workflow execution ID)
`source_table`	text	yes		Table name of the source (e.g., fw_workflow_executions)
`original_payload`	jsonb	no		Complete payload for faithful replay of the failed operation
`error_message`	text	no
`error_stack`	text	yes
`error_classification`	text	yes	’unknown’::text	Automated classification: transient, permanent, unknown, timeout, rate_limit
`failure_count`	integer	no	1
`first_failed_at`	timestamp with time zone	no	now()
`last_failed_at`	timestamp with time zone	no	now()
`status`	text	no	’pending’::text
`resolved_by`	uuid	yes
`resolved_at`	timestamp with time zone	yes
`resolution_notes`	text	yes
`retry_execution_id`	uuid	yes
`custom_fields`	jsonb	no	’{}‘::jsonb	Organization-specific metadata for extensibility
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes

Foreign keys:

created_by → pf_profiles(id)
organization_id → pf_organizations(id)
resolved_by → pf_profiles(id)
retry_execution_id → fw_workflow_executions(id)
updated_by → pf_profiles(id)

Policies:

fw_dlq_insert (INSERT)
fw_dlq_select (SELECT)
fw_dlq_update (UPDATE)

`fw_debug_sessions`

Tracks active debug sessions for step-through debugging RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`site_id`	uuid	yes
`execution_id`	uuid	no
`debug_user_id`	uuid	no
`status`	text	no	’active’::text
`breakpoints`	jsonb	yes	’[]‘::jsonb
`current_node_id`	text	yes
`step_history`	jsonb	yes	’[]‘::jsonb
`custom_fields`	jsonb	yes	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_at`	timestamp with time zone	no	now()
`updated_by`	uuid	yes

Foreign keys:

created_by → pf_profiles(id)
debug_user_id → pf_profiles(id)
execution_id → fw_workflow_executions(id)
organization_id → pf_organizations(id)
site_id → pf_sites(id)
updated_by → pf_profiles(id)

Policies:

fw_debug_sessions_delete (DELETE)
fw_debug_sessions_insert (INSERT)
fw_debug_sessions_select (SELECT)
fw_debug_sessions_update (UPDATE)

`fw_decision_table_versions`

FW-45: Immutable version snapshots of decision tables created on publish. RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`decision_table_id`	uuid	no
`version_number`	integer	no
`input_columns`	jsonb	no
`output_columns`	jsonb	no
`rules`	jsonb	no
`hit_policy`	text	no
`change_summary`	text	yes
`published_by`	uuid	yes
`published_at`	timestamp with time zone	no	now()
`custom_fields`	jsonb	no	’{}‘::jsonb

Foreign keys:

decision_table_id → fw_decision_tables(id)
organization_id → pf_organizations(id)
published_by → pf_profiles(id)

Policies:

decision_table_versions_delete_deny (DELETE)
decision_table_versions_insert (INSERT)
decision_table_versions_select (SELECT)
decision_table_versions_update_deny (UPDATE)

`fw_decision_tables`

FW-45: Configurable decision tables for workflow and rule evaluation use cases. RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`name`	text	no
`description`	text	yes
`status`	text	no	’draft’::text
`version`	integer	no	0
`input_columns`	jsonb	no	’[]‘::jsonb	JSON array defining input column schema [{key, label, dataType}].
`output_columns`	jsonb	no	’[]‘::jsonb	JSON array defining output column schema [{key, label, dataType}].
`rules`	jsonb	no	’[]‘::jsonb	JSON array of rules in json-rules-engine format.
`hit_policy`	text	no	’first’::text	DMN-aligned hit policy: first, unique, collect, or priority.
`tags`	text[]	yes	’{}‘::text[]	Freeform tags for categorization and filtering.
`is_active`	boolean	no	true
`custom_fields`	jsonb	no	’{}‘::jsonb	Organization-specific metadata (e.g., {“department”: “finance”}).
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes

Foreign keys:

created_by → pf_profiles(id)
organization_id → pf_organizations(id)
updated_by → pf_profiles(id)

Policies:

decision_tables_delete (DELETE)
decision_tables_insert (INSERT)
decision_tables_select (SELECT)
decision_tables_update (UPDATE)

`fw_dependency_graph`

FW-55: Normalized edge store for inter-entity dependencies (forms, workflows, automations, decision tables, events, lookups) RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`source_type`	text	no
`source_id`	uuid	no
`target_type`	text	no
`target_id`	uuid	no
`dependency_type`	text	no
`metadata`	jsonb	no	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes

Foreign keys:

created_by → pf_profiles(id)
organization_id → pf_organizations(id)
updated_by → pf_profiles(id)

Policies:

fw_dependency_graph_delete (DELETE)
fw_dependency_graph_insert (INSERT)
fw_dependency_graph_select (SELECT)
fw_dependency_graph_update (UPDATE)

`fw_domain_events`

RLS: ✅ enabled (2 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`site_id`	uuid	yes
`event_name`	text	no
`event_source`	text	yes
`payload`	jsonb	no	’{}‘::jsonb
`processed_at`	timestamp with time zone	yes
`processing_error`	text	yes
`custom_fields`	jsonb	yes	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	yes	now()
`correlation_id`	uuid	yes		FW-16-P2: Business process correlation ID linking related events and workflow executions

Foreign keys:

organization_id → pf_organizations(id)
site_id → pf_sites(id)

Policies:

fw_domain_events_insert (INSERT)
fw_domain_events_select (SELECT)

`fw_execution_logs`

Detailed execution logs for workflow monitoring and debugging RLS: ✅ enabled (3 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`execution_id`	uuid	no
`organization_id`	uuid	no
`site_id`	uuid	yes
`log_level`	text	no
`node_id`	text	yes
`message`	text	no
`context`	jsonb	yes	’{}‘::jsonb
`custom_fields`	jsonb	yes	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes		User who last updated this record
`updated_at`	timestamp with time zone	yes	now()
`correlation_id`	uuid	yes		Links to FW-16 Phase 2 event correlation; groups related audit entries across cores.
`compliance_category`	text	yes		Regulatory category governing this log entry. NULL = no specific regulation applies.
`data_classification`	text	yes	’internal’::text	Data sensitivity tier per organizational policy. Defaults to internal.
`retention_until`	timestamp with time zone	yes		Computed from compliance_category + org retention settings. NULL = default org retention.

Foreign keys:

created_by → pf_profiles(id)
execution_id → fw_workflow_executions(id)
organization_id → pf_organizations(id)
site_id → pf_sites(id)
updated_by → users(id)

Policies:

fw_execution_logs_delete (DELETE)
fw_execution_logs_insert (INSERT)
fw_execution_logs_select (SELECT)

`fw_execution_rate_counters`

FW-53: Rolling execution counters for rate limiting; TTL cleanup via scheduled job. RLS: ✅ enabled (1 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`workflow_definition_id`	uuid	yes
`window_start`	timestamp with time zone	no
`window_type`	text	no		Time window granularity: minute or hour.
`execution_count`	integer	no	0	Number of executions started in this window.
`concurrent_count`	integer	no	0	Current number of concurrently running executions.
`created_at`	timestamp with time zone	no	now()

Foreign keys:

organization_id → pf_organizations(id)
workflow_definition_id → fw_workflow_definitions(id)

Policies:

fw_execution_rate_counters_select (SELECT)

`fw_execution_steps`

FW-48: Step-level checkpoint persistence for workflow executions. RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`execution_id`	uuid	no
`node_id`	text	no
`node_type`	text	no
`step_index`	integer	no
`status`	text	no	’pending’::text
`input_data`	jsonb	yes
`output_data`	jsonb	yes
`error_message`	text	yes
`error_classification`	text	yes		Error category: transient, permanent, timeout, unknown
`retry_count`	integer	no	0
`max_retries`	integer	no	3
`started_at`	timestamp with time zone	yes
`completed_at`	timestamp with time zone	yes
`duration_ms`	integer	yes
`organization_id`	uuid	no
`custom_fields`	jsonb	no	’{}‘::jsonb	Organization-specific metadata
`parent_gateway_node_id`	text	yes		Enclosing parallel gateway node ID (NULL for non-parallel)
`branch_id`	text	yes		Branch identifier within parallel gateway (NULL for non-parallel)
`attempt_number`	integer	no	1	Retry attempt number (1 = first attempt)
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes
`max_duration_ms`	integer	yes		FW-49: Maximum allowed duration for this step in milliseconds. NULL = no step-level timeout.

Foreign keys:

created_by → pf_profiles(id)
execution_id → fw_workflow_executions(id)
organization_id → pf_organizations(id)
updated_by → pf_profiles(id)

Policies:

execution_steps_delete (DELETE)
execution_steps_insert (INSERT)
execution_steps_select (SELECT)
execution_steps_update (UPDATE)

`fw_form_fields`

RLS: ✅ enabled (5 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`form_id`	uuid	no
`field_key`	text	no
`field_type`	form_field_type	no
`label`	text	no
`placeholder`	text	yes
`help_text`	text	yes
`default_value`	text	yes
`required`	boolean	no	false
`display_order`	integer	no
`options`	jsonb	yes	’[]‘::jsonb
`validation_rules`	jsonb	yes	’{}‘::jsonb
`settings`	jsonb	yes	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	yes	now()
`organization_id`	uuid	yes

Foreign keys:

form_id → fw_forms(id)
organization_id → pf_organizations(id)

Policies:

Users can view form fields (SELECT)
fw_form_fields_delete (DELETE)
fw_form_fields_insert (INSERT)
fw_form_fields_select (SELECT)
fw_form_fields_update (UPDATE)

`fw_form_permissions`

FW-01: Granular form access control (user-level and role-level) RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`form_id`	uuid	no
`user_id`	uuid	yes
`role`	app_role	yes
`permission`	text	no
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	yes	now()

Foreign keys:

form_id → fw_forms(id)
user_id → pf_profiles(id)

Policies:

Users can view form permissions (SELECT)
fw_form_permissions_delete (DELETE)
fw_form_permissions_insert (INSERT)
fw_form_permissions_update (UPDATE)

`fw_form_portal_config`

RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`form_id`	uuid	no
`organization_id`	uuid	no
`is_enabled`	boolean	no	false
`public_url_slug`	text	yes
`access_token`	uuid	no	gen_random_uuid()
`captcha_enabled`	boolean	no	true
`captcha_provider`	text	yes	’recaptcha_v3’::text
`captcha_score_threshold`	numeric(3,2)	yes	0.5
`rate_limit_per_ip_per_hour`	integer	yes	10
`honeypot_enabled`	boolean	no	true
`require_email_verification`	boolean	no	false
`verification_expiry_hours`	integer	yes	24
`send_confirmation_email`	boolean	no	true
`custom_logo_url`	text	yes
`primary_color`	text	yes	’#3B82F6’::text
`background_color`	text	yes	’#F3F4F6’::text
`header_text`	text	yes
`footer_text`	text	yes
`require_consent`	boolean	no	true
`consent_text`	text	yes	’I agree to the terms and conditions’::text
`privacy_policy_url`	text	yes
`terms_url`	text	yes
`max_submissions`	integer	yes
`close_at`	timestamp with time zone	yes
`custom_fields`	jsonb	no	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes
`closed_message`	text	yes		Organization-customizable message shown when the portal is disabled or closed

Foreign keys:

created_by → pf_profiles(id)
form_id → fw_forms(id)
organization_id → pf_organizations(id)
updated_by → pf_profiles(id)

Policies:

fw_portal_config_delete (DELETE)
fw_portal_config_insert (INSERT)
fw_portal_config_select (SELECT)
fw_portal_config_update (UPDATE)

`fw_form_prefill_rules`

FW-60: Per-field prefill rules for forms (org-scoped; no PHI in config). RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`form_id`	uuid	no
`field_id`	uuid	no
`source_type`	text	no
`source_config`	jsonb	no
`priority`	integer	no	0
`is_active`	boolean	no	true
`custom_fields`	jsonb	no	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes

Foreign keys:

created_by → pf_profiles(id)
field_id → fw_form_fields(id)
form_id → fw_forms(id)
organization_id → pf_organizations(id)
updated_by → pf_profiles(id)

Policies:

fw_form_prefill_rules_delete (DELETE)
fw_form_prefill_rules_insert (INSERT)
fw_form_prefill_rules_select (SELECT)
fw_form_prefill_rules_update (UPDATE)

`fw_form_submission_signatures`

RLS: ✅ enabled (2 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`site_id`	uuid	yes
`submission_id`	uuid	no
`field_id`	uuid	no
`signature_id`	uuid	no
`field_label`	text	yes
`field_order`	integer	yes
`custom_fields`	jsonb	no	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	yes	now()

Foreign keys:

field_id → fw_form_fields(id)
organization_id → pf_organizations(id)
signature_id → pf_signatures(id)
site_id → pf_sites(id)
submission_id → fw_form_submissions(id)

Policies:

fw_form_sub_sig_insert (INSERT)
fw_form_sub_sig_select (SELECT)

`fw_form_submissions`

RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`form_id`	uuid	no
`submission_data`	jsonb	no
`submitted_by`	uuid	yes
`submitted_at`	timestamp with time zone	no	now()
`ip_address`	inet	yes
`user_agent`	text	yes
`status`	submission_status	no	’submitted’::submission_status
`reviewed_by`	uuid	yes
`reviewed_at`	timestamp with time zone	yes
`completed_at`	timestamp with time zone	yes
`custom_fields`	jsonb	no	’{}‘::jsonb	Organization-specific submission metadata (e.g., {“approval_chain”: [“mgr_id”], “external_case_id”: “CASE-001”, “workflow_state”: “pending_director”, “priority”: “high”, “sla_deadline”: “2025-12-01”})
`wizard_progress`	jsonb	yes		Wizard progress tracking: { current_step, visible_steps[], step_statuses{}, last_saved_at, auto_saved }
`signed_document_id`	uuid	yes		Reference to the generated signed PDF document in pf_documents (FW-33 Phase 4)
`submission_source`	text	yes	’internal’::text
`created_at`	timestamp with time zone	yes	now()
`updated_at`	timestamp with time zone	yes	now()
`organization_id`	uuid	no
`encrypted_fields`	jsonb	yes	’{}‘::jsonb	PF-08-EN WS1: Stores AES-GCM encrypted field values as { field_key: base64_ciphertext }. Sensitive values are NEVER stored in submission_data.
`retention_expires_at`	timestamp with time zone	yes		PF-08-EN WS2: Computed expiry date after which PII in submission_data/encrypted_fields is purged.
`archived_at`	timestamp with time zone	yes		PF-08-EN WS2: Timestamp when submission data was purged. Non-NULL means data erased but audit metadata kept.
`prefilled_fields`	jsonb	yes		FW-60: [{ field_id, source_type, source_detail? }] provenance for prefilled values at submit.

Foreign keys:

form_id → fw_forms(id)
organization_id → pf_organizations(id)
reviewed_by → pf_profiles(id)
signed_document_id → pf_documents(id)
submitted_by → pf_profiles(id)

Policies:

fw_form_submissions_delete (DELETE)
fw_form_submissions_insert (INSERT)
fw_form_submissions_select (SELECT)
fw_form_submissions_update (UPDATE)

`fw_form_template_ratings`

FW-28: Ratings and reviews for marketplace form templates RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`template_id`	uuid	no
`organization_id`	uuid	no
`rating`	integer	no
`review_text`	text	yes
`is_helpful_count`	integer	no	0
`is_not_helpful_count`	integer	no	0
`custom_fields`	jsonb	no	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	no
`updated_by`	uuid	yes

Foreign keys:

created_by → pf_profiles(id)
organization_id → pf_organizations(id)
template_id → fw_form_templates(id)
updated_by → pf_profiles(id)

Policies:

fw_form_template_ratings_delete (DELETE)
fw_form_template_ratings_insert (INSERT)
fw_form_template_ratings_select (SELECT)
fw_form_template_ratings_update (UPDATE)

`fw_form_templates`

FW-28: Form template library for reusable form definitions RLS: ✅ enabled (6 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	yes
`name`	text	no
`description`	text	yes
`category`	text	no	’custom’::text
`tags`	text[]	yes	’{}‘::text[]
`icon`	text	yes
`template_data`	jsonb	no	’{}‘::jsonb
`fields_data`	jsonb	no	’[]‘::jsonb
`template_version`	text	no	’1.0.0’::text
`parameters`	jsonb	yes	’[]‘::jsonb
`visibility`	text	no	’private’::text
`is_featured`	boolean	no	false
`usage_count`	integer	no	0
`rating_average`	numeric(3,2)	yes	0
`rating_count`	integer	no	0
`source_form_id`	uuid	yes
`linked_workflow_template_id`	uuid	yes
`status`	text	no	’draft’::text
`custom_fields`	jsonb	no	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes
`is_system_template`	boolean	no	false

Foreign keys:

created_by → pf_profiles(id)
linked_workflow_template_id → fw_workflow_templates(id)
organization_id → pf_organizations(id)
source_form_id → fw_forms(id)
updated_by → pf_profiles(id)

Policies:

fw_form_templates_delete (DELETE)
fw_form_templates_insert (INSERT)
fw_form_templates_select (SELECT)
fw_form_templates_system_immutable_delete (DELETE)
fw_form_templates_system_immutable_update (UPDATE)
fw_form_templates_update (UPDATE)

`fw_form_versions`

FW-01: Stores form version history for compliance and rollback RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`form_id`	uuid	no
`version`	integer	no
`form_snapshot`	jsonb	no
`fields_snapshot`	jsonb	no
`published_by`	uuid	yes
`published_at`	timestamp with time zone	no	now()
`notes`	text	yes
`created_at`	timestamp with time zone	yes	now()
`updated_at`	timestamp with time zone	yes	now()
`organization_id`	uuid	yes

Foreign keys:

form_id → fw_forms(id)
organization_id → pf_organizations(id)
published_by → pf_profiles(id)

Policies:

Users can create form versions (INSERT)
Users can view form versions (SELECT)
fw_form_versions_insert (INSERT)
fw_form_versions_select (SELECT)

`fw_forms`

RLS: ✅ enabled (3 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`site_id`	uuid	yes
`name`	text	no
`description`	text	yes
`status`	form_status	no	’draft’::form_status
`version`	integer	no	1
`settings`	jsonb	yes	’{}‘::jsonb
`created_by`	uuid	no
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`custom_fields`	jsonb	no	’{}‘::jsonb	Form-level organization metadata (e.g., compliance category, review cycle, department owner)
`owning_core`	core_code	no	’pf’::core_code	Core that owns this form (hr, rh, fa, etc.). Use pf for shared/platform forms.
`analytics_enabled`	boolean	yes	true	Enable/disable analytics tracking for this form. When disabled, no events are logged.
`wizard_config`	jsonb	yes		Wizard configuration: { enabled, progress_style, show_step_labels, show_estimated_time, allow_step_navigation, validation_mode, auto_save_interval_seconds }
`deleted_at`	timestamp with time zone	yes		Soft delete timestamp. NULL = active record. Use soft delete functions to delete.
`retention_policy`	jsonb	yes		PF-08-EN WS2: Retention rule schema: { type: “fixed_days”\|“relative_to_event”, days: number, event_source?: string, event_field?: string, grace_days?: number }
`section_config`	jsonb	yes		PF-08-EN WS3: Section-based submission config: { sections: [{ key, label, page_ids, required_role, requires_signature }] }
`updated_by`	uuid	yes		Profile ID of the last user that updated this form.

Foreign keys:

created_by → pf_profiles(id)
organization_id → pf_organizations(id)
site_id → pf_sites(id)
updated_by → pf_profiles(id)

Policies:

Users with org access can create forms (INSERT)
Users with org access can update forms (UPDATE)
Users with org access can view forms (SELECT)

`fw_kpi_configurations`

FW-58: Tenant-scoped KPI metric configurations for the workflow dashboard RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`name`	text	no
`metric_type`	text	no
`config`	jsonb	no	’{}‘::jsonb	Metric-specific configuration (e.g., hours_per_completed_execution for time_saved_estimate)
`custom_fields`	jsonb	no	’{}‘::jsonb	Organization-specific metadata (e.g., {“target_value”: 95, “display_order”: 1})
`is_active`	boolean	no	true
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes

Foreign keys:

created_by → pf_profiles(id)
organization_id → pf_organizations(id)
updated_by → pf_profiles(id)

Policies:

fw_kpi_configurations_delete (DELETE)
fw_kpi_configurations_insert (INSERT)
fw_kpi_configurations_select (SELECT)
fw_kpi_configurations_update (UPDATE)

`fw_kpi_report_schedules`

FW-58: Scheduled KPI report delivery configurations. Recipients must be org profile emails. RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`name`	text	no
`schedule_type`	text	no
`metric_types`	text[]	no
`recipients`	text[]	no
`is_active`	boolean	no	true
`last_sent_at`	timestamp with time zone	yes
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes

Foreign keys:

created_by → pf_profiles(id)
organization_id → pf_organizations(id)
updated_by → pf_profiles(id)

Policies:

fw_kpi_report_schedules_delete (DELETE)
fw_kpi_report_schedules_insert (INSERT)
fw_kpi_report_schedules_select (SELECT)
fw_kpi_report_schedules_update (UPDATE)

`fw_kpi_snapshots`

FW-58: Precomputed KPI metric snapshots for responsive dashboard reads. Writes via fw_upsert_kpi_snapshot only. RLS: ✅ enabled (1 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`config_id`	uuid	no
`period_start`	timestamp with time zone	no
`period_end`	timestamp with time zone	no
`period_type`	text	no
`metric_values`	jsonb	no
`computed_at`	timestamp with time zone	no	now()
`created_at`	timestamp with time zone	no	now()

Foreign keys:

config_id → fw_kpi_configurations(id)
organization_id → pf_organizations(id)

Policies:

fw_kpi_snapshots_select (SELECT)

`fw_module_settings`

FW-CONST: Organization-level configuration for Forms & Workflow module RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`default_form_status`	form_status	yes	’draft’::form_status
`custom_form_categories`	text[]	yes	ARRAY[]::text[]
`submission_retention_days`	integer	yes		Days to retain submissions (NULL = forever)
`require_submission_review`	boolean	yes	false
`allow_anonymous_submissions`	boolean	yes	false
`automation_retry_limit`	integer	yes	3
`automation_timeout_seconds`	integer	yes	30
`automation_circuit_breaker_threshold`	integer	yes	5
`max_upload_size_mb`	integer	yes	25
`allowed_file_types`	text[]	yes	ARRAY[‘pdf’::text, ‘docx’::text, ‘xlsx’::text, ‘jpg’::text, ‘png’::text, ‘gif’::text]
`created_at`	timestamp with time zone	no	now()
`created_by`	uuid	no
`updated_at`	timestamp with time zone	no	now()
`updated_by`	uuid	yes
`ai_enabled`	boolean	yes	true	Enable AI features for Forms & Workflows module
`execution_monitoring_enabled`	boolean	yes	true	Enable/disable execution monitoring dashboard
`debugging_enabled`	boolean	yes	true	Enable/disable step-through debugging
`log_retention_days`	integer	yes	90	Days to retain execution logs before cleanup
`data_query_enabled`	boolean	yes	false	FW-19: Enable data query and integration actions in workflows
`use_configurable_wizards`	boolean	yes	false	PF-41: Use configurable wizard templates instead of hardcoded wizards
`default_query_limit`	integer	yes	100	Default number of records returned in workflow queries
`max_query_limit`	integer	yes	1000	Maximum allowed records in workflow queries
`default_bulk_batch_size`	integer	yes	10	Default batch size for bulk operations
`max_bulk_batch_size`	integer	yes	100	Maximum batch size for bulk operations
`external_form_rate_limit_per_hour`	integer	yes	10	Rate limit for external form submissions per hour
`form_number_prefix`	text	yes	’FORM’::text	Prefix for form IDs (e.g., FORM)
`form_number_sequence`	integer	yes	1	Next sequence number for form generation
`workflow_number_prefix`	text	yes	’WF’::text	Prefix for workflow IDs (e.g., WF)
`workflow_number_sequence`	integer	yes	1	Next sequence number for workflow generation
`submission_number_prefix`	text	yes	’SUB’::text	Prefix for submission IDs (e.g., SUB)
`submission_number_sequence`	integer	yes	1	Next sequence number for submission generation
`fw_decision_tables_enabled`	boolean	yes	true	Enables or disables the FW-45 Decision Tables feature for the organization.
`fw_decision_tables_max_per_org`	integer	yes	100	Maximum number of decision tables allowed per organization (10-500).
`fw_decision_table_max_rules`	integer	yes	500	Maximum number of rules allowed per decision table (50-5000).
`fw_rule_evaluation_retention_days`	integer	yes	90	Number of days to retain rule evaluation audit records before cleanup (30-365).
`fw_worker_batch_size`	integer	yes	10
`fw_worker_visibility_timeout_seconds`	integer	yes	120
`fw_execution_worker_enabled`	boolean	yes	true
`worker_running`	boolean	yes	false
`worker_last_run_at`	timestamp with time zone	yes
`worker_last_batch_size`	integer	yes	0
`fw_dlq_enabled`	boolean	yes	true	FW-47: Enable/disable Dead Letter Queue processing
`fw_dlq_alert_threshold`	integer	yes	10	FW-47: Number of pending DLQ entries that triggers an alert (1-1000)
`fw_dlq_alert_interval_minutes`	integer	yes	60	FW-47: Minutes between repeated DLQ threshold alerts (5-1440)
`fw_dlq_auto_discard_after_days`	integer	yes	90	FW-47: Days after which pending DLQ entries are auto-discarded (7-365)
`fw_checkpoint_enabled`	boolean	yes	true	Enable/disable execution step checkpoint writes.
`fw_step_data_retention_days`	integer	yes	90	Retention window in days for fw_execution_steps cleanup.
`fw_step_max_input_output_size_kb`	integer	yes	256	Max per-step input/output payload size before truncation.
`fw_timeout_enabled`	boolean	yes	true	FW-49: Whether the timeout watchdog is enabled for this organization.
`fw_default_timeout_minutes`	integer	yes	60	FW-49: Default timeout in minutes for workflows without explicit timeout_config. Default: 60.
`fw_timeout_warning_threshold_percent`	integer	yes	80	FW-49: Percentage of deadline elapsed before sending a warning notification. Default: 80.
`fw_timeout_check_interval_minutes`	integer	yes	5	FW-49: Interval in minutes between watchdog checks. Default: 5.
`fw_event_schema_validation_mode`	text	yes	’warn’::text	FW-16-P2: Event payload validation mode (off/warn/strict)
`fw_event_deprecation_grace_days`	integer	yes	90	FW-16-P2: Days after deprecation before event publish is rejected (1-365)
`fw_error_recovery_enabled`	boolean	yes	true	FW-25: Master toggle for advanced error recovery (retry strategies, circuit breakers, recovery workflows, compensation actions)
`fw_audit_trail_config`	jsonb	yes	’{}‘::jsonb	FW-43: Audit trail configuration including retention days per compliance category and scheduled report configs.
`fw_approval_routing_enabled`	boolean	yes	true	FW-54: Feature flag for conditional approval routing. When false, legacy static chain selection is used.
`fw_approval_routing_max_rules_per_entity`	integer	yes	50	FW-54: Maximum routing rules per entity_type per organization (1-200, default 50).

Foreign keys:

created_by → pf_profiles(id)
organization_id → pf_organizations(id)
updated_by → pf_profiles(id)

Policies:

fw_module_settings_delete (DELETE)
fw_module_settings_insert (INSERT)
fw_module_settings_select (SELECT)
fw_module_settings_update (UPDATE)

`fw_page_templates`

FW-05 Phase 3: Reusable page templates for multi-page forms RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`name`	text	no
`description`	text	yes
`category`	text	no	’custom’::text
`tags`	text[]	yes	’{}‘::text[]
`icon`	text	yes
`page_data`	jsonb	no	’{}‘::jsonb
`fields_data`	jsonb	no	’[]‘::jsonb
`template_version`	text	no	’1.0.0’::text
`parameters`	jsonb	yes	’[]‘::jsonb
`visibility`	text	no	’private’::text
`is_featured`	boolean	no	false
`usage_count`	integer	no	0
`rating_average`	numeric(3,2)	yes	0
`rating_count`	integer	no	0
`source_page_id`	text	yes
`status`	text	no	’draft’::text
`custom_fields`	jsonb	no	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	no
`updated_by`	uuid	yes

Foreign keys:

created_by → pf_profiles(id)
organization_id → pf_organizations(id)
updated_by → pf_profiles(id)

Policies:

fw_page_templates_delete (DELETE)
fw_page_templates_insert (INSERT)
fw_page_templates_select (SELECT)
fw_page_templates_update (UPDATE)

`fw_portal_rate_limits`

RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`form_id`	uuid	no
`ip_hash`	text	no
`fingerprint_hash`	text	yes
`submission_count`	integer	no	1
`first_submission_at`	timestamp with time zone	no	now()
`last_submission_at`	timestamp with time zone	no	now()
`window_start`	timestamp with time zone	no	now()
`created_at`	timestamp with time zone	yes	now()
`updated_at`	timestamp with time zone	yes	now()

Foreign keys:

form_id → fw_forms(id)

Policies:

fw_portal_rate_limits_select (SELECT)
fw_portal_rate_limits_system_delete (DELETE)
fw_portal_rate_limits_system_manage (INSERT)
fw_portal_rate_limits_system_update (UPDATE)

`fw_portal_submissions`

RLS: ✅ enabled (3 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`submission_id`	uuid	no
`organization_id`	uuid	no
`submitter_email`	text	no
`submitter_email_verified`	boolean	no	false
`verification_token`	uuid	yes
`verification_sent_at`	timestamp with time zone	yes
`verification_expires_at`	timestamp with time zone	yes
`verified_at`	timestamp with time zone	yes
`ip_hash`	text	no
`user_agent`	text	yes
`referrer_url`	text	yes
`consent_given`	boolean	no	false
`consent_text`	text	yes
`consent_given_at`	timestamp with time zone	yes
`captcha_score`	numeric(3,2)	yes
`captcha_provider`	text	yes
`honeypot_triggered`	boolean	no	false
`custom_fields`	jsonb	no	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	yes	now()
`portal_config_id`	uuid	yes		Reference to the portal configuration this submission came through

Foreign keys:

organization_id → pf_organizations(id)
portal_config_id → fw_form_portal_config(id)
submission_id → fw_form_submissions(id)

Policies:

fw_portal_submissions_delete (DELETE)
fw_portal_submissions_select (SELECT)
fw_portal_submissions_update (UPDATE)

`fw_query_whitelist`

RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`table_name`	text	no
`display_name`	text	no
`description`	text	yes
`allowed_columns`	text[]	yes
`max_rows`	integer	yes	100
`is_active`	boolean	yes	true
`custom_fields`	jsonb	no	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes

Foreign keys:

created_by → pf_profiles(id)
organization_id → pf_organizations(id)
updated_by → pf_profiles(id)

Policies:

fw_query_whitelist_delete (DELETE)
fw_query_whitelist_insert (INSERT)
fw_query_whitelist_select (SELECT)
fw_query_whitelist_update (UPDATE)

`fw_rate_limit_configs`

FW-53: Org/workflow/trigger scoped workflow execution rate limits and debounce configuration. RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`workflow_definition_id`	uuid	yes
`automation_rule_id`	uuid	yes
`limit_type`	text	no		Rate limit category: max_concurrent, max_per_minute, max_per_hour, event_debounce_seconds, max_cascade_depth.
`max_value`	integer	no		Positive integer threshold for the given limit_type.
`is_active`	boolean	no	true
`custom_fields`	jsonb	no	’{}‘::jsonb	Organization-specific metadata for rate limit configuration.
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes

Foreign keys:

automation_rule_id → fw_automation_rules(id)
created_by → pf_profiles(id)
organization_id → pf_organizations(id)
updated_by → pf_profiles(id)
workflow_definition_id → fw_workflow_definitions(id)

Policies:

fw_rate_limit_configs_delete (DELETE)
fw_rate_limit_configs_insert (INSERT)
fw_rate_limit_configs_select (SELECT)
fw_rate_limit_configs_update (UPDATE)

`fw_regulatory_change_log`

FW-57: Org-scoped operational regulatory change tracking for templates (not legal records). Do not store PHI in free-text fields. RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`template_id`	uuid	yes
`regulation`	text	no
`change_description`	text	no
`effective_date`	date	no
`impact_assessment`	text	yes
`reviewed_by`	uuid	yes
`reviewed_at`	timestamp with time zone	yes
`status`	text	no	’pending’::text
`custom_fields`	jsonb	no	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes

Foreign keys:

created_by → pf_profiles(id)
organization_id → pf_organizations(id)
reviewed_by → pf_profiles(id)
template_id → fw_workflow_templates(id)
updated_by → pf_profiles(id)

Policies:

fw_regulatory_change_log_delete (DELETE)
fw_regulatory_change_log_insert (INSERT)
fw_regulatory_change_log_select (SELECT)
fw_regulatory_change_log_update (UPDATE)

`fw_rule_evaluations`

FW-45: Append-only audit log of decision table evaluations from server-side contexts. RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`decision_table_id`	uuid	no
`version_id`	uuid	no
`version_number`	integer	no
`input_facts`	jsonb	no
`matched_rules`	jsonb	no	’[]‘::jsonb
`output_results`	jsonb	no	’{}‘::jsonb
`evaluation_context`	text	no
`source_execution_id`	uuid	yes
`source_step_id`	uuid	yes
`evaluated_by`	uuid	yes
`evaluated_at`	timestamp with time zone	no	now()

Foreign keys:

decision_table_id → fw_decision_tables(id)
evaluated_by → pf_profiles(id)
organization_id → pf_organizations(id)
version_id → fw_decision_table_versions(id)

Policies:

rule_evaluations_delete_deny (DELETE)
rule_evaluations_insert (INSERT)
rule_evaluations_select (SELECT)
rule_evaluations_update_deny (UPDATE)

`fw_sandbox_executions`

FW-24: Sandbox execution records for workflow testing RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`site_id`	uuid	yes
`rule_id`	uuid	no
`execution_type`	text	no	’manual’::text
`status`	text	no	’pending’::text
`input_data`	jsonb	no	’{}‘::jsonb
`output_data`	jsonb	yes	’{}‘::jsonb
`execution_logs`	jsonb	yes	’[]‘::jsonb
`test_result`	text	yes
`error_message`	text	yes
`started_at`	timestamp with time zone	yes
`completed_at`	timestamp with time zone	yes
`duration_ms`	integer	yes
`created_by`	uuid	yes
`custom_fields`	jsonb	no	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`scenario_id`	uuid	yes
`test_case_id`	uuid	yes
`forked_from_execution_id`	uuid	yes		FW-56: Source production execution for what-if fork
`forked_from_step_id`	uuid	yes		FW-56: Step at which the fork diverges
`modified_variables`	jsonb	yes	’{}‘::jsonb	FW-56: Variable overrides applied at fork point

Foreign keys:

created_by → users(id)
forked_from_execution_id → fw_workflow_executions(id)
forked_from_step_id → fw_execution_steps(id)
organization_id → pf_organizations(id)
rule_id → fw_automation_rules(id)
scenario_id → fw_test_scenarios(id)
site_id → pf_sites(id)
test_case_id → fw_test_cases(id)

Policies:

fw_sandbox_executions_delete (DELETE)
fw_sandbox_executions_insert_org_members (INSERT)
fw_sandbox_executions_select_org_members (SELECT)
fw_sandbox_executions_update_creator (UPDATE)

`fw_signature_audit_log`

RLS: ✅ enabled (2 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`submission_signature_id`	uuid	no
`event_type`	text	no
`event_timestamp`	timestamp with time zone	no	now()
`actor_user_id`	uuid	yes
`actor_ip_hash`	text	yes
`event_details`	jsonb	yes	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	yes	now()

Foreign keys:

actor_user_id → pf_profiles(id)
organization_id → pf_organizations(id)
submission_signature_id → fw_form_submission_signatures(id)

Policies:

fw_signature_audit_insert_system (INSERT)
fw_signature_audit_select (SELECT)

`fw_subflows`

RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`name`	text	no
`description`	text	yes
`nodes`	jsonb	no	’[]‘::jsonb
`edges`	jsonb	no	’[]‘::jsonb
`viewport`	jsonb	yes	’{“x”: 0, “y”: 0, “zoom”: 1}‘::jsonb
`input_schema`	jsonb	no	’[]‘::jsonb
`output_schema`	jsonb	no	’[]‘::jsonb
`usage_count`	integer	no	0
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	no
`updated_by`	uuid	yes
`custom_fields`	jsonb	no	’{}‘::jsonb

Foreign keys:

created_by → pf_profiles(id)
organization_id → pf_organizations(id)
updated_by → pf_profiles(id)

Policies:

subflows_org_delete (DELETE)
subflows_org_insert (INSERT)
subflows_org_select (SELECT)
subflows_org_update (UPDATE)

`fw_submission_attachments`

Uses submission-attachments storage bucket RLS: ✅ enabled (3 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`submission_id`	uuid	no
`field_key`	text	yes
`file_path`	text	no
`file_name`	text	no
`file_size`	integer	no
`mime_type`	text	no
`uploaded_by`	uuid	no
`uploaded_at`	timestamp with time zone	no	now()
`created_at`	timestamp with time zone	yes	now()
`updated_at`	timestamp with time zone	yes	now()

Foreign keys:

submission_id → fw_form_submissions(id)
uploaded_by → pf_profiles(id)

Policies:

Users can delete own attachments (DELETE)
Users can upload submission attachments (INSERT)
Users can view submission attachments (SELECT)

`fw_submission_notes`

RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`submission_id`	uuid	no
`note`	text	no
`created_by`	uuid	no
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`updated_by`	uuid	yes		User who last updated this record

Foreign keys:

created_by → pf_profiles(id)
submission_id → fw_form_submissions(id)
updated_by → users(id)

Policies:

Users can create submission notes (INSERT)
Users can delete own notes (DELETE)
Users can update own notes (UPDATE)
Users can view submission notes (SELECT)

`fw_submission_sections`

PF-08-EN WS3: Tracks independent section completions for multi-submitter forms (e.g., I-9 Section 1 by employee, Section 2 by employer). RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`submission_id`	uuid	no
`organization_id`	uuid	no
`section_key`	text	no
`page_ids`	text[]	no	’{}‘::text[]
`submitted_by`	uuid	yes
`submitted_at`	timestamp with time zone	yes
`submission_data`	jsonb	yes	’{}‘::jsonb
`encrypted_fields`	jsonb	yes	’{}‘::jsonb
`signature_data`	jsonb	yes
`status`	text	yes	’pending’::text
`required_role`	text	yes
`custom_fields`	jsonb	no	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes

Foreign keys:

created_by → users(id)
organization_id → pf_organizations(id)
submission_id → fw_form_submissions(id)
submitted_by → users(id)
updated_by → users(id)

Policies:

fw_submission_sections_delete (DELETE)
fw_submission_sections_insert (INSERT)
fw_submission_sections_select (SELECT)
fw_submission_sections_update (UPDATE)

`fw_template_update_notifications`

FW-28: Tracks template update notifications for derived workflows RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`template_id`	uuid	no
`template_version`	integer	no
`workflow_id`	uuid	no
`notified_user_id`	uuid	no
`seen_at`	timestamp with time zone	yes
`action`	text	no	’pending’::text
`created_at`	timestamp with time zone	no	now()
`custom_fields`	jsonb	yes	’{}‘::jsonb
`updated_at`	timestamp with time zone	yes	now()

Foreign keys:

notified_user_id → pf_profiles(id)
organization_id → pf_organizations(id)
template_id → fw_workflow_templates(id)
workflow_id → fw_automation_rules(id)

Policies:

fw_template_update_notifications_delete (DELETE)
fw_template_update_notifications_insert (INSERT)
fw_template_update_notifications_select (SELECT)
fw_template_update_notifications_update (UPDATE)

`fw_test_cases`

FW-24: Automated test case definitions for workflow testing RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`site_id`	uuid	yes
`rule_id`	uuid	no
`name`	text	no
`description`	text	yes
`input_data`	jsonb	no	’{}‘::jsonb
`expected_output`	jsonb	yes
`assertions`	jsonb	yes	’[]‘::jsonb	Array of assertion definitions for automated testing
`test_dataset_id`	uuid	yes
`priority`	text	no	’medium’::text	Test priority: low, medium, high, critical
`tags`	text[]	yes	’{}‘::text[]
`category`	text	yes
`is_active`	boolean	no	true
`last_run_at`	timestamp with time zone	yes
`last_run_status`	text	yes
`last_run_execution_id`	uuid	yes
`run_count`	integer	no	0	Total number of times this test has been run
`pass_count`	integer	no	0	Number of times this test has passed
`fail_count`	integer	no	0	Number of times this test has failed
`custom_fields`	jsonb	no	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes		User who last updated this record

Foreign keys:

created_by → pf_profiles(id)
last_run_execution_id → fw_sandbox_executions(id)
organization_id → pf_organizations(id)
rule_id → fw_automation_rules(id)
site_id → pf_sites(id)
test_dataset_id → fw_test_datasets(id)
updated_by → pf_profiles(id)

Policies:

fw_test_cases_delete (DELETE)
fw_test_cases_insert (INSERT)
fw_test_cases_select (SELECT)
fw_test_cases_update (UPDATE)

`fw_test_coverage`

RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`site_id`	uuid	yes
`rule_id`	uuid	no
`workflow_version`	integer	yes
`node_coverage`	jsonb	no	’{}‘::jsonb
`path_coverage`	jsonb	no	’{}‘::jsonb
`node_coverage_percent`	numeric(5,2)	yes	0
`path_coverage_percent`	numeric(5,2)	yes	0
`overall_coverage_percent`	numeric(5,2)	yes	0
`total_test_executions`	integer	yes	0
`passed_tests`	integer	yes	0
`failed_tests`	integer	yes	0
`last_calculated_at`	timestamp with time zone	yes	now()
`custom_fields`	jsonb	no	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes		User who last updated this record

Foreign keys:

created_by → pf_profiles(id)
organization_id → pf_organizations(id)
rule_id → fw_automation_rules(id)
site_id → pf_sites(id)
updated_by → pf_profiles(id)

Policies:

fw_test_coverage_delete (DELETE)
fw_test_coverage_insert (INSERT)
fw_test_coverage_select (SELECT)
fw_test_coverage_update (UPDATE)

`fw_test_datasets`

RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`site_id`	uuid	yes
`name`	text	no
`description`	text	yes
`dataset_type`	text	no	’manual’::text
`dataset_data`	jsonb	no	’[]‘::jsonb
`schema_hints`	jsonb	yes
`version`	integer	no	1
`parent_dataset_id`	uuid	yes
`is_template`	boolean	no	false
`template_category`	text	yes
`tags`	text[]	yes
`custom_fields`	jsonb	no	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	no
`updated_by`	uuid	yes		User who last updated this record

Foreign keys:

created_by → pf_profiles(id)
organization_id → pf_organizations(id)
parent_dataset_id → fw_test_datasets(id)
site_id → pf_sites(id)
updated_by → pf_profiles(id)

Policies:

Users can create test datasets in their org (INSERT)
Users can delete test datasets in their org (DELETE)
Users can update test datasets in their org (UPDATE)
Users can view test datasets in their org (SELECT)

`fw_test_scenarios`

RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`site_id`	uuid	yes
`rule_id`	uuid	no
`name`	text	no
`description`	text	yes
`input_data`	jsonb	no	’{}‘::jsonb
`expected_output`	jsonb	yes	’{}‘::jsonb
`test_dataset_id`	uuid	yes
`tags`	text[]	yes	’{}‘::text[]
`category`	text	yes
`is_active`	boolean	no	true
`last_run_at`	timestamp with time zone	yes
`last_run_status`	text	yes
`custom_fields`	jsonb	no	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes		User who last updated this record

Foreign keys:

created_by → pf_profiles(id)
organization_id → pf_organizations(id)
rule_id → fw_automation_rules(id)
site_id → pf_sites(id)
test_dataset_id → fw_test_datasets(id)
updated_by → pf_profiles(id)

Policies:

Users can create test scenarios in their org (INSERT)
Users can delete test scenarios in their org (DELETE)
Users can update test scenarios in their org (UPDATE)
Users can view test scenarios in their org (SELECT)

`fw_webhook_endpoints`

FW-59: Inbound webhook endpoint configurations for external system integrations. RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`workflow_definition_id`	uuid	yes
`name`	text	no
`description`	text	yes
`endpoint_slug`	text	no		URL-safe slug unique within org; used in webhook URL path.
`auth_type`	text	no	’hmac_sha256’::text	Authentication method: hmac_sha256, api_key, oauth_bearer, or none.
`auth_config`	jsonb	no	’{}‘::jsonb	Auth-type-specific configuration (e.g., JWKS URL for OAuth).
`payload_schema`	jsonb	yes		Optional JSON Schema for request body validation.
`variable_mapping`	jsonb	no	’{}‘::jsonb	Maps JSON paths in payload to workflow input variables.
`custom_fields`	jsonb	no	’{}‘::jsonb	Organization-specific metadata.
`ip_allowlist`	text[]	yes	’{}‘::text[]	Optional IP allowlist; empty array means all IPs allowed.
`rate_limit_per_minute`	integer	yes	60
`is_active`	boolean	no	false
`consecutive_auth_failures`	integer	no	0	Counter for consecutive auth failures; auto-suspends at threshold.
`is_suspended`	boolean	no	false	True when auto-suspended due to auth failures or manual suspension.
`suspended_at`	timestamp with time zone	yes
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes

Foreign keys:

created_by → users(id)
organization_id → pf_organizations(id)
updated_by → users(id)
workflow_definition_id → fw_workflow_definitions(id)

Policies:

fw_webhook_endpoints_delete (DELETE)
fw_webhook_endpoints_insert (INSERT)
fw_webhook_endpoints_select (SELECT)
fw_webhook_endpoints_update (UPDATE)

`fw_webhook_logs`

FW-59: Audit log for inbound webhook requests. Stores encrypted request bodies for replay. RLS: ✅ enabled (3 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`endpoint_id`	uuid	no
`organization_id`	uuid	no
`received_at`	timestamp with time zone	no	now()
`source_ip`	inet	yes
`request_headers`	jsonb	yes
`request_body_encrypted`	bytea	yes		AES-256-GCM encrypted request body. Decryption gated by fw.webhooks.view permission.
`payload_hash`	text	yes		SHA-256 hash of request body for idempotency detection.
`idempotency_key`	text	yes
`log_source`	text	no	’live’::text	Origin: live (external POST), test (test panel), replay (replayed from log).
`ingress_result`	text	no	’pending’::text	Outcome of auth/validation/rate-limit checks at ingress.
`processing_status`	text	no	’pending’::text	Status of downstream workflow processing after successful ingress.
`execution_id`	uuid	yes
`error_message`	text	yes
`response_status_code`	integer	yes
`is_test`	boolean	no	false
`replay_of`	uuid	yes
`replay_count`	integer	no	0
`processed_at`	timestamp with time zone	yes
`request_id`	text	yes
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()	Timestamp of last row modification (e.g., replay_count increment, processing_status change).

Foreign keys:

endpoint_id → fw_webhook_endpoints(id)
organization_id → pf_organizations(id)
replay_of → fw_webhook_logs(id)

Policies:

fw_webhook_logs_select (SELECT)
fw_webhook_logs_service_insert (INSERT)
fw_webhook_logs_service_update (UPDATE)

`fw_webhook_secrets`

FW-59: Hashed webhook signing secrets. No direct organization_id; tenant isolation via FK chain to fw_webhook_endpoints. See spec Pattern Exception. RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`endpoint_id`	uuid	no
`secret_hash`	text	no		Bcrypt or SHA-256 hash of the signing secret. Raw secret never stored.
`is_active`	boolean	no	true
`expires_at`	timestamp with time zone	yes
`rotated_at`	timestamp with time zone	yes
`created_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes

Foreign keys:

created_by → users(id)
endpoint_id → fw_webhook_endpoints(id)

Policies:

fw_webhook_secrets_delete (DELETE)
fw_webhook_secrets_insert (INSERT)
fw_webhook_secrets_select (SELECT)
fw_webhook_secrets_update (UPDATE)

`fw_workflow_alert_rules`

RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`rule_id`	uuid	yes
`alert_name`	text	no
`alert_description`	text	yes
`alert_condition`	jsonb	no
`alert_severity`	text	no	’warning’::text
`recipient_user_ids`	uuid[]	yes
`recipient_roles`	app_role[]	yes
`alert_channels`	text[]	no	ARRAY[‘in_app’::text]
`escalation_enabled`	boolean	no	false
`escalation_time_minutes`	integer	yes
`escalation_recipient_user_ids`	uuid[]	yes
`escalation_recipient_roles`	app_role[]	yes
`is_enabled`	boolean	no	true
`custom_fields`	jsonb	no	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	no
`updated_by`	uuid	yes
`site_id`	uuid	yes

Foreign keys:

created_by → pf_profiles(id)
organization_id → pf_organizations(id)
rule_id → fw_automation_rules(id)
site_id → pf_sites(id)
updated_by → pf_profiles(id)

Policies:

alert_rules_delete (DELETE)
alert_rules_insert (INSERT)
alert_rules_select (SELECT)
alert_rules_update (UPDATE)

`fw_workflow_alerts`

RLS: ✅ enabled (3 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`alert_rule_id`	uuid	no
`rule_id`	uuid	yes
`execution_id`	uuid	yes
`alert_severity`	text	no
`alert_message`	text	no
`alert_data`	jsonb	yes
`status`	text	no	’new’::text
`acknowledged_by`	uuid	yes
`acknowledged_at`	timestamp with time zone	yes
`resolved_by`	uuid	yes
`resolved_at`	timestamp with time zone	yes
`resolution_notes`	text	yes
`escalation_level`	integer	no	0
`escalated_at`	timestamp with time zone	yes
`custom_fields`	jsonb	no	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`site_id`	uuid	yes

Foreign keys:

acknowledged_by → pf_profiles(id)
alert_rule_id → fw_workflow_alert_rules(id)
execution_id → fw_workflow_executions(id)
organization_id → pf_organizations(id)
resolved_by → pf_profiles(id)
rule_id → fw_automation_rules(id)
site_id → pf_sites(id)

Policies:

fw_workflow_alerts_insert (INSERT)
workflow_alerts_select (SELECT)
workflow_alerts_update (UPDATE)

`fw_workflow_approvals`

RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`execution_id`	uuid	no
`node_id`	text	no
`assignee_user_id`	uuid	yes
`assignee_role`	app_role	yes
`status`	text	no	’pending’::text
`decided_by`	uuid	yes
`decided_at`	timestamp with time zone	yes
`decision_notes`	text	yes
`timeout_at`	timestamp with time zone	yes
`timeout_action`	text	yes
`created_at`	timestamp with time zone	no	now()
`custom_fields`	jsonb	no	’{}‘::jsonb
`updated_at`	timestamp with time zone	yes	now()

Foreign keys:

assignee_user_id → pf_profiles(id)
decided_by → pf_profiles(id)
execution_id → fw_workflow_executions(id)
organization_id → pf_organizations(id)

Policies:

workflow_approvals_assignee_update (UPDATE)
workflow_approvals_org_delete (DELETE)
workflow_approvals_org_insert (INSERT)
workflow_approvals_org_select (SELECT)

`fw_workflow_audit_events`

FW-43: Immutable audit log of workflow execution lifecycle events. No UPDATE/DELETE allowed. RLS: ✅ enabled (1 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`execution_id`	uuid	yes
`rule_id`	uuid	yes
`triggered_at`	timestamp with time zone	no
`triggered_by`	uuid	yes
`trigger_type`	text	yes
`status`	text	no
`completed_at`	timestamp with time zone	yes
`error_code`	text	yes
`metadata_jsonb`	jsonb	yes	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()

Foreign keys:

execution_id → fw_workflow_executions(id)
organization_id → pf_organizations(id)

Policies:

fw_audit_events_select (SELECT)

`fw_workflow_audit_events_p202604`

RLS: ✅ enabled

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`execution_id`	uuid	yes
`rule_id`	uuid	yes
`triggered_at`	timestamp with time zone	no
`triggered_by`	uuid	yes
`trigger_type`	text	yes
`status`	text	no
`completed_at`	timestamp with time zone	yes
`error_code`	text	yes
`metadata_jsonb`	jsonb	yes	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()

`fw_workflow_audit_events_p202605`

RLS: ✅ enabled

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`execution_id`	uuid	yes
`rule_id`	uuid	yes
`triggered_at`	timestamp with time zone	no
`triggered_by`	uuid	yes
`trigger_type`	text	yes
`status`	text	no
`completed_at`	timestamp with time zone	yes
`error_code`	text	yes
`metadata_jsonb`	jsonb	yes	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()

`fw_workflow_audit_events_p202606`

RLS: ✅ enabled

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`execution_id`	uuid	yes
`rule_id`	uuid	yes
`triggered_at`	timestamp with time zone	no
`triggered_by`	uuid	yes
`trigger_type`	text	yes
`status`	text	no
`completed_at`	timestamp with time zone	yes
`error_code`	text	yes
`metadata_jsonb`	jsonb	yes	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()

`fw_workflow_audit_events_p202607`

RLS: ✅ enabled

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`execution_id`	uuid	yes
`rule_id`	uuid	yes
`triggered_at`	timestamp with time zone	no
`triggered_by`	uuid	yes
`trigger_type`	text	yes
`status`	text	no
`completed_at`	timestamp with time zone	yes
`error_code`	text	yes
`metadata_jsonb`	jsonb	yes	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()

`fw_workflow_audit_events_p202608`

RLS: ✅ enabled

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`execution_id`	uuid	yes
`rule_id`	uuid	yes
`triggered_at`	timestamp with time zone	no
`triggered_by`	uuid	yes
`trigger_type`	text	yes
`status`	text	no
`completed_at`	timestamp with time zone	yes
`error_code`	text	yes
`metadata_jsonb`	jsonb	yes	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()

`fw_workflow_audit_events_p202609`

RLS: ✅ enabled

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`execution_id`	uuid	yes
`rule_id`	uuid	yes
`triggered_at`	timestamp with time zone	no
`triggered_by`	uuid	yes
`trigger_type`	text	yes
`status`	text	no
`completed_at`	timestamp with time zone	yes
`error_code`	text	yes
`metadata_jsonb`	jsonb	yes	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()

`fw_workflow_audit_events_p202610`

RLS: ✅ enabled

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`execution_id`	uuid	yes
`rule_id`	uuid	yes
`triggered_at`	timestamp with time zone	no
`triggered_by`	uuid	yes
`trigger_type`	text	yes
`status`	text	no
`completed_at`	timestamp with time zone	yes
`error_code`	text	yes
`metadata_jsonb`	jsonb	yes	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()

`fw_workflow_audit_events_p202611`

RLS: ✅ enabled

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`execution_id`	uuid	yes
`rule_id`	uuid	yes
`triggered_at`	timestamp with time zone	no
`triggered_by`	uuid	yes
`trigger_type`	text	yes
`status`	text	no
`completed_at`	timestamp with time zone	yes
`error_code`	text	yes
`metadata_jsonb`	jsonb	yes	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()

`fw_workflow_audit_events_pdefault`

RLS: ✅ enabled

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`execution_id`	uuid	yes
`rule_id`	uuid	yes
`triggered_at`	timestamp with time zone	no
`triggered_by`	uuid	yes
`trigger_type`	text	yes
`status`	text	no
`completed_at`	timestamp with time zone	yes
`error_code`	text	yes
`metadata_jsonb`	jsonb	yes	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()

`fw_workflow_best_practices`

FW-30: System-wide workflow best practice definitions RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`practice_name`	text	no
`category`	text	no
`description`	text	no
`severity`	text	no	’warning’::text
`practice_rules`	jsonb	no	’{}‘::jsonb
`remediation_guidance`	text	yes
`is_active`	boolean	no	true
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()

Policies:

fw_best_practices_delete (DELETE)
fw_best_practices_insert (INSERT)
fw_best_practices_select (SELECT)
fw_best_practices_update (UPDATE)

`fw_workflow_circuit_breakers`

FW-25: Per-node circuit breaker state for workflow automation rules RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`site_id`	uuid	yes
`rule_id`	uuid	no
`node_id`	text	no
`state`	text	no	’closed’::text
`failure_count`	integer	no	0
`success_count`	integer	no	0
`last_failure_at`	timestamp with time zone	yes
`last_success_at`	timestamp with time zone	yes
`opened_at`	timestamp with time zone	yes
`failure_threshold`	integer	no	5
`recovery_time_seconds`	integer	no	60
`success_threshold`	integer	no	2
`custom_fields`	jsonb	no	’{}‘::jsonb	Organization-specific metadata
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes

Foreign keys:

created_by → pf_profiles(id)
organization_id → pf_organizations(id)
rule_id → fw_automation_rules(id)
site_id → pf_sites(id)
updated_by → pf_profiles(id)

Policies:

fw_circuit_breakers_delete (DELETE)
fw_circuit_breakers_insert (INSERT)
fw_circuit_breakers_select (SELECT)
fw_circuit_breakers_update (UPDATE)

`fw_workflow_compensation_actions`

FW-25: Compensation action definitions for workflow automation rules RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`site_id`	uuid	yes
`rule_id`	uuid	no
`node_id`	text	no
`action_type`	text	no
`action_config`	jsonb	no
`execution_order`	integer	no	0
`custom_fields`	jsonb	no	’{}‘::jsonb	Organization-specific metadata
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes

Foreign keys:

created_by → pf_profiles(id)
organization_id → pf_organizations(id)
rule_id → fw_automation_rules(id)
site_id → pf_sites(id)
updated_by → pf_profiles(id)

Policies:

fw_compensation_actions_delete (DELETE)
fw_compensation_actions_insert (INSERT)
fw_compensation_actions_select (SELECT)
fw_compensation_actions_update (UPDATE)

`fw_workflow_compliance_scores`

FW-30: Workflow compliance scores against best practices RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`rule_id`	uuid	no
`workflow_version`	integer	yes
`overall_score`	numeric(5,2)	no
`category_scores`	jsonb	no	’{}‘::jsonb
`violations`	jsonb	no	’[]‘::jsonb
`recommendations`	jsonb	no	’[]‘::jsonb
`best_practices_checked`	integer	no	0
`best_practices_passed`	integer	no	0
`calculated_at`	timestamp with time zone	no	now()
`custom_fields`	jsonb	no	’{}‘::jsonb	Organization-specific metadata
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes

Foreign keys:

created_by → users(id)
organization_id → pf_organizations(id)
rule_id → fw_automation_rules(id)
updated_by → users(id)

Policies:

fw_compliance_scores_delete (DELETE)
fw_compliance_scores_insert (INSERT)
fw_compliance_scores_select (SELECT)
fw_compliance_scores_update (UPDATE)

`fw_workflow_definitions`

RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`rule_id`	uuid	no
`nodes`	jsonb	no	’[]‘::jsonb
`edges`	jsonb	no	’[]‘::jsonb
`viewport`	jsonb	yes	’{“x”: 0, “y”: 0, “zoom”: 1}‘::jsonb
`version`	integer	no	1
`custom_fields`	jsonb	no	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	no
`updated_by`	uuid	yes
`timeout_config`	jsonb	no	’{}‘::jsonb	FW-49: Per-workflow timeout configuration. Shape: { enabled: bool, max_duration_minutes: number, warning_threshold_percent: number, on_timeout: “fail”\|“cancel”\|“escalate” }

Foreign keys:

created_by → pf_profiles(id)
organization_id → pf_organizations(id)
rule_id → fw_automation_rules(id)
updated_by → pf_profiles(id)

Policies:

workflow_definitions_org_delete (DELETE)
workflow_definitions_org_insert (INSERT)
workflow_definitions_org_select (SELECT)
workflow_definitions_org_update (UPDATE)

`fw_workflow_events`

Registry of all domain events published via pg_notify. Events registered here can be consumed by edge functions and other services. RLS: ✅ enabled (1 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`event_name`	text	no
`display_name`	text	no
`description`	text	yes
`owning_core`	text	no
`category`	text	no
`payload_schema`	jsonb	yes	’{}‘::jsonb
`entity_type`	text	yes
`is_active`	boolean	yes	true
`custom_fields`	jsonb	yes	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`schema_version`	integer	no	1	FW-16-P2: Schema version, incremented on breaking changes
`deprecated_at`	timestamp with time zone	yes		FW-16-P2: Timestamp when this event was deprecated (NULL = active)
`replacement_event`	text	yes		FW-16-P2: event_name of successor event (NULL if not deprecated or no replacement)

Policies:

Authenticated users can view workflow events (SELECT)

`fw_workflow_executions`

RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`rule_id`	uuid	no
`log_id`	uuid	yes
`status`	text	no	’running’::text
`current_node_id`	text	yes
`variables`	jsonb	no	’{}‘::jsonb
`node_states`	jsonb	no	’{}‘::jsonb
`execution_path`	jsonb	no	’[]‘::jsonb
`parallel_branches`	jsonb	no	’{}‘::jsonb
`error_node_id`	text	yes
`error_message`	text	yes
`retry_count`	integer	yes	0
`started_at`	timestamp with time zone	no	now()
`paused_at`	timestamp with time zone	yes
`resumed_at`	timestamp with time zone	yes
`completed_at`	timestamp with time zone	yes
`custom_fields`	jsonb	no	’{}‘::jsonb
`workflow_version`	integer	yes
`debug_state`	jsonb	yes	’{}‘::jsonb	Stores breakpoints, paused state, step history for debugging
`performance_profile`	jsonb	yes	’{}‘::jsonb	Node timing data for performance analysis
`replay_of_id`	uuid	yes		Links to original execution when replaying
`created_at`	timestamp with time zone	yes	now()
`updated_at`	timestamp with time zone	yes	now()
`trigger_type`	text	yes		FW-46/FW-16: Type of trigger that initiated this execution (event, pm_event, form_submitted, etc.)
`trigger_payload`	jsonb	yes		FW-46/FW-16: Payload data from the trigger that initiated this execution
`current_step_id`	text	yes		FW-46: Last completed workflow step ID for checkpoint/resume
`next_retry_at`	timestamp with time zone	yes		FW-46: Earliest time the execution can be retried
`deadline_at`	timestamp with time zone	yes		FW-46: Absolute deadline for execution completion (FW-49)
`correlation_id`	uuid	yes		FW-46: Business process correlation ID for event grouping
`last_error`	text	yes		FW-46: Most recent failure message (sanitized)
`timeout_warning_sent`	boolean	no	false	FW-49: True if a timeout warning notification has been sent for this execution. Reset on deadline extension.
`parent_execution_id`	uuid	yes		FW-41: Parent execution when this run was started by a Subflow node; NULL for top-level runs.
`rate_limit_hold_until`	timestamp with time zone	yes		FW-53: Timestamp until which this execution is held due to rate limiting.
`rate_limit_reason`	text	yes		FW-53: Human-readable reason for rate limit hold.

Foreign keys:

log_id → fw_automation_logs(id)
organization_id → pf_organizations(id)
parent_execution_id → fw_workflow_executions(id)
replay_of_id → fw_workflow_executions(id)
rule_id → fw_automation_rules(id)

Policies:

workflow_executions_org_delete (DELETE)
workflow_executions_org_insert (INSERT)
workflow_executions_org_select (SELECT)
workflow_executions_org_update (UPDATE)

`fw_workflow_executions_p202604`

RLS: ✅ enabled

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`rule_id`	uuid	no
`log_id`	uuid	yes
`status`	text	no	’running’::text
`current_node_id`	text	yes
`variables`	jsonb	no	’{}‘::jsonb
`node_states`	jsonb	no	’{}‘::jsonb
`execution_path`	jsonb	no	’[]‘::jsonb
`parallel_branches`	jsonb	no	’{}‘::jsonb
`error_node_id`	text	yes
`error_message`	text	yes
`retry_count`	integer	yes	0
`started_at`	timestamp with time zone	no	now()
`paused_at`	timestamp with time zone	yes
`resumed_at`	timestamp with time zone	yes
`completed_at`	timestamp with time zone	yes
`custom_fields`	jsonb	no	’{}‘::jsonb
`workflow_version`	integer	yes
`debug_state`	jsonb	yes	’{}‘::jsonb
`performance_profile`	jsonb	yes	’{}‘::jsonb
`replay_of_id`	uuid	yes
`created_at`	timestamp with time zone	yes	now()
`updated_at`	timestamp with time zone	yes	now()
`trigger_type`	text	yes
`trigger_payload`	jsonb	yes
`current_step_id`	text	yes
`next_retry_at`	timestamp with time zone	yes
`deadline_at`	timestamp with time zone	yes
`correlation_id`	uuid	yes
`last_error`	text	yes
`timeout_warning_sent`	boolean	no	false
`parent_execution_id`	uuid	yes
`rate_limit_hold_until`	timestamp with time zone	yes
`rate_limit_reason`	text	yes

`fw_workflow_executions_p202605`

RLS: ✅ enabled

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`rule_id`	uuid	no
`log_id`	uuid	yes
`status`	text	no	’running’::text
`current_node_id`	text	yes
`variables`	jsonb	no	’{}‘::jsonb
`node_states`	jsonb	no	’{}‘::jsonb
`execution_path`	jsonb	no	’[]‘::jsonb
`parallel_branches`	jsonb	no	’{}‘::jsonb
`error_node_id`	text	yes
`error_message`	text	yes
`retry_count`	integer	yes	0
`started_at`	timestamp with time zone	no	now()
`paused_at`	timestamp with time zone	yes
`resumed_at`	timestamp with time zone	yes
`completed_at`	timestamp with time zone	yes
`custom_fields`	jsonb	no	’{}‘::jsonb
`workflow_version`	integer	yes
`debug_state`	jsonb	yes	’{}‘::jsonb
`performance_profile`	jsonb	yes	’{}‘::jsonb
`replay_of_id`	uuid	yes
`created_at`	timestamp with time zone	yes	now()
`updated_at`	timestamp with time zone	yes	now()
`trigger_type`	text	yes
`trigger_payload`	jsonb	yes
`current_step_id`	text	yes
`next_retry_at`	timestamp with time zone	yes
`deadline_at`	timestamp with time zone	yes
`correlation_id`	uuid	yes
`last_error`	text	yes
`timeout_warning_sent`	boolean	no	false
`parent_execution_id`	uuid	yes
`rate_limit_hold_until`	timestamp with time zone	yes
`rate_limit_reason`	text	yes

`fw_workflow_executions_p202606`

RLS: ✅ enabled

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`rule_id`	uuid	no
`log_id`	uuid	yes
`status`	text	no	’running’::text
`current_node_id`	text	yes
`variables`	jsonb	no	’{}‘::jsonb
`node_states`	jsonb	no	’{}‘::jsonb
`execution_path`	jsonb	no	’[]‘::jsonb
`parallel_branches`	jsonb	no	’{}‘::jsonb
`error_node_id`	text	yes
`error_message`	text	yes
`retry_count`	integer	yes	0
`started_at`	timestamp with time zone	no	now()
`paused_at`	timestamp with time zone	yes
`resumed_at`	timestamp with time zone	yes
`completed_at`	timestamp with time zone	yes
`custom_fields`	jsonb	no	’{}‘::jsonb
`workflow_version`	integer	yes
`debug_state`	jsonb	yes	’{}‘::jsonb
`performance_profile`	jsonb	yes	’{}‘::jsonb
`replay_of_id`	uuid	yes
`created_at`	timestamp with time zone	yes	now()
`updated_at`	timestamp with time zone	yes	now()
`trigger_type`	text	yes
`trigger_payload`	jsonb	yes
`current_step_id`	text	yes
`next_retry_at`	timestamp with time zone	yes
`deadline_at`	timestamp with time zone	yes
`correlation_id`	uuid	yes
`last_error`	text	yes
`timeout_warning_sent`	boolean	no	false
`parent_execution_id`	uuid	yes
`rate_limit_hold_until`	timestamp with time zone	yes
`rate_limit_reason`	text	yes

`fw_workflow_executions_p202607`

RLS: ✅ enabled

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`rule_id`	uuid	no
`log_id`	uuid	yes
`status`	text	no	’running’::text
`current_node_id`	text	yes
`variables`	jsonb	no	’{}‘::jsonb
`node_states`	jsonb	no	’{}‘::jsonb
`execution_path`	jsonb	no	’[]‘::jsonb
`parallel_branches`	jsonb	no	’{}‘::jsonb
`error_node_id`	text	yes
`error_message`	text	yes
`retry_count`	integer	yes	0
`started_at`	timestamp with time zone	no	now()
`paused_at`	timestamp with time zone	yes
`resumed_at`	timestamp with time zone	yes
`completed_at`	timestamp with time zone	yes
`custom_fields`	jsonb	no	’{}‘::jsonb
`workflow_version`	integer	yes
`debug_state`	jsonb	yes	’{}‘::jsonb
`performance_profile`	jsonb	yes	’{}‘::jsonb
`replay_of_id`	uuid	yes
`created_at`	timestamp with time zone	yes	now()
`updated_at`	timestamp with time zone	yes	now()
`trigger_type`	text	yes
`trigger_payload`	jsonb	yes
`current_step_id`	text	yes
`next_retry_at`	timestamp with time zone	yes
`deadline_at`	timestamp with time zone	yes
`correlation_id`	uuid	yes
`last_error`	text	yes
`timeout_warning_sent`	boolean	no	false
`parent_execution_id`	uuid	yes
`rate_limit_hold_until`	timestamp with time zone	yes
`rate_limit_reason`	text	yes

`fw_workflow_executions_p202608`

RLS: ✅ enabled

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`rule_id`	uuid	no
`log_id`	uuid	yes
`status`	text	no	’running’::text
`current_node_id`	text	yes
`variables`	jsonb	no	’{}‘::jsonb
`node_states`	jsonb	no	’{}‘::jsonb
`execution_path`	jsonb	no	’[]‘::jsonb
`parallel_branches`	jsonb	no	’{}‘::jsonb
`error_node_id`	text	yes
`error_message`	text	yes
`retry_count`	integer	yes	0
`started_at`	timestamp with time zone	no	now()
`paused_at`	timestamp with time zone	yes
`resumed_at`	timestamp with time zone	yes
`completed_at`	timestamp with time zone	yes
`custom_fields`	jsonb	no	’{}‘::jsonb
`workflow_version`	integer	yes
`debug_state`	jsonb	yes	’{}‘::jsonb
`performance_profile`	jsonb	yes	’{}‘::jsonb
`replay_of_id`	uuid	yes
`created_at`	timestamp with time zone	yes	now()
`updated_at`	timestamp with time zone	yes	now()
`trigger_type`	text	yes
`trigger_payload`	jsonb	yes
`current_step_id`	text	yes
`next_retry_at`	timestamp with time zone	yes
`deadline_at`	timestamp with time zone	yes
`correlation_id`	uuid	yes
`last_error`	text	yes
`timeout_warning_sent`	boolean	no	false
`parent_execution_id`	uuid	yes
`rate_limit_hold_until`	timestamp with time zone	yes
`rate_limit_reason`	text	yes

`fw_workflow_executions_p202609`

RLS: ✅ enabled

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`rule_id`	uuid	no
`log_id`	uuid	yes
`status`	text	no	’running’::text
`current_node_id`	text	yes
`variables`	jsonb	no	’{}‘::jsonb
`node_states`	jsonb	no	’{}‘::jsonb
`execution_path`	jsonb	no	’[]‘::jsonb
`parallel_branches`	jsonb	no	’{}‘::jsonb
`error_node_id`	text	yes
`error_message`	text	yes
`retry_count`	integer	yes	0
`started_at`	timestamp with time zone	no	now()
`paused_at`	timestamp with time zone	yes
`resumed_at`	timestamp with time zone	yes
`completed_at`	timestamp with time zone	yes
`custom_fields`	jsonb	no	’{}‘::jsonb
`workflow_version`	integer	yes
`debug_state`	jsonb	yes	’{}‘::jsonb
`performance_profile`	jsonb	yes	’{}‘::jsonb
`replay_of_id`	uuid	yes
`created_at`	timestamp with time zone	yes	now()
`updated_at`	timestamp with time zone	yes	now()
`trigger_type`	text	yes
`trigger_payload`	jsonb	yes
`current_step_id`	text	yes
`next_retry_at`	timestamp with time zone	yes
`deadline_at`	timestamp with time zone	yes
`correlation_id`	uuid	yes
`last_error`	text	yes
`timeout_warning_sent`	boolean	no	false
`parent_execution_id`	uuid	yes
`rate_limit_hold_until`	timestamp with time zone	yes
`rate_limit_reason`	text	yes

`fw_workflow_executions_p202610`

RLS: ✅ enabled

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`rule_id`	uuid	no
`log_id`	uuid	yes
`status`	text	no	’running’::text
`current_node_id`	text	yes
`variables`	jsonb	no	’{}‘::jsonb
`node_states`	jsonb	no	’{}‘::jsonb
`execution_path`	jsonb	no	’[]‘::jsonb
`parallel_branches`	jsonb	no	’{}‘::jsonb
`error_node_id`	text	yes
`error_message`	text	yes
`retry_count`	integer	yes	0
`started_at`	timestamp with time zone	no	now()
`paused_at`	timestamp with time zone	yes
`resumed_at`	timestamp with time zone	yes
`completed_at`	timestamp with time zone	yes
`custom_fields`	jsonb	no	’{}‘::jsonb
`workflow_version`	integer	yes
`debug_state`	jsonb	yes	’{}‘::jsonb
`performance_profile`	jsonb	yes	’{}‘::jsonb
`replay_of_id`	uuid	yes
`created_at`	timestamp with time zone	yes	now()
`updated_at`	timestamp with time zone	yes	now()
`trigger_type`	text	yes
`trigger_payload`	jsonb	yes
`current_step_id`	text	yes
`next_retry_at`	timestamp with time zone	yes
`deadline_at`	timestamp with time zone	yes
`correlation_id`	uuid	yes
`last_error`	text	yes
`timeout_warning_sent`	boolean	no	false
`parent_execution_id`	uuid	yes
`rate_limit_hold_until`	timestamp with time zone	yes
`rate_limit_reason`	text	yes

`fw_workflow_executions_p202611`

RLS: ✅ enabled

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`rule_id`	uuid	no
`log_id`	uuid	yes
`status`	text	no	’running’::text
`current_node_id`	text	yes
`variables`	jsonb	no	’{}‘::jsonb
`node_states`	jsonb	no	’{}‘::jsonb
`execution_path`	jsonb	no	’[]‘::jsonb
`parallel_branches`	jsonb	no	’{}‘::jsonb
`error_node_id`	text	yes
`error_message`	text	yes
`retry_count`	integer	yes	0
`started_at`	timestamp with time zone	no	now()
`paused_at`	timestamp with time zone	yes
`resumed_at`	timestamp with time zone	yes
`completed_at`	timestamp with time zone	yes
`custom_fields`	jsonb	no	’{}‘::jsonb
`workflow_version`	integer	yes
`debug_state`	jsonb	yes	’{}‘::jsonb
`performance_profile`	jsonb	yes	’{}‘::jsonb
`replay_of_id`	uuid	yes
`created_at`	timestamp with time zone	yes	now()
`updated_at`	timestamp with time zone	yes	now()
`trigger_type`	text	yes
`trigger_payload`	jsonb	yes
`current_step_id`	text	yes
`next_retry_at`	timestamp with time zone	yes
`deadline_at`	timestamp with time zone	yes
`correlation_id`	uuid	yes
`last_error`	text	yes
`timeout_warning_sent`	boolean	no	false
`parent_execution_id`	uuid	yes
`rate_limit_hold_until`	timestamp with time zone	yes
`rate_limit_reason`	text	yes

`fw_workflow_executions_pdefault`

RLS: ✅ enabled

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`rule_id`	uuid	no
`log_id`	uuid	yes
`status`	text	no	’running’::text
`current_node_id`	text	yes
`variables`	jsonb	no	’{}‘::jsonb
`node_states`	jsonb	no	’{}‘::jsonb
`execution_path`	jsonb	no	’[]‘::jsonb
`parallel_branches`	jsonb	no	’{}‘::jsonb
`error_node_id`	text	yes
`error_message`	text	yes
`retry_count`	integer	yes	0
`started_at`	timestamp with time zone	no	now()
`paused_at`	timestamp with time zone	yes
`resumed_at`	timestamp with time zone	yes
`completed_at`	timestamp with time zone	yes
`custom_fields`	jsonb	no	’{}‘::jsonb
`workflow_version`	integer	yes
`debug_state`	jsonb	yes	’{}‘::jsonb
`performance_profile`	jsonb	yes	’{}‘::jsonb
`replay_of_id`	uuid	yes
`created_at`	timestamp with time zone	yes	now()
`updated_at`	timestamp with time zone	yes	now()
`trigger_type`	text	yes
`trigger_payload`	jsonb	yes
`current_step_id`	text	yes
`next_retry_at`	timestamp with time zone	yes
`deadline_at`	timestamp with time zone	yes
`correlation_id`	uuid	yes
`last_error`	text	yes
`timeout_warning_sent`	boolean	no	false
`parent_execution_id`	uuid	yes
`rate_limit_hold_until`	timestamp with time zone	yes
`rate_limit_reason`	text	yes

`fw_workflow_notification_preferences`

RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`user_id`	uuid	no
`email_enabled`	boolean	no	true
`in_app_enabled`	boolean	no	true
`sms_enabled`	boolean	no	false
`frequency`	text	no	’immediate’::text
`workflow_filters`	uuid[]	yes
`notification_type_filters`	text[]	yes
`severity_filters`	text[]	yes
`quiet_hours_enabled`	boolean	no	false
`quiet_hours_start`	time without time zone	yes
`quiet_hours_end`	time without time zone	yes
`quiet_hours_timezone`	text	yes
`critical_alerts_override_quiet_hours`	boolean	no	true
`custom_fields`	jsonb	no	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`site_id`	uuid	yes

Foreign keys:

organization_id → pf_organizations(id)
site_id → pf_sites(id)
user_id → pf_profiles(id)

Policies:

notification_preferences_delete (DELETE)
notification_preferences_insert (INSERT)
notification_preferences_select (SELECT)
notification_preferences_update (UPDATE)

`fw_workflow_notification_rules`

RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`rule_id`	uuid	no
`notification_type`	text	no
`notification_channels`	text[]	no	ARRAY[‘in_app’::text]
`recipient_user_ids`	uuid[]	yes
`recipient_roles`	app_role[]	yes
`notify_owner`	boolean	no	true
`notify_editors`	boolean	no	false
`notify_admins`	boolean	no	false
`is_enabled`	boolean	no	true
`custom_fields`	jsonb	no	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	no
`updated_by`	uuid	yes
`site_id`	uuid	yes

Foreign keys:

created_by → pf_profiles(id)
organization_id → pf_organizations(id)
rule_id → fw_automation_rules(id)
site_id → pf_sites(id)
updated_by → pf_profiles(id)

Policies:

notification_rules_delete (DELETE)
notification_rules_insert (INSERT)
notification_rules_select (SELECT)
notification_rules_update (UPDATE)

`fw_workflow_optimization_suggestions`

FW-30: AI-generated workflow optimization suggestions RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`rule_id`	uuid	no
`workflow_version`	integer	yes
`suggestion_type`	text	no
`severity`	text	no	’info’::text
`title`	text	no
`description`	text	no
`affected_nodes`	jsonb	no	’[]‘::jsonb
`suggested_changes`	jsonb	no	’{}‘::jsonb
`estimated_impact`	jsonb	no	’{}‘::jsonb
`confidence_score`	numeric(5,2)	yes
`status`	text	no	’pending’::text
`applied_at`	timestamp with time zone	yes
`applied_by`	uuid	yes
`dismissed_at`	timestamp with time zone	yes
`dismissed_by`	uuid	yes
`dismissed_reason`	text	yes
`ai_model_version`	text	yes
`analysis_context`	jsonb	no	’{}‘::jsonb
`custom_fields`	jsonb	no	’{}‘::jsonb	Organization-specific metadata
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes

Foreign keys:

applied_by → users(id)
created_by → users(id)
dismissed_by → users(id)
organization_id → pf_organizations(id)
rule_id → fw_automation_rules(id)
updated_by → users(id)

Policies:

fw_optimization_suggestions_delete (DELETE)
fw_optimization_suggestions_insert (INSERT)
fw_optimization_suggestions_select (SELECT)
fw_optimization_suggestions_update (UPDATE)

`fw_workflow_path_analytics`

RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`rule_id`	uuid	no
`workflow_version`	integer	no	1
`path_id`	text	no
`path_nodes`	text[]	no
`execution_count`	integer	no	0
`success_count`	integer	no	0
`failure_count`	integer	no	0
`total_execution_time_ms`	bigint	no	0
`avg_execution_time_ms`	numeric(12,2)	no	0
`min_execution_time_ms`	bigint	yes
`max_execution_time_ms`	bigint	yes
`first_seen_at`	timestamp with time zone	no	now()
`last_seen_at`	timestamp with time zone	no	now()
`custom_fields`	jsonb	no	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes		User who last updated this record

Foreign keys:

created_by → pf_profiles(id)
organization_id → pf_organizations(id)
rule_id → fw_automation_rules(id)
updated_by → pf_profiles(id)

Policies:

fw_path_analytics_delete (DELETE)
fw_path_analytics_insert (INSERT)
fw_path_analytics_select (SELECT)
fw_path_analytics_update (UPDATE)

`fw_workflow_performance_metrics`

RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`rule_id`	uuid	no
`workflow_version`	integer	yes
`node_id`	text	yes
`execution_count`	integer	no	0
`success_count`	integer	no	0
`failure_count`	integer	no	0
`total_duration_ms`	bigint	no	0
`avg_duration_ms`	numeric(12,2)	yes
`min_duration_ms`	bigint	yes
`max_duration_ms`	bigint	yes
`p50_duration_ms`	numeric(12,2)	yes
`p95_duration_ms`	numeric(12,2)	yes
`p99_duration_ms`	numeric(12,2)	yes
`success_rate_percent`	numeric(5,2)	yes
`failure_rate_percent`	numeric(5,2)	yes
`metric_date`	date	no	CURRENT_DATE
`custom_fields`	jsonb	no	’{}‘::jsonb
`last_calculated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes		User who last updated this record

Foreign keys:

created_by → pf_profiles(id)
organization_id → pf_organizations(id)
rule_id → fw_automation_rules(id)
updated_by → pf_profiles(id)

Policies:

fw_performance_metrics_delete (DELETE)
fw_performance_metrics_insert (INSERT)
fw_performance_metrics_select (SELECT)
fw_performance_metrics_update (UPDATE)

`fw_workflow_recovery_workflows`

FW-25: Recovery workflow definitions linked to automation rules RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`site_id`	uuid	yes
`rule_id`	uuid	no
`node_id`	text	yes
`recovery_rule_id`	uuid	no
`recovery_trigger`	text	no	’on_failure’::text
`is_enabled`	boolean	no	true
`priority`	integer	no	0
`custom_fields`	jsonb	no	’{}‘::jsonb	Organization-specific metadata
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes

Foreign keys:

created_by → pf_profiles(id)
organization_id → pf_organizations(id)
recovery_rule_id → fw_automation_rules(id)
rule_id → fw_automation_rules(id)
site_id → pf_sites(id)
updated_by → pf_profiles(id)

Policies:

fw_recovery_workflows_delete (DELETE)
fw_recovery_workflows_insert (INSERT)
fw_recovery_workflows_select (SELECT)
fw_recovery_workflows_update (UPDATE)

`fw_workflow_retry_configs`

FW-25: Per-node retry configuration for workflow automation rules RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`site_id`	uuid	yes
`rule_id`	uuid	no
`node_id`	text	no
`retry_strategy`	text	no	’exponential’::text
`max_retry_count`	integer	no	3
`initial_delay_ms`	integer	no	1000
`backoff_multiplier`	numeric(5,2)	yes	2.0
`increment_ms`	integer	yes	1000
`max_delay_ms`	integer	yes	60000
`custom_schedule`	integer[]	yes
`retry_on_error_types`	text[]	yes
`do_not_retry_on_error_types`	text[]	yes
`custom_fields`	jsonb	no	’{}‘::jsonb	Organization-specific metadata
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes

Foreign keys:

created_by → pf_profiles(id)
organization_id → pf_organizations(id)
rule_id → fw_automation_rules(id)
site_id → pf_sites(id)
updated_by → pf_profiles(id)

Policies:

fw_retry_configs_delete (DELETE)
fw_retry_configs_insert (INSERT)
fw_retry_configs_select (SELECT)
fw_retry_configs_update (UPDATE)

`fw_workflow_schedules`

FW-26: scheduling configuration for an automation rule (cron / datetime / dependency / manual). One schedule per rule. RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`rule_id`	uuid	no
`schedule_type`	text	no
`cron_expression`	text	yes
`scheduled_datetime`	timestamp with time zone	yes
`timezone`	text	yes
`depends_on_rule_id`	uuid	yes
`depends_on_condition`	text	yes
`is_active`	boolean	no	true
`last_executed_at`	timestamp with time zone	yes
`next_execution_at`	timestamp with time zone	yes		Computed next run time; the durable worker (FW-46) dispatches rows whose next_execution_at <= now() and is_active.
`conflict_resolution`	text	no	’skip’::text	Strategy when a run would overlap another scheduled run: skip \| delay \| error.
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	no
`updated_by`	uuid	yes

Foreign keys:

created_by → users(id)
depends_on_rule_id → fw_automation_rules(id)
organization_id → pf_organizations(id)
rule_id → fw_automation_rules(id)
updated_by → users(id)

Policies:

fw_workflow_schedules_org_delete (DELETE)
fw_workflow_schedules_org_insert (INSERT)
fw_workflow_schedules_org_select (SELECT)
fw_workflow_schedules_org_update (UPDATE)

`fw_workflow_template_ratings`

FW-28: Ratings and reviews for workflow templates RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`template_id`	uuid	no
`rating`	integer	no
`review_text`	text	yes
`is_helpful_count`	integer	yes	0
`is_not_helpful_count`	integer	yes	0
`custom_fields`	jsonb	no	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes		User who last updated this record

Foreign keys:

created_by → pf_profiles(id)
organization_id → pf_organizations(id)
template_id → fw_workflow_templates(id)
updated_by → pf_profiles(id)

Policies:

fw_workflow_template_ratings_delete (DELETE)
fw_workflow_template_ratings_insert (INSERT)
fw_workflow_template_ratings_select (SELECT)
fw_workflow_template_ratings_update (UPDATE)

`fw_workflow_template_usage`

FW-28: Tracks usage of workflow templates RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`template_id`	uuid	no
`workflow_id`	uuid	yes
`used_at`	timestamp with time zone	no	now()
`used_by`	uuid	yes
`customization_level`	text	yes	’none’::text
`custom_fields`	jsonb	no	’{}‘::jsonb
`created_at`	timestamp with time zone	yes	now()
`updated_at`	timestamp with time zone	yes	now()

Foreign keys:

organization_id → pf_organizations(id)
template_id → fw_workflow_templates(id)
used_by → pf_profiles(id)

Policies:

fw_workflow_template_usage_delete (DELETE)
fw_workflow_template_usage_insert (INSERT)
fw_workflow_template_usage_select (SELECT)
fw_workflow_template_usage_update (UPDATE)

`fw_workflow_template_versions`

RLS: ✅ enabled (3 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`template_id`	uuid	no
`version`	integer	no
`published_by`	uuid	no
`published_at`	timestamp with time zone	no	now()
`notes`	text	yes
`changelog`	text	yes
`template_snapshot`	jsonb	no
`parameters_snapshot`	jsonb	yes
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	yes	now()

Foreign keys:

organization_id → pf_organizations(id)
published_by → pf_profiles(id)
template_id → fw_workflow_templates(id)

Policies:

fw_template_versions_delete (DELETE)
fw_template_versions_insert (INSERT)
fw_template_versions_select (SELECT)

`fw_workflow_templates`

FW-28: Workflow templates for reuse and marketplace sharing RLS: ✅ enabled (6 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	yes
`name`	text	no
`description`	text	yes
`category`	text	no	’general’::text
`tags`	text[]	yes	’{}‘::text[]
`icon`	text	yes
`template_data`	jsonb	no	’{}‘::jsonb
`template_version`	text	no	’1.0.0’::text
`parameters`	jsonb	yes	’[]‘::jsonb
`visibility`	text	no	’private’::text
`is_featured`	boolean	yes	false
`usage_count`	integer	yes	0
`rating_average`	numeric(3,2)	yes	0
`rating_count`	integer	yes	0
`source_workflow_id`	uuid	yes
`source_template_id`	uuid	yes
`status`	text	no	’draft’::text
`custom_fields`	jsonb	no	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes
`pattern_category`	text	yes		FW-57: Healthcare pattern catalog category; NULL for non-healthcare templates
`compliance_tags`	text[]	yes	’{}‘::text[]	FW-57: e.g. HIPAA, TJC, CARF, CMS, DEA
`required_node_ids`	text[]	yes	’{}‘::text[]	FW-57: Node IDs that must remain in graphs instantiated from this template
`regulatory_references`	jsonb	yes	’[]‘::jsonb	FW-57: [{ regulation, section, description, last_reviewed }]
`is_marketplace`	boolean	yes	false
`is_system_template`	boolean	no	false

Foreign keys:

created_by → pf_profiles(id)
organization_id → pf_organizations(id)
source_template_id → fw_workflow_templates(id)
updated_by → pf_profiles(id)

Policies:

fw_workflow_templates_delete (DELETE)
fw_workflow_templates_insert (INSERT)
fw_workflow_templates_select (SELECT)
fw_workflow_templates_system_immutable_delete (DELETE)
fw_workflow_templates_system_immutable_update (UPDATE)
fw_workflow_templates_update (UPDATE)

`fw_workflow_version_comparisons`

RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`rule_id`	uuid	no
`version_a`	integer	no
`version_b`	integer	no
`comparison_date`	date	no	CURRENT_DATE
`version_a_execution_count`	integer	no	0
`version_a_success_count`	integer	no	0
`version_a_failure_count`	integer	no	0
`version_a_avg_duration_ms`	numeric(12,2)	yes
`version_a_success_rate_percent`	numeric(5,2)	yes
`version_b_execution_count`	integer	no	0
`version_b_success_count`	integer	no	0
`version_b_failure_count`	integer	no	0
`version_b_avg_duration_ms`	numeric(12,2)	yes
`version_b_success_rate_percent`	numeric(5,2)	yes
`duration_delta_ms`	numeric(12,2)	yes
`duration_delta_percent`	numeric(8,2)	yes
`success_rate_delta_percent`	numeric(8,2)	yes
`is_statistically_significant`	boolean	yes	false
`confidence_level`	numeric(5,2)	yes
`sample_size_adequate`	boolean	yes	false
`has_regression`	boolean	yes	false
`regression_severity`	text	yes
`regression_details`	jsonb	yes	’{}‘::jsonb
`custom_fields`	jsonb	no	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes		User who last updated this record

Foreign keys:

created_by → users(id)
organization_id → pf_organizations(id)
rule_id → fw_automation_rules(id)
updated_by → users(id)

Policies:

fw_version_comparisons_delete_admin (DELETE)
fw_version_comparisons_insert_admin (INSERT)
fw_version_comparisons_select (SELECT)
fw_version_comparisons_update_admin (UPDATE)

`fw_workflow_versions`

RLS: ✅ enabled (2 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`rule_id`	uuid	no
`version`	integer	no
`published_by`	uuid	no
`published_at`	timestamp with time zone	no	now()
`notes`	text	yes
`tags`	text[]	yes
`workflow_snapshot`	jsonb	no
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	yes	now()

Foreign keys:

organization_id → pf_organizations(id)
published_by → pf_profiles(id)
rule_id → fw_automation_rules(id)

Policies:

workflow_versions_org_insert (INSERT)
workflow_versions_org_select (SELECT)

Facilities Management Schema Reference Governance & Risk Schema Reference

​Entity relationships

​Tables

​fw_action_templates

​fw_api_connections

​fw_approval_assignments

​fw_approval_chains

​fw_approval_delegations

​fw_approval_history

​fw_approval_requests

​fw_approval_routing_rules

​fw_approval_steps

​fw_automation_actions

​fw_automation_logs

​fw_automation_rules

​fw_business_calendars

​fw_calendar_holidays

​fw_compliance_audit_entries

​fw_dead_letter_queue

​fw_debug_sessions

​fw_decision_table_versions

​fw_decision_tables

​fw_dependency_graph

​fw_domain_events

​fw_execution_logs

​fw_execution_rate_counters

​fw_execution_steps

​fw_form_fields

​fw_form_permissions

​fw_form_portal_config

​fw_form_prefill_rules

​fw_form_submission_signatures

​fw_form_submissions

​fw_form_template_ratings

​fw_form_templates

​fw_form_versions

​fw_forms

​fw_kpi_configurations

​fw_kpi_report_schedules

​fw_kpi_snapshots

​fw_module_settings

​fw_page_templates

​fw_portal_rate_limits

​fw_portal_submissions

​fw_query_whitelist

​fw_rate_limit_configs

​fw_regulatory_change_log

​fw_rule_evaluations

​fw_sandbox_executions

​fw_signature_audit_log

​fw_subflows

​fw_submission_attachments

​fw_submission_notes

​fw_submission_sections

​fw_template_update_notifications

​fw_test_cases

​fw_test_coverage

​fw_test_datasets

​fw_test_scenarios

​fw_webhook_endpoints

​fw_webhook_logs

​fw_webhook_secrets

​fw_workflow_alert_rules

​fw_workflow_alerts

​fw_workflow_approvals

​fw_workflow_audit_events

​fw_workflow_audit_events_p202604

​fw_workflow_audit_events_p202605

​fw_workflow_audit_events_p202606

​fw_workflow_audit_events_p202607

​fw_workflow_audit_events_p202608

​fw_workflow_audit_events_p202609

​fw_workflow_audit_events_p202610

​fw_workflow_audit_events_p202611

​fw_workflow_audit_events_pdefault

​fw_workflow_best_practices

​fw_workflow_circuit_breakers

​fw_workflow_compensation_actions

​fw_workflow_compliance_scores

​fw_workflow_definitions

​fw_workflow_events

Entity relationships

Tables

`fw_action_templates`

`fw_api_connections`

`fw_approval_assignments`

`fw_approval_chains`

`fw_approval_delegations`

`fw_approval_history`

`fw_approval_requests`

`fw_approval_routing_rules`

`fw_approval_steps`

`fw_automation_actions`

`fw_automation_logs`

`fw_automation_rules`

`fw_business_calendars`

`fw_calendar_holidays`

`fw_compliance_audit_entries`

`fw_dead_letter_queue`

`fw_debug_sessions`

`fw_decision_table_versions`

`fw_decision_tables`

`fw_dependency_graph`

`fw_domain_events`

`fw_execution_logs`

`fw_execution_rate_counters`

`fw_execution_steps`

`fw_form_fields`

`fw_form_permissions`

`fw_form_portal_config`

`fw_form_prefill_rules`

`fw_form_submission_signatures`

`fw_form_submissions`

`fw_form_template_ratings`

`fw_form_templates`

`fw_form_versions`

`fw_forms`

`fw_kpi_configurations`

`fw_kpi_report_schedules`

`fw_kpi_snapshots`

`fw_module_settings`

`fw_page_templates`

`fw_portal_rate_limits`

`fw_portal_submissions`

`fw_query_whitelist`

`fw_rate_limit_configs`

`fw_regulatory_change_log`

`fw_rule_evaluations`

`fw_sandbox_executions`

`fw_signature_audit_log`

`fw_subflows`

`fw_submission_attachments`

`fw_submission_notes`

`fw_submission_sections`

`fw_template_update_notifications`

`fw_test_cases`

`fw_test_coverage`

`fw_test_datasets`

`fw_test_scenarios`

`fw_webhook_endpoints`

`fw_webhook_logs`

`fw_webhook_secrets`

`fw_workflow_alert_rules`

`fw_workflow_alerts`

`fw_workflow_approvals`

`fw_workflow_audit_events`

`fw_workflow_audit_events_p202604`

`fw_workflow_audit_events_p202605`

`fw_workflow_audit_events_p202606`

`fw_workflow_audit_events_p202607`

`fw_workflow_audit_events_p202608`

`fw_workflow_audit_events_p202609`

`fw_workflow_audit_events_p202610`

`fw_workflow_audit_events_p202611`

`fw_workflow_audit_events_pdefault`

`fw_workflow_best_practices`

`fw_workflow_circuit_breakers`

`fw_workflow_compensation_actions`

`fw_workflow_compliance_scores`

`fw_workflow_definitions`

`fw_workflow_events`