@elevasis/sdk 1.10.0 → 1.11.0

package/reference/scaffold/recipes/gate-by-feature-or-admin.md

@@ -1,158 +1,114 @@
----
-title: Gate by Feature or Admin
-description: Decision table and step-by-step recipes for gating routes, nav items, and UI elements by feature flag or admin role.
----
-
-# Gate by Feature or Admin
-
-End-to-end: gate a route, nav item, or UI element. Steps are sequential.
-
-See [glossary.md](../reference/glossary.md) under **FeatureGuard**, **AdminGuard**, **featureId**, **featureKey**, **Settings asymmetry**, and **MembershipFeatureConfig**. See [contracts.md](../reference/contracts.md) for `MembershipFeatureConfig` shape and the settings-asymmetry callout.
-
-For the three-concept model in full detail, see [feature-flags-and-gating.md](../ui/feature-flags-and-gating.md).
-
----
-
-## 1. Decide: feature-level or admin-level?
-
-| Scenario                                                                         | Gate to use                                                            |
-| -------------------------------------------------------------------------------- | ---------------------------------------------------------------------- |
-| Surface should be off by default for all members, toggled org-wide or per member | `FeatureGuard` + `featureKey` on nav entry                             |
-| Surface is always visible to authenticated members but restricted to admins only | `AdminGuard` + `requiresAdmin` on nav entry                            |
-| Surface is both feature-gated and admin-only                                     | Both: `FeatureGuard` wrapping `AdminGuard`, plus both nav-entry fields |
-
-Do not substitute one for the other. `FeatureGuard` reads feature flags; `AdminGuard` reads admin role. They are independent.
-
----
-
-## 2. Feature gate -- org level
-
-Ensure a feature object with the matching `id` exists in the org model. File: `core/config/organization-model.ts`.
-
-```ts
-import { defineOrganizationModel, OPERATIONS_FEATURE_ID, SALES_FEATURE_ID } from '@elevasis/core/organization-model'
-
-// In the features[] array inside defineOrganizationModel:
-features: [
-  // ... existing features
-  { id: 'analytics', label: 'Analytics', enabled: false, entityIds: [], surfaceIds: [], resourceIds: [], capabilityIds: [] }
-]
-```
-
-Use typed constants for the 7 platform features (`SALES_FEATURE_ID`, `OPERATIONS_FEATURE_ID`, etc.); use string literals for project-specific features you invent. In this example, `'analytics'` is a project-local feature and stays as a string literal.
-
-See [add-a-feature.md](add-a-feature.md) step 2 for the full feature object shape.
-
-Set `enabled: true` to enable for all members by default.
-
----
-
-## 3. Feature gate -- route level
-
-Wrap the route layout with `FeatureGuard` inside `ProtectedRoute`. The template-local `FeatureGuard` resolves key aliases automatically.
-
-```tsx
-import { ProtectedRoute } from '@/features/auth'
-import { FeatureGuard } from '@/features/auth/guards/FeatureGuard'
-import { createFileRoute, Outlet } from '@tanstack/react-router'
-
-export const Route = createFileRoute('/analytics')({ component: AnalyticsLayout })
-
-function AnalyticsLayout() {
-  return (
-    <ProtectedRoute>
-      <FeatureGuard featureKey="analytics">
-        <Outlet />
-      </FeatureGuard>
-    </ProtectedRoute>
-  )
-}
-```
-
-`FeatureGuard` redirects to `/` with a Mantine notification when the feature is off. All child routes under this layout are automatically protected -- no need to repeat the guard in children.
-
-Import path: `@/features/auth/guards/FeatureGuard` (template-local). Do not import `FeatureGuard` from `@elevasis/ui/features` -- that version does not close over the local org model. See [feature-flags-and-gating.md](../ui/feature-flags-and-gating.md) for the import-paths table.
-
----
-
-## 4. Admin gate -- route level
-
-Wrap with `AdminGuard` inside `ProtectedRoute`. `AdminGuard` redirects non-admins to `redirectTo` (default `/`).
-
-```tsx
-import { ProtectedRoute } from '@/features/auth'
-import { AdminGuard } from '@elevasis/ui/auth'
-import { createFileRoute, Outlet } from '@tanstack/react-router'
-
-export const Route = createFileRoute('/admin')({ component: AdminLayout })
-
-function AdminLayout() {
-  return (
-    <ProtectedRoute>
-      <AdminGuard>
-        <Outlet />
-      </AdminGuard>
-    </ProtectedRoute>
-  )
-}
-```
-
-Import path: `@elevasis/ui/auth` (published). Always nest inside `ProtectedRoute` -- the guard depends on the user profile being loaded.
-
----
-
-## 5. Nav-item visibility
-
-Declare `featureKey` on the nav entry to have the shell auto-hide it when the feature is off. Declare `requiresAdmin: true` to hide it for non-admin members.
-
-```ts
-// In FeatureModule.navEntry (manifest-backed features):
-navEntry: {
-  label: 'Analytics',
-  icon: IconChartBar,
-  link: '/analytics',
-  featureKey: 'analytics'   // optional -- featureId already gates the whole module
-}
-
-// In nav-items.ts (app-local nav):
-{ label: 'Analytics', icon: IconChartBar, link: '/analytics', featureKey: 'analytics' }
-{ label: 'Admin',     icon: IconShield,   link: '/admin',     requiresAdmin: true }
-```
-
-`featureKey` on a nav entry is a display hint only -- it does not protect the route. Always pair with a route-level `FeatureGuard`. See [glossary.md](../reference/glossary.md) under **featureId vs featureKey** for the distinction. When the `featureKey` is one of the 7 platform features, prefer the typed constant (e.g., `featureKey: SALES_FEATURE_ID`) over a string literal to catch renames at compile time.
-
----
-
-## 6. Per-member override
-
-`MembershipFeatureConfig.features` (stored in `org_memberships.config`) overrides org-level defaults per member. Full shape is in [contracts.md](../reference/contracts.md#membershipfeatureconfig).
-
-```ts
-// Disable analytics for a specific member (stored in their membership record):
-{
-  features: { analytics: false }
-}
-```
-
-`MembershipFeatureConfig.features` is `Record<string, boolean>` -- a dynamic map keyed by feature ID. Any feature ID from the org model can be overridden per member without schema changes.
-
-**Settings asymmetry -- read this before writing membership config.** The `settings` feature is intentionally excluded from per-member overrides: settings access is controlled by `requiresAdmin` and `AdminGuard`, not per-member feature flags. Writing a `settings` key to `org_memberships.config` has no effect. See [contracts.md](../reference/contracts.md#membershipfeatureconfig) for the full callout, and [glossary.md](../reference/glossary.md) under **Settings asymmetry**.
-
-Membership config is read/written directly via the Supabase client (`org_memberships.config` column). There is no dedicated API route for bulk updates.
-
----
-
-## 7. Verify
-
-State matrix -- confirm each combination:
-
-| Org feature enabled | Member override | Admin     | Expected result                               |
-| ------------------- | --------------- | --------- | --------------------------------------------- |
-| true                | (absent)        | any       | Route accessible, nav visible                 |
-| true                | false           | any       | Route redirects, nav hidden                   |
-| false               | (absent)        | any       | Route redirects, nav hidden                   |
-| false               | true            | any       | Route redirects (org gate wins)               |
-| true                | (absent)        | non-admin | Admin-gated route redirects, admin nav hidden |
-| true                | (absent)        | admin     | Admin-gated route accessible, nav visible     |
-
-Check each gate independently: feature toggle in `core/config/organization-model.ts`, membership config in `org_memberships.config`, and admin status in the user profile.
+---
+title: Gate by Feature or Admin
+description: Decision table and recipes for gating routes, sidebar entries, and UI elements by Organization Model feature ID or admin role.
+---
+
+# Gate by Feature or Admin
+
+Feature visibility starts in `core/config/organization-model.ts`. Routes still enforce access with guards.
+
+## Decide the gate
+
+| Scenario | Gate to use |
+| --- | --- |
+| Surface can be enabled or disabled per organization/member | `FeatureGuard` with the feature ID |
+| Surface is always available to members but restricted to admins | `AdminGuard` plus `requiresAdmin: true` on the feature node |
+| Surface is both feature-gated and admin-only | Both guards, plus `requiresAdmin: true` on the feature node |
+
+## Feature gate in the org model
+
+Add or update the feature in `features`.
+
+```ts
+features: [
+  {
+    id: 'analytics',
+    label: 'Analytics',
+    enabled: false,
+    path: '/analytics',
+    icon: 'chart',
+    uiPosition: 'sidebar-primary'
+  }
+]
+```
+
+Set `enabled: true` to enable it for all members by default. Dotted IDs such as `analytics.reports` inherit feature state and shell placement from their ancestors unless they declare their own value.
+
+## Route-level feature gate
+
+```tsx
+import { ProtectedRoute } from '@/features/auth'
+import { FeatureGuard } from '@/features/auth/guards/FeatureGuard'
+import { createFileRoute, Outlet } from '@tanstack/react-router'
+
+export const Route = createFileRoute('/analytics')({ component: AnalyticsLayout })
+
+function AnalyticsLayout() {
+  return (
+    <ProtectedRoute>
+      <FeatureGuard featureKey="analytics">
+        <Outlet />
+      </FeatureGuard>
+    </ProtectedRoute>
+  )
+}
+```
+
+The sidebar is derived from `OrganizationModel.features`; hiding a node there is display behavior only. Keep route guards in place for direct URL access.
+
+## Admin-only route
+
+```tsx
+import { ProtectedRoute } from '@/features/auth'
+import { AdminGuard } from '@elevasis/ui/auth'
+import { createFileRoute, Outlet } from '@tanstack/react-router'
+
+export const Route = createFileRoute('/admin')({ component: AdminLayout })
+
+function AdminLayout() {
+  return (
+    <ProtectedRoute>
+      <AdminGuard>
+        <Outlet />
+      </AdminGuard>
+    </ProtectedRoute>
+  )
+}
+```
+
+Pair the route guard with the feature node:
+
+```ts
+{
+  id: 'admin',
+  label: 'Admin',
+  enabled: true,
+  path: '/admin',
+  uiPosition: 'sidebar-bottom',
+  requiresAdmin: true
+}
+```
+
+## Per-member override
+
+`MembershipFeatureConfig.features` in `org_memberships.config` overrides enabled state per member.
+
+```ts
+{
+  features: { analytics: false }
+}
+```
+
+Settings and admin-only pages should use admin checks, not per-member feature flags.
+
+## Verify
+
+Check the state matrix:
+
+| Org feature enabled | Member override | Admin | Expected result |
+| --- | --- | --- | --- |
+| true | absent | any | Route accessible, sidebar visible |
+| true | false | any | Route redirects, sidebar hidden |
+| false | absent | any | Route redirects, sidebar hidden |
+| true | absent | non-admin | Admin route redirects, admin sidebar hidden |
+| true | absent | admin | Admin route accessible, admin sidebar visible |

package/reference/scaffold/reference/contracts.md

@@ -45,22 +45,28 @@ export type OrganizationModelProjects = z.infer<typeof OrganizationModelProjects
 export type OrganizationModelFeature = z.infer<typeof FeatureSchema>
 ```
 
-### `OrganizationModelNavigation`
+### `NodeIdPath`
 
 ```typescript
-export type OrganizationModelNavigation = z.infer<typeof OrganizationModelNavigationSchema>
+export type NodeIdPath = z.infer<typeof NodeIdPathSchema>
 ```
 
-### `OrganizationModelSurface`
+### `NodeIdString`
 
 ```typescript
-export type OrganizationModelSurface = z.infer<typeof SurfaceDefinitionSchema>
+export type NodeIdString = z.infer<typeof NodeIdStringSchema>
+```
+
+### `OrganizationModelNavigation`
+
+```typescript
+export type OrganizationModelNavigation = z.infer<typeof OrganizationModelNavigationSchema>
 ```
 
-### `OrganizationModelResourceMapping`
+### `OrganizationModelSurface`
 
 ```typescript
-export type OrganizationModelResourceMapping = z.infer<typeof ResourceMappingSchema>
+export type OrganizationModelSurface = z.infer<typeof SurfaceDefinitionSchema>
 ```
 
 ### `OrganizationModelTechStackEntry`
@@ -179,64 +185,34 @@ export type DeepPartial<T> = T extends Array<infer U> ? Array<DeepPartial<U>> :
 
 ## Feature System
 
-### `FeatureNavLink`
-
-```typescript
-export interface FeatureNavLink {
-  label: string
-  link: string
-  featureKey?: string
-  onClick?: () => void
-  links?: FeatureNavLink[]
-}
-```
-
-### `FeatureNavEntry`
+### `FeatureSidebarComponent`
 
 ```typescript
-export interface FeatureNavEntry {
-  label: string
-  icon: ComponentType
-  link?: string
-  featureKey?: string
-  requiresAdmin?: boolean
-  dataOnboardingTourId?: string
-  links?: FeatureNavLink[]
-}
+export type FeatureSidebarComponent = ComponentType
+export type FeatureIconComponent = ComponentType<{ size?: number;
 ```
 
-### `FeatureSidebarComponent`
+### `FeatureIconComponent`
 
 ```typescript
-export type FeatureSidebarComponent = ComponentType
+export type FeatureIconComponent = ComponentType<{ size?: number;
 ```
 
 ### `FeatureModule`
 
 ```typescript
 export interface FeatureModule {
-  /** Unique stable identifier for this feature (e.g. `'crm'`, `'projects'`). */
+  /** Unique stable identifier for this feature module. */
   key: string
-  /** Feature ID used for access-flag gating — must match the `id` of a feature in the organization model. */
+  /** Organization Model feature id this module presents. */
   featureId: string
-  /**
-   * Capability identifiers contributed by this feature.
-   * Merged into `ResolvedFeatureSemantics.capabilityIds` at resolution time.
-   * Not queried at runtime — kept for semantic graph completeness so that
-   * capability membership is fully represented in the resolved model even when
-   * a surface does not declare it directly.
-   */
+  /** Capability identifiers contributed by this feature module. */
   capabilityIds?: string[]
-  /** Top-level navigation entry rendered in the app shell when this feature is enabled. */
-  navEntry?: FeatureNavEntry
-  /** Sidebar component rendered when a matching subshell route is active. */
+  /** Icon used when this feature node appears in shell navigation. */
+  icon?: FeatureIconComponent
+  /** Sidebar component rendered when this feature's subtree route is active. */
   sidebar?: FeatureSidebarComponent
-  /** Route path prefixes that activate this feature's sidebar and subshell context. */
-  subshellRoutes?: string[]
-  /**
-   * Operations-only bridge surface connecting this feature to the organization graph.
-   * Ignored by all other features. Only one manifest in the registry should set this.
-   */
+  /** Operations-only bridge connecting this feature to the organization graph node. */
   organizationGraph?: OrganizationGraphFeatureBridge
 }
 ```
@@ -255,8 +231,6 @@ export interface ResolvedFeatureAccess {
 ```typescript
 export interface ResolvedFeatureSemantics {
   capabilityIds: string[]
-  surfaceIds: string[]
-  surfaces: OrganizationModelSurface[]
 }
 ```
 
@@ -269,25 +243,11 @@ export interface ResolvedFeatureModule extends FeatureModule {
 }
 ```
 
-### `ShellNavPlacement`
-
-```typescript
-export type ShellNavPlacement = 'primary' | 'bottom'
-```
-
-### `ShellNavSource`
-
-```typescript
-export type ShellNavSource = 'app' | 'feature'
-```
-
-### `ResolvedShellNavItem`
+### `ResolvedShellFeature`
 
 ```typescript
-export interface ResolvedShellNavItem extends FeatureNavEntry {
-  placement: ShellNavPlacement
-  source: ShellNavSource
-  featureId?: string
+export interface ResolvedShellFeature extends OrganizationModelFeature {
+  iconComponent?: FeatureIconComponent
 }
 ```
 
@@ -295,16 +255,16 @@ export interface ResolvedShellNavItem extends FeatureNavEntry {
 
 ```typescript
 export interface ResolvedShellModel {
-  navItems: ResolvedShellNavItem[]
-}
-```
-
-### `AppShellOverrides`
-
-```typescript
-export interface AppShellOverrides {
-  primaryNavItems?: FeatureNavEntry[]
-  bottomNavItems?: FeatureNavEntry[]
+  features: readonly ResolvedShellFeature[]
+  findByPath: (path: string) => ResolvedShellFeature | undefined
+  findById: (id: string) => ResolvedShellFeature | undefined
+  childrenOf: (id: string) => ResolvedShellFeature[]
+  ancestorsOf: (id: string) => ResolvedShellFeature[]
+  parentOf: (id: string) => ResolvedShellFeature | undefined
+  topLevel: () => ResolvedShellFeature[]
+  uiPositionFor: (id: string) => OrganizationModelFeature['uiPosition'] | undefined
+  requiresAdminFor: (id: string) => boolean
+  devOnlyFor: (id: string) => boolean
 }
 ```
 
@@ -321,8 +281,7 @@ export interface ResolvedShellRouteMatch {
   status: ShellRouteMatchStatus
   path: string
   feature?: ResolvedFeatureModule
-  navItem?: ResolvedShellNavItem
-  navLink?: FeatureNavLink
+  node?: ResolvedShellFeature
 }
 ```
 
@@ -338,7 +297,7 @@ export interface ShellRuntime {
 
 ```typescript
 export interface OrganizationGraphFeatureBridge {
-  surfaceId: string
+  featureId: string
 }
 ```
 
@@ -347,10 +306,8 @@ export interface OrganizationGraphFeatureBridge {
 ```typescript
 export interface OrganizationGraphContextValue {
   available: boolean
-  surfaceId?: string
-  surfacePath?: string
-  surfaceType?: OrganizationModelSurface['surfaceType']
   featureId?: string
+  featurePath?: string
 }
 ```
 
@@ -360,7 +317,6 @@ export interface OrganizationGraphContextValue {
 export interface ElevasisFeaturesProviderProps {
   features: FeatureModule[]
   organizationModel?: OrganizationModel
-  appShellOverrides?: AppShellOverrides
   timeRange?: TimeRange
   operationsApiUrl?: string
   operationsSSEManager?: SSEConnectionManagerLike
@@ -401,8 +357,8 @@ export interface ElevasisFeaturesContextValue {
  * Resource Registry type definitions
  */
 
-import type { IntegrationType } from '../../execution/engine/tools/integration'
-import type { ResourceDomain } from './domains'
+import type { IntegrationType } from '../../execution/engine/tools/integration'
+import type { ResourceCategory, ResourceLink } from './resource-link'
 
 // ============================================================================
 // Core Resource Type Definitions
@@ -479,8 +435,11 @@ export interface ResourceDefinition {
   /** Environment/deployment status */
   status: ResourceStatus
 
-  /** Domain tags for filtering and organization */
-  domains?: ResourceDomain[]
+  /** Graph links to Organization Model nodes */
+  links?: ResourceLink[]
+
+  /** Infrastructure category for filtering */
+  category?: ResourceCategory
 
   /** Whether the agent supports multi-turn sessions (agents only) */
   sessionCapable?: boolean
@@ -493,7 +452,7 @@ export interface ResourceDefinition {
 }
 ```
 
-### `DomainDefinition`
+### `ResourceList`
 
 ```typescript
 /** Unique resource identifier */
@@ -514,8 +473,11 @@ export interface ResourceDefinition {
   /** Environment/deployment status */
   status: ResourceStatus
 
-  /** Domain tags for filtering and organization */
-  domains?: ResourceDomain[]
+  /** Graph links to Organization Model nodes */
+  links?: ResourceLink[]
+
+  /** Infrastructure category for filtering */
+  category?: ResourceCategory
 
   /** Whether the agent supports multi-turn sessions (agents only) */
   sessionCapable?: boolean
@@ -527,57 +489,9 @@ export interface ResourceDefinition {
   archived?: boolean
 }
 
-// ============================================================================
-// Domain Definition Types
-// ============================================================================
-
-/**
- * Domain definition for Command View filtering
- *
- * Domains are organizational metadata for UI filtering/grouping.
- * No execution impact - purely for visualization.
- *
- * @example
- * {
- *   id: 'support',
- *   name: 'Customer Support',
- *   description: 'Ticket triage, knowledge base, escalations',
- *   color: 'green',
- *   icon: 'IconHeadset'
- * }
- */
-export interface DomainDefinition {
-  /** Unique identifier (e.g., 'support') */
-  id: string
-  /** Display name (e.g., 'Customer Support') */
-  name: string
-  /** Purpose description */
-  description: string
-  /** Optional Mantine color for UI (e.g., 'blue', 'green', 'orange') */
-  color?: string
-  /** Optional Tabler icon name (e.g., 'IconHeadset') */
-  icon?: string
-}
-```
-
-### `ResourceList`
-
-```typescript
-/** Unique identifier (e.g., 'support') */
-  id: string
-  /** Display name (e.g., 'Customer Support') */
-  name: string
-  /** Purpose description */
-  description: string
-  /** Optional Mantine color for UI (e.g., 'blue', 'green', 'orange') */
-  color?: string
-  /** Optional Tabler icon name (e.g., 'IconHeadset') */
-  icon?: string
-}
-
-/**
- * Resource list for organization
- * Returns ResourceDefinition metadata (not full definitions)
+/**
+ * Resource list for organization
+ * Returns ResourceDefinition metadata (not full definitions)
  */
 export interface ResourceList {
   workflows: ResourceDefinition[]
@@ -676,7 +590,7 @@ export type TriggerConfig = WebhookTriggerConfig | ScheduleTriggerConfig | Event
  * scheduled cron jobs, platform events, or manual user actions.
  *
  * BREAKING CHANGES (2025-11-30):
- * - Now extends ResourceDefinition (inherits: resourceId, name, description, version, type, status, domains)
+ * - Now extends ResourceDefinition (inherits: resourceId, name, description, version, type, status, links, category)
  * - Field renames: `id` -> `resourceId` (inherited), `type` -> `triggerType`
  * - Relationship rename: `invokes` -> `triggers` (unified vocabulary)
  * - New required fields: `version` (inherited), `type: 'trigger'` (inherited)
@@ -712,7 +626,7 @@ export type TriggerConfig = WebhookTriggerConfig | ScheduleTriggerConfig | Event
  * scheduled cron jobs, platform events, or manual user actions.
  *
  * BREAKING CHANGES (2025-11-30):
- * - Now extends ResourceDefinition (inherits: resourceId, name, description, version, type, status, domains)
+ * - Now extends ResourceDefinition (inherits: resourceId, name, description, version, type, status, links, category)
  * - Field renames: `id` -> `resourceId` (inherited), `type` -> `triggerType`
  * - Relationship rename: `invokes` -> `triggers` (unified vocabulary)
  * - New required fields: `version` (inherited), `type: 'trigger'` (inherited)
@@ -790,7 +704,7 @@ export interface TriggerDefinition extends ResourceDefinition {
  * stored here (queried at runtime from credentials table).
  *
  * BREAKING CHANGES (2025-11-30):
- * - Now extends ResourceDefinition (inherits: resourceId, name, description, version, type, status, domains)
+ * - Now extends ResourceDefinition (inherits: resourceId, name, description, version, type, status, links, category)
  * - Field renames: `id` -> `resourceId` (inherited)
  * - New required field: `status` (inherited) - organizations must add status to all integrations
  * - New required field: `version` (inherited) - organizations must add version to all integrations
@@ -919,7 +833,7 @@ export type ExternalPlatform = 'n8n' | 'make' | 'zapier' | 'other'
  * no API integration with external platforms, no status syncing.
  *
  * BREAKING CHANGES (2025-11-30):
- * - Now extends ResourceDefinition (inherits: resourceId, name, description, version, type, status, domains)
+ * - Now extends ResourceDefinition (inherits: resourceId, name, description, version, type, status, links, category)
  * - Field renames: `id` -> `resourceId` (inherited)
  * - New required field: `version` (inherited) - organizations must add version to all external resources
  * - New required field: `type: 'external'` (inherited) - resource type discriminator
@@ -954,7 +868,7 @@ export type ExternalPlatform = 'n8n' | 'make' | 'zapier' | 'other'
  * no API integration with external platforms, no status syncing.
  *
  * BREAKING CHANGES (2025-11-30):
- * - Now extends ResourceDefinition (inherits: resourceId, name, description, version, type, status, domains)
+ * - Now extends ResourceDefinition (inherits: resourceId, name, description, version, type, status, links, category)
  * - Field renames: `id` -> `resourceId` (inherited)
  * - New required field: `version` (inherited) - organizations must add version to all external resources
  * - New required field: `type: 'external'` (inherited) - resource type discriminator
@@ -1048,7 +962,7 @@ export interface ExternalResourceDefinition extends ResourceDefinition {
  * Tasks with matching command_queue_group are routed to this checkpoint.
  *
  * BREAKING CHANGES (2025-11-30):
- * - Now extends ResourceDefinition (inherits: resourceId, name, description, version, type, status, domains)
+ * - Now extends ResourceDefinition (inherits: resourceId, name, description, version, type, status, links, category)
  * - Field renames: `id` -> `resourceId` (inherited)
  * - description is now REQUIRED (was optional) - organizations must add description to all human checkpoints
  * - New required field: `version` (inherited) - organizations must add version to all human checkpoints