Module resolver 

Caller identity resolution and scoped-engine selection. Namespace resolver type wired into shared state.

Workflow→namespace ownership is a projection of durable history: the server records the owning namespace as the aion.namespace search attribute when a workflow starts, and verification folds that attribute back out of the workflow’s recorded events. Nothing about ownership lives only in memory, so a server restart can never orphan a workflow from its namespace.

Structs

CallerIdentity

Authenticated caller metadata supplied by an adapter boundary.

NamespaceResolver

Resolver that authorizes callers and yields namespace-scoped engine access.

ScopedEngine

Namespace-scoped access to the embedded engine.

StaticWorkflowNamespaces

Static workflow→namespace fixture for adapter-boundary tests and alternate wiring that must authorize without an engine handle.

WorkflowAttribution

Durable per-workflow attribution facts projected from recorded history.

Constants

NAMESPACE_ATTRIBUTE

Search attribute name that records the owning namespace of every workflow started through this server.

TASK_QUEUE_ATTRIBUTE

Search attribute name that records the default task queue a workflow was started against (the namespace × task_queue targeting story). Recorded durably in the same atomic append as WorkflowStarted, mirroring NAMESPACE_ATTRIBUTE, so the start-time queue selection survives replay and failover. Absent when the start did not select a task queue (the workflow falls back to the namespace’s default queue).

Traits

WorkflowNamespaceSource

Durable source of workflow→namespace ownership and type attribution facts.