@wildo-ai/saas-models 1.0.1 → 1.1.0

package/dist/esm/guidance/milestone-definition.shared.schemas.js.map

@@ -1 +1 @@
-{"version":3,"file":"milestone-definition.shared.schemas.js","sourceRoot":"","sources":["../../../src/guidance/milestone-definition.shared.schemas.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,MAAM,gDAAgD,CAAC;AAElF;;oEAEoE;AAEpE,MAAM,CAAN,IAAY,aAOX;AAPD,WAAY,aAAa;IACvB,4DAA4D;IAC5D,0CAAyB,CAAA;IACzB,0DAA0D;IAC1D,oDAAmC,CAAA;IACnC,6DAA6D;IAC7D,sDAAqC,CAAA;AACvC,CAAC,EAPW,aAAa,KAAb,aAAa,QAOxB;AAED;;oEAEoE;AAEpE,MAAM,CAAN,IAAY,mBAOX;AAPD,WAAY,mBAAmB;IAC7B,uEAAuE;IACvE,kDAA2B,CAAA;IAC3B,8EAA8E;IAC9E,wDAAiC,CAAA;IACjC,2CAA2C;IAC3C,sDAA+B,CAAA;AACjC,CAAC,EAPW,mBAAmB,KAAnB,mBAAmB,QAO9B;AAED;;oEAEoE;AAEpE,MAAM,CAAN,IAAY,gBAMX;AAND,WAAY,gBAAgB;IAC1B,6EAA6E;IAC7E,iCAAa,CAAA;IACb;4EACwE;IACxE,iDAA6B,CAAA;AAC/B,CAAC,EANW,gBAAgB,KAAhB,gBAAgB,QAM3B;AAED,0EAA0E;AAC1E,MAAM,CAAC,MAAM,6BAA6B,GAA+C;IACvF,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,gBAAgB,CAAC,sBAAsB;IAChE,CAAC,gBAAgB,CAAC,YAAY,CAAC,EAAE,gBAAgB,CAAC,8BAA8B;CACjF,CAAC;AA4EF;;oEAEoE"}
+{"version":3,"file":"milestone-definition.shared.schemas.js","sourceRoot":"","sources":["../../../../src/guidance/milestone-definition.shared.schemas.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,MAAM,gDAAgD,CAAC;AAElF;;oEAEoE;AAEpE,MAAM,CAAN,IAAY,aAOX;AAPD,WAAY,aAAa;IACvB,4DAA4D;IAC5D,0CAAyB,CAAA;IACzB,0DAA0D;IAC1D,oDAAmC,CAAA;IACnC,6DAA6D;IAC7D,sDAAqC,CAAA;AACvC,CAAC,EAPW,aAAa,KAAb,aAAa,QAOxB;AAED;;oEAEoE;AAEpE,MAAM,CAAN,IAAY,mBAOX;AAPD,WAAY,mBAAmB;IAC7B,uEAAuE;IACvE,kDAA2B,CAAA;IAC3B,8EAA8E;IAC9E,wDAAiC,CAAA;IACjC,2CAA2C;IAC3C,sDAA+B,CAAA;AACjC,CAAC,EAPW,mBAAmB,KAAnB,mBAAmB,QAO9B;AAED;;oEAEoE;AAEpE,MAAM,CAAN,IAAY,gBAMX;AAND,WAAY,gBAAgB;IAC1B,6EAA6E;IAC7E,iCAAa,CAAA;IACb;4EACwE;IACxE,iDAA6B,CAAA;AAC/B,CAAC,EANW,gBAAgB,KAAhB,gBAAgB,QAM3B;AAED,0EAA0E;AAC1E,MAAM,CAAC,MAAM,6BAA6B,GAA+C;IACvF,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,gBAAgB,CAAC,sBAAsB;IAChE,CAAC,gBAAgB,CAAC,YAAY,CAAC,EAAE,gBAAgB,CAAC,8BAA8B;CACjF,CAAC;AA4EF;;oEAEoE","sourcesContent":["import { CoreResourceOperation } from '../resources/resources.shared.core.definitions';\nimport { CoreResourceType } from '../resources/resources.shared.core.definitions';\n\n/** ──────────────────────────────────────────────────────────────\n * Milestone Type — Condition Evaluation Strategy\n * ────────────────────────────────────────────────────────────── */\n\nexport enum MilestoneType {\n  /** Achieved on first occurrence of the trigger operation */\n  FIRST_TIME = 'first_time',\n  /** Achieved when operation count reaches the threshold */\n  COUNT_THRESHOLD = 'count_threshold',\n  /** Achieved when a custom condition function returns true */\n  CUSTOM_CONDITION = 'custom_condition',\n}\n\n/** ──────────────────────────────────────────────────────────────\n * Milestone Reward Type\n * ────────────────────────────────────────────────────────────── */\n\nexport enum MilestoneRewardType {\n  /** Visual celebration (confetti, animation) via notification system */\n  CELEBRATION = 'celebration',\n  /** Unlock a feature by writing override to scope-matched features resource */\n  FEATURE_UNLOCK = 'feature_unlock',\n  /** Activate a guidance flow via WS push */\n  GUIDANCE_FLOW = 'guidance_flow',\n}\n\n/** ──────────────────────────────────────────────────────────────\n * Progression Scope — Bi-Scope State Routing\n * ────────────────────────────────────────────────────────────── */\n\nexport enum ProgressionScope {\n  /** State stored in USER_PROGRESSION_STATE — personal milestones (default) */\n  USER = 'user',\n  /** State stored in ORGANIZATION_PROGRESSION_STATE — org-wide milestones\n   *  (e.g., \"Team reached 50 members\", \"First integration configured\") */\n  ORGANIZATION = 'organization',\n}\n\n/** Maps ProgressionScope to the CoreResourceType that stores its state */\nexport const PROGRESSION_SCOPE_TO_RESOURCE: Record<ProgressionScope, CoreResourceType> = {\n  [ProgressionScope.USER]: CoreResourceType.USER_PROGRESSION_STATE,\n  [ProgressionScope.ORGANIZATION]: CoreResourceType.ORGANIZATION_PROGRESSION_STATE,\n};\n\n/** ──────────────────────────────────────────────────────────────\n * Milestone Lifecycle Transition — Phase 5 Integration Point\n * ────────────────────────────────────────────────────────────── */\n\nexport interface MilestoneLifecycleTransition {\n  from: string;\n  to: string;\n}\n\n/** ──────────────────────────────────────────────────────────────\n * Milestone Reward Definition\n * ────────────────────────────────────────────────────────────── */\n\nexport interface MilestoneReward {\n  type: MilestoneRewardType;\n  /** For FEATURE_UNLOCK: the feature identifier to enable */\n  featureRef?: string;\n  /** For GUIDANCE_FLOW: the guidance flow ref to activate */\n  guidanceFlowRef?: string;\n  /** For CELEBRATION: notification severity level (controls animation intensity) */\n  celebrationLevel?: 'low' | 'medium' | 'high';\n}\n\n/** ──────────────────────────────────────────────────────────────\n * Milestone Trigger — What Operation Triggers Evaluation\n * ────────────────────────────────────────────────────────────── */\n\nexport interface MilestoneTrigger {\n  /** Resource type that triggers evaluation */\n  resourceType: string;\n  /** Operation that triggers evaluation */\n  operation: CoreResourceOperation;\n}\n\n/** ──────────────────────────────────────────────────────────────\n * Milestone Definition — Full Declaration\n * ────────────────────────────────────────────────────────────── */\n\nexport interface MilestoneDefinition {\n  /** Unique milestone identifier (e.g., 'FIRST_PROJECT_CREATED') */\n  identifier: string;\n  /** Milestone type — determines condition evaluation logic */\n  type: MilestoneType;\n  /** State scope — determines which resource stores this milestone's progress.\n   *  USER (default): personal milestones, each user has their own state.\n   *  ORGANIZATION: org-wide milestones, shared across all members. When any member\n   *    triggers \"org reached 50 members\", it's achieved for the whole org.\n   */\n  scope?: ProgressionScope;\n  /** What resource operation triggers this milestone's evaluation */\n  trigger: MilestoneTrigger;\n  /** For COUNT_THRESHOLD: the count that must be reached */\n  threshold?: number;\n  /** For CUSTOM_CONDITION: condition function reference key.\n   *  Receives (operationCounts, milestonesAchieved) and returns boolean.\n   *  Note: Serialized as a reference string for frontend — backend evaluates the function. */\n  conditionRef?: string;\n  /** What the user gets when milestone is achieved */\n  reward: MilestoneReward;\n  /** Category for grouping (e.g., 'getting-started', 'power-user') */\n  category: string;\n  /** Points awarded for this milestone (for gamification) */\n  points?: number;\n  /** i18n: which labels to generate */\n  labels?: {\n    description?: boolean;\n  };\n  /** Phase 5 integration: lifecycle stage transition triggered by this milestone */\n  lifecycleTransition?: MilestoneLifecycleTransition;\n  /** Dependencies: milestone refs that must be achieved first (for unlocking chains).\n   *  Dependencies are validated and evaluated within the same progression scope. */\n  dependencies?: string[];\n}\n\n/** ──────────────────────────────────────────────────────────────\n * Milestone Label Fields — i18n Key Generation Configuration\n * ────────────────────────────────────────────────────────────── */\n\n"]}

package/dist/esm/guidance/progression-state.shared.resources-config.schemas.d.ts

@@ -3,35 +3,38 @@
  *
  * Resource configurations for dual-scope progression state management (USER / ORGANIZATION).
  * Each scope stores milestone achievement progress, operation counts, and category progress.
- * Uses ProgressionStateSchema as mainSchema across all three scopes.
+ * The shared payload schema stays scope-agnostic, while the schema file also owns
+ * the scope-aware persisted variants used by these resource configurations.
  */
-import { CoreResourceOperation } from '../resources/resources.shared.core.definitions.js';
-import { ResourceRelationship } from '../resources/resources.shared.schemas.js';
-type UserProgressionStateCoreOperations = CoreResourceOperation.READ | CoreResourceOperation.SEARCH | CoreResourceOperation.UPDATE | CoreResourceOperation.CREATE;
-export declare const userProgressionStateResourceConfiguration_InitializationFactory: (resourcesRelationships: ResourceRelationship[]) => import("../index.js").ResourceConfiguration<Record<string, never>, UserProgressionStateCoreOperations, import("zod").ZodObject<{
-    milestonesAchieved: import("zod").ZodDefault<import("zod").ZodRecord<import("zod").ZodString, import("zod").ZodObject<{
+import { CoreResourceOperation } from '../resources/resources.shared.core.definitions';
+import { ResourceRelationship } from '../resources/resources.shared.schemas';
+type UserProgressionStateCoreOperations = CoreResourceOperation.READ | CoreResourceOperation.SEARCH | CoreResourceOperation.UPDATE | CoreResourceOperation.CREATE | CoreResourceOperation.DELETE;
+export declare const userProgressionStateResourceConfiguration_InitializationFactory: (resourcesRelationships: ResourceRelationship[]) => import("..").ResourceConfiguration<Record<string, never>, UserProgressionStateCoreOperations, import("zod").ZodObject<{
+    milestonesAchieved: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("zod").ZodDefault<import("zod").ZodRecord<import("zod").ZodString, import("zod").ZodObject<{
         achievedAt: import("zod").ZodCoercedDate<unknown>;
         count: import("zod").ZodDefault<import("zod").ZodNumber>;
-    }, import("zod/v4/core").$strip, core.$ZodObjectExtra>>>;
-    operationCounts: import("zod").ZodDefault<import("zod").ZodRecord<import("zod").ZodString, import("zod").ZodNumber>>;
-    totalPoints: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("zod").ZodDefault<import("zod").ZodNumber>>;
+    }, import("zod/v4/core").$strip>>>>;
+    operationCounts: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("zod").ZodDefault<import("zod").ZodRecord<import("zod").ZodString, import("zod").ZodNumber>>>;
+    totalPoints: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("zod").ZodDefault<import("zod").ZodNumber>>>;
     categoriesProgress: import("zod").ZodDefault<import("zod").ZodRecord<import("zod").ZodString, import("zod").ZodObject<{
         completedCount: import("zod").ZodDefault<import("zod").ZodNumber>;
         totalPoints: import("zod").ZodDefault<import("zod").ZodNumber>;
-    }, import("zod/v4/core").$strip, core.$ZodObjectExtra>>>;
-}, import("zod/v4/core").$strip, core.$ZodObjectExtra>>;
-type OrganizationProgressionStateCoreOperations = CoreResourceOperation.READ | CoreResourceOperation.SEARCH | CoreResourceOperation.UPDATE | CoreResourceOperation.CREATE;
-export declare const organizationProgressionStateResourceConfiguration_InitializationFactory: (resourcesRelationships: ResourceRelationship[]) => import("../index.js").ResourceConfiguration<Record<string, never>, OrganizationProgressionStateCoreOperations, import("zod").ZodObject<{
-    milestonesAchieved: import("zod").ZodDefault<import("zod").ZodRecord<import("zod").ZodString, import("zod").ZodObject<{
+    }, import("zod/v4/core").$strip>>>;
+    userId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("zod").ZodString>>>>;
+}, import("zod/v4/core").$strip>>;
+type OrganizationProgressionStateCoreOperations = CoreResourceOperation.READ | CoreResourceOperation.SEARCH | CoreResourceOperation.UPDATE | CoreResourceOperation.CREATE | CoreResourceOperation.DELETE;
+export declare const organizationProgressionStateResourceConfiguration_InitializationFactory: (resourcesRelationships: ResourceRelationship[]) => import("..").ResourceConfiguration<Record<string, never>, OrganizationProgressionStateCoreOperations, import("zod").ZodObject<{
+    milestonesAchieved: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("zod").ZodDefault<import("zod").ZodRecord<import("zod").ZodString, import("zod").ZodObject<{
         achievedAt: import("zod").ZodCoercedDate<unknown>;
         count: import("zod").ZodDefault<import("zod").ZodNumber>;
-    }, import("zod/v4/core").$strip, core.$ZodObjectExtra>>>;
-    operationCounts: import("zod").ZodDefault<import("zod").ZodRecord<import("zod").ZodString, import("zod").ZodNumber>>;
-    totalPoints: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("zod").ZodDefault<import("zod").ZodNumber>>;
+    }, import("zod/v4/core").$strip>>>>;
+    operationCounts: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("zod").ZodDefault<import("zod").ZodRecord<import("zod").ZodString, import("zod").ZodNumber>>>;
+    totalPoints: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("zod").ZodDefault<import("zod").ZodNumber>>>;
     categoriesProgress: import("zod").ZodDefault<import("zod").ZodRecord<import("zod").ZodString, import("zod").ZodObject<{
         completedCount: import("zod").ZodDefault<import("zod").ZodNumber>;
         totalPoints: import("zod").ZodDefault<import("zod").ZodNumber>;
-    }, import("zod/v4/core").$strip, core.$ZodObjectExtra>>>;
-}, import("zod/v4/core").$strip, core.$ZodObjectExtra>>;
+    }, import("zod/v4/core").$strip>>>;
+    organizationId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("zod").ZodString>>>>;
+}, import("zod/v4/core").$strip>>;
 export {};
 //# sourceMappingURL=progression-state.shared.resources-config.schemas.d.ts.map

package/dist/esm/guidance/progression-state.shared.resources-config.schemas.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"progression-state.shared.resources-config.schemas.d.ts","sourceRoot":"","sources":["../../../src/guidance/progression-state.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EAAE,qBAAqB,EAAE,MAAM,gDAAgD,CAAC;AACvF,OAAO,EAA8B,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAQzG,KAAK,kCAAkC,GACnC,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,CAAC;AAEjC,eAAO,MAAM,+DAA+D,GAAI,wBAAwB,oBAAoB,EAAE;;;;;;;;;;;uDAqE5H,CAAC;AAIH,KAAK,0CAA0C,GAC3C,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,CAAC;AAEjC,eAAO,MAAM,uEAAuE,GAAI,wBAAwB,oBAAoB,EAAE;;;;;;;;;;;uDAqEpI,CAAC"}
+{"version":3,"file":"progression-state.shared.resources-config.schemas.d.ts","sourceRoot":"","sources":["../../../../src/guidance/progression-state.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAOH,OAAO,EAAE,qBAAqB,EAAE,MAAM,gDAAgD,CAAC;AACvF,OAAO,EAA8B,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAUzG,KAAK,kCAAkC,GACnC,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,CAAC;AAEjC,eAAO,MAAM,+DAA+D,GAAI,wBAAwB,oBAAoB,EAAE;;;;;;;;;;;;iCAqG5H,CAAC;AAIH,KAAK,0CAA0C,GAC3C,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,CAAC;AAEjC,eAAO,MAAM,uEAAuE,GAAI,wBAAwB,oBAAoB,EAAE;;;;;;;;;;;;iCAoGpI,CAAC"}

package/dist/esm/guidance/progression-state.shared.resources-config.schemas.js

@@ -3,26 +3,40 @@
  *
  * Resource configurations for dual-scope progression state management (USER / ORGANIZATION).
  * Each scope stores milestone achievement progress, operation counts, and category progress.
- * Uses ProgressionStateSchema as mainSchema across all three scopes.
+ * The shared payload schema stays scope-agnostic, while the schema file also owns
+ * the scope-aware persisted variants used by these resource configurations.
  */
-import { ProgressionStateSchema } from './progression-state.shared.schemas.js';
+import { UserProgressionStateSchema, OrganizationProgressionStateSchema, } from './progression-state.shared.schemas.js';
 import { CoreResourceOperation } from '../resources/resources.shared.core.definitions.js';
 import { ResourceOperationRiskLevel } from '../resources/resources.shared.schemas.js';
 import { CoreResourceType, coreResourceShared_FieldIdentifier } from '../resources/resources.shared.core.definitions.js';
 import { ResourceOperationVariantType } from '../resources/resources.shared.schemas.js';
 import { createResourceConfiguration_Initialization } from '../resources/resources-config.shared.factory.js';
+import { ResourceSystemAccessMode } from '../resources/resources-config.shared.schemas.js';
 import { CORE_APP_ROLES, CORE_ORG_ROLES } from '../security/authorizations/roles.shared.schemas.js';
+import { DataPortabilityProvenance } from '../compliance/privacy/subject-export.shared.schemas.js';
 export const userProgressionStateResourceConfiguration_InitializationFactory = (resourcesRelationships) => createResourceConfiguration_Initialization({
-    mainSchema: ProgressionStateSchema,
+    mainSchema: UserProgressionStateSchema,
     resourceIdentifier: CoreResourceType.USER_PROGRESSION_STATE,
     resourceFieldIdentifier: coreResourceShared_FieldIdentifier[CoreResourceType.USER_PROGRESSION_STATE],
     resourceRelationships: resourcesRelationships,
     isSystemResource: true,
+    // onParentCreate eager-seeding writes through createAsSystem → opt into the
+    // fail-closed system-write policy (composition-oncreate-lifecycle plan).
+    systemAccessPolicy: {
+        exportSubject: ResourceSystemAccessMode.ALLOWED, create: ResourceSystemAccessMode.ALLOWED
+    },
+    portabilityPolicy: { defaultProvenance: DataPortabilityProvenance.DERIVED },
     coreOperations: [
         CoreResourceOperation.READ,
         CoreResourceOperation.SEARCH,
         CoreResourceOperation.UPDATE,
         CoreResourceOperation.CREATE,
+        // DELETE is REPOSITORY_ONLY (no HTTP route): powers the composition
+        // onParentDelete cascade so the self-healing state row is physically removed
+        // when its owning scope is deleted. Without it the cascade throws
+        // ErrorType.CONFIGURATION on any scope that has a materialized row.
+        CoreResourceOperation.DELETE,
     ],
     customOperation: {},
     operationsConfiguration: {
@@ -63,26 +77,55 @@ export const userProgressionStateResourceConfiguration_InitializationFactory = (
         [CoreResourceOperation.CREATE]: {
             variants: [
                 {
-                    variantType: ResourceOperationVariantType.REPOSITORY_ONLY,
+                    // INTERNAL_CALL (not REPOSITORY_ONLY): the onParentCreate seed's
+                    // `createAsSystem` resolves the CREATE op via the service tier, which
+                    // rejects REPOSITORY_ONLY → OPERATION_PATH_NOT_FOUND, silent no-seed. See
+                    // the org-preferences config + composition-oncreate plan for the rationale.
+                    variantType: ResourceOperationVariantType.INTERNAL_CALL,
                     isDefault: true,
                     roles: [CORE_APP_ROLES.APP_USER],
                     riskLevel: ResourceOperationRiskLevel.LOW,
                 }
             ],
         },
+        // Internal-only (REPOSITORY_ONLY, no HTTP route): powers the composition
+        // onParentDelete cascade so this self-healing state row is physically removed
+        // when its owning user is deleted. Without a DELETE op the cascade
+        // (deleteChildrenImmediate) throws ErrorType.CONFIGURATION on any user that
+        // has a materialized row — these rows self-heal on first READ, so most active
+        // users have one. Super-admin/HIGH: a privileged teardown, not the APP_USER
+        // self-write. See composition-oncreate-lifecycle plan (systemic DELETE gap).
+        [CoreResourceOperation.DELETE]: {
+            variants: [
+                {
+                    variantType: ResourceOperationVariantType.REPOSITORY_ONLY,
+                    isDefault: true,
+                    roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],
+                    riskLevel: ResourceOperationRiskLevel.HIGH,
+                }
+            ],
+        },
     },
 });
 export const organizationProgressionStateResourceConfiguration_InitializationFactory = (resourcesRelationships) => createResourceConfiguration_Initialization({
-    mainSchema: ProgressionStateSchema,
+    mainSchema: OrganizationProgressionStateSchema,
     resourceIdentifier: CoreResourceType.ORGANIZATION_PROGRESSION_STATE,
     resourceFieldIdentifier: coreResourceShared_FieldIdentifier[CoreResourceType.ORGANIZATION_PROGRESSION_STATE],
     resourceRelationships: resourcesRelationships,
     isSystemResource: true,
+    // onParentCreate eager-seeding writes through createAsSystem → opt into the
+    // fail-closed system-write policy (composition-oncreate-lifecycle plan).
+    systemAccessPolicy: { create: ResourceSystemAccessMode.ALLOWED },
     coreOperations: [
         CoreResourceOperation.READ,
         CoreResourceOperation.SEARCH,
         CoreResourceOperation.UPDATE,
         CoreResourceOperation.CREATE,
+        // DELETE is REPOSITORY_ONLY (no HTTP route): powers the composition
+        // onParentDelete cascade so the self-healing state row is physically removed
+        // when its owning scope is deleted. Without it the cascade throws
+        // ErrorType.CONFIGURATION on any scope that has a materialized row.
+        CoreResourceOperation.DELETE,
     ],
     customOperation: {},
     operationsConfiguration: {
@@ -123,13 +166,35 @@ export const organizationProgressionStateResourceConfiguration_InitializationFac
         [CoreResourceOperation.CREATE]: {
             variants: [
                 {
-                    variantType: ResourceOperationVariantType.REPOSITORY_ONLY,
+                    // INTERNAL_CALL (not REPOSITORY_ONLY): the onParentCreate seed's
+                    // `createAsSystem` resolves the CREATE op via the service tier, which
+                    // rejects REPOSITORY_ONLY → OPERATION_PATH_NOT_FOUND, silent no-seed. See
+                    // the org-preferences config + composition-oncreate plan for the rationale.
+                    variantType: ResourceOperationVariantType.INTERNAL_CALL,
                     isDefault: true,
                     roles: [CORE_ORG_ROLES.ORG_MEMBER],
                     riskLevel: ResourceOperationRiskLevel.LOW,
                 }
             ],
         },
+        // Internal-only (REPOSITORY_ONLY, no HTTP route): powers the composition
+        // onParentDelete cascade so this self-healing state row is physically removed
+        // when its owning organization is deleted. Without a DELETE op the cascade
+        // (deleteChildrenImmediate) throws ErrorType.CONFIGURATION on any org that has
+        // a materialized row — these rows self-heal on first READ, so most active orgs
+        // have one. ORG_ADMIN/HIGH: the org-scope admin tier for a privileged teardown
+        // (org progression writes are ORG_MEMBER, but teardown is admin-gated).
+        // See composition-oncreate-lifecycle plan (systemic DELETE gap).
+        [CoreResourceOperation.DELETE]: {
+            variants: [
+                {
+                    variantType: ResourceOperationVariantType.REPOSITORY_ONLY,
+                    isDefault: true,
+                    roles: [CORE_ORG_ROLES.ORG_ADMIN],
+                    riskLevel: ResourceOperationRiskLevel.HIGH,
+                }
+            ],
+        },
     },
 });
-//# sourceMappingURL=progression-state.shared.resources-config.schemas.js.map
+//# sourceMappingURL=progression-state.shared.resources-config.schemas.js.map

package/dist/esm/guidance/progression-state.shared.resources-config.schemas.js.map

@@ -1 +1 @@
-{"version":3,"file":"progression-state.shared.resources-config.schemas.js","sourceRoot":"","sources":["../../../src/guidance/progression-state.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,sBAAsB,EAAE,MAAM,oCAAoC,CAAC;AAC5E,OAAO,EAAE,qBAAqB,EAAE,MAAM,gDAAgD,CAAC;AACvF,OAAO,EAAE,0BAA0B,EAAwB,MAAM,uCAAuC,CAAC;AACzG,OAAO,EAAE,gBAAgB,EAAE,kCAAkC,EAAE,MAAM,gDAAgD,CAAC;AACtH,OAAO,EAAE,4BAA4B,EAAE,MAAM,uCAAuC,CAAC;AACrF,OAAO,EAAE,0CAA0C,EAAE,MAAM,8CAA8C,CAAC;AAC1G,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,iDAAiD,CAAC;AAUjG,MAAM,CAAC,MAAM,+DAA+D,GAAG,CAAC,sBAA8C,EAAE,EAAE,CAAC,0CAA0C,CAI3K;IACA,UAAU,EAAE,sBAAsB;IAClC,kBAAkB,EAAE,gBAAgB,CAAC,sBAAsB;IAC3D,uBAAuB,EAAE,kCAAkC,CAAC,gBAAgB,CAAC,sBAAsB,CAAC;IACpG,qBAAqB,EAAE,sBAAsB;IAC7C,gBAAgB,EAAE,IAAI;IAEtB,cAAc,EAAE;QACd,qBAAqB,CAAC,IAAI;QAC1B,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,MAAM;KAC7B;IAED,eAAe,EAAE,EAA2B;IAE5C,uBAAuB,EAAE;QACvB,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;YAC5B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC;oBAChC,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C;aACF;SACF;QAED,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE,CAAC;oBACT,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC;oBAChC,SAAS,EAAE,0BAA0B,CAAC,GAAG;oBACzC,YAAY,EAAE,KAAK;oBACnB,gBAAgB,EAAE,EAAE;oBACpB,iBAAiB,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE;oBACjE,YAAY,EAAE,EAAE;oBAChB,UAAU,EAAE,EAAE;oBACd,8BAA8B,EAAE,EAAE;iBACnC,CAAC;SACH;QAED,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,eAAe;oBACzD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC;oBAChC,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C;aACF;SACF;QAED,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,eAAe;oBACzD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC;oBAChC,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C;aACF;SACF;KACF;CACF,CAAC,CAAC;AAUH,MAAM,CAAC,MAAM,uEAAuE,GAAG,CAAC,sBAA8C,EAAE,EAAE,CAAC,0CAA0C,CAInL;IACA,UAAU,EAAE,sBAAsB;IAClC,kBAAkB,EAAE,gBAAgB,CAAC,8BAA8B;IACnE,uBAAuB,EAAE,kCAAkC,CAAC,gBAAgB,CAAC,8BAA8B,CAAC;IAC5G,qBAAqB,EAAE,sBAAsB;IAC7C,gBAAgB,EAAE,IAAI;IAEtB,cAAc,EAAE;QACd,qBAAqB,CAAC,IAAI;QAC1B,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,MAAM;KAC7B;IAED,eAAe,EAAE,EAA2B;IAE5C,uBAAuB,EAAE;QACvB,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;YAC5B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC;oBAClC,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C;aACF;SACF;QAED,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE,CAAC;oBACT,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC;oBAClC,SAAS,EAAE,0BAA0B,CAAC,GAAG;oBACzC,YAAY,EAAE,KAAK;oBACnB,gBAAgB,EAAE,EAAE;oBACpB,iBAAiB,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE;oBACjE,YAAY,EAAE,EAAE;oBAChB,UAAU,EAAE,EAAE;oBACd,8BAA8B,EAAE,EAAE;iBACnC,CAAC;SACH;QAED,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,eAAe;oBACzD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC;oBAClC,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C;aACF;SACF;QAED,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,eAAe;oBACzD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC;oBAClC,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C;aACF;SACF;KACF;CACF,CAAC,CAAC"}
+{"version":3,"file":"progression-state.shared.resources-config.schemas.js","sourceRoot":"","sources":["../../../../src/guidance/progression-state.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAEL,0BAA0B,EAC1B,kCAAkC,GACnC,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,qBAAqB,EAAE,MAAM,gDAAgD,CAAC;AACvF,OAAO,EAAE,0BAA0B,EAAwB,MAAM,uCAAuC,CAAC;AACzG,OAAO,EAAE,gBAAgB,EAAE,kCAAkC,EAAE,MAAM,gDAAgD,CAAC;AACtH,OAAO,EAAE,4BAA4B,EAAE,MAAM,uCAAuC,CAAC;AACrF,OAAO,EAAE,0CAA0C,EAAE,MAAM,8CAA8C,CAAC;AAC1G,OAAO,EAAE,wBAAwB,EAAE,MAAM,8CAA8C,CAAC;AACxF,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,iDAAiD,CAAC;AACjG,OAAO,EAAE,yBAAyB,EAAE,MAAM,qDAAqD,CAAC;AAWhG,MAAM,CAAC,MAAM,+DAA+D,GAAG,CAAC,sBAA8C,EAAE,EAAE,CAAC,0CAA0C,CAI3K;IACA,UAAU,EAAE,0BAA0B;IACtC,kBAAkB,EAAE,gBAAgB,CAAC,sBAAsB;IAC3D,uBAAuB,EAAE,kCAAkC,CAAC,gBAAgB,CAAC,sBAAsB,CAAC;IACpG,qBAAqB,EAAE,sBAAsB;IAC7C,gBAAgB,EAAE,IAAI;IACtB,4EAA4E;IAC5E,yEAAyE;IACzE,kBAAkB,EAAE;QAClB,aAAa,EAAE,wBAAwB,CAAC,OAAO,EAAE,MAAM,EAAE,wBAAwB,CAAC,OAAO;KAAE;IAC7F,iBAAiB,EAAE,EAAE,iBAAiB,EAAE,yBAAyB,CAAC,OAAO,EAAE;IAE3E,cAAc,EAAE;QACd,qBAAqB,CAAC,IAAI;QAC1B,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,MAAM;QAC5B,oEAAoE;QACpE,6EAA6E;QAC7E,kEAAkE;QAClE,oEAAoE;QACpE,qBAAqB,CAAC,MAAM;KAC7B;IAED,eAAe,EAAE,EAA2B;IAE5C,uBAAuB,EAAE;QACvB,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;YAC5B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC;oBAChC,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C;aACF;SACF;QAED,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE,CAAC;oBACT,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC;oBAChC,SAAS,EAAE,0BAA0B,CAAC,GAAG;oBACzC,YAAY,EAAE,KAAK;oBACnB,gBAAgB,EAAE,EAAE;oBACpB,iBAAiB,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE;oBACjE,YAAY,EAAE,EAAE;oBAChB,UAAU,EAAE,EAAE;oBACd,8BAA8B,EAAE,EAAE;iBACnC,CAAC;SACH;QAED,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,eAAe;oBACzD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC;oBAChC,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C;aACF;SACF;QAED,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,iEAAiE;oBACjE,sEAAsE;oBACtE,0EAA0E;oBAC1E,4EAA4E;oBAC5E,WAAW,EAAE,4BAA4B,CAAC,aAAa;oBACvD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC;oBAChC,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C;aACF;SACF;QAED,yEAAyE;QACzE,8EAA8E;QAC9E,mEAAmE;QACnE,4EAA4E;QAC5E,8EAA8E;QAC9E,4EAA4E;QAC5E,6EAA6E;QAC7E,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,eAAe;oBACzD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;oBAC7C,SAAS,EAAE,0BAA0B,CAAC,IAAI;iBAC3C;aACF;SACF;KACF;CACF,CAAC,CAAC;AAWH,MAAM,CAAC,MAAM,uEAAuE,GAAG,CAAC,sBAA8C,EAAE,EAAE,CAAC,0CAA0C,CAInL;IACA,UAAU,EAAE,kCAAkC;IAC9C,kBAAkB,EAAE,gBAAgB,CAAC,8BAA8B;IACnE,uBAAuB,EAAE,kCAAkC,CAAC,gBAAgB,CAAC,8BAA8B,CAAC;IAC5G,qBAAqB,EAAE,sBAAsB;IAC7C,gBAAgB,EAAE,IAAI;IACtB,4EAA4E;IAC5E,yEAAyE;IACzE,kBAAkB,EAAE,EAAE,MAAM,EAAE,wBAAwB,CAAC,OAAO,EAAE;IAEhE,cAAc,EAAE;QACd,qBAAqB,CAAC,IAAI;QAC1B,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,MAAM;QAC5B,oEAAoE;QACpE,6EAA6E;QAC7E,kEAAkE;QAClE,oEAAoE;QACpE,qBAAqB,CAAC,MAAM;KAC7B;IAED,eAAe,EAAE,EAA2B;IAE5C,uBAAuB,EAAE;QACvB,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;YAC5B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC;oBAClC,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C;aACF;SACF;QAED,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE,CAAC;oBACT,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC;oBAClC,SAAS,EAAE,0BAA0B,CAAC,GAAG;oBACzC,YAAY,EAAE,KAAK;oBACnB,gBAAgB,EAAE,EAAE;oBACpB,iBAAiB,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE;oBACjE,YAAY,EAAE,EAAE;oBAChB,UAAU,EAAE,EAAE;oBACd,8BAA8B,EAAE,EAAE;iBACnC,CAAC;SACH;QAED,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,eAAe;oBACzD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC;oBAClC,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C;aACF;SACF;QAED,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,iEAAiE;oBACjE,sEAAsE;oBACtE,0EAA0E;oBAC1E,4EAA4E;oBAC5E,WAAW,EAAE,4BAA4B,CAAC,aAAa;oBACvD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC;oBAClC,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C;aACF;SACF;QAED,yEAAyE;QACzE,8EAA8E;QAC9E,2EAA2E;QAC3E,+EAA+E;QAC/E,+EAA+E;QAC/E,+EAA+E;QAC/E,wEAAwE;QACxE,iEAAiE;QACjE,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,eAAe;oBACzD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC;oBACjC,SAAS,EAAE,0BAA0B,CAAC,IAAI;iBAC3C;aACF;SACF;KACF;CACF,CAAC,CAAC","sourcesContent":["/**\n * Progression State Shared Resource Configurations\n *\n * Resource configurations for dual-scope progression state management (USER / ORGANIZATION).\n * Each scope stores milestone achievement progress, operation counts, and category progress.\n * The shared payload schema stays scope-agnostic, while the schema file also owns\n * the scope-aware persisted variants used by these resource configurations.\n */\n\nimport {\n  ProgressionStateSchema,\n  UserProgressionStateSchema,\n  OrganizationProgressionStateSchema,\n} from './progression-state.shared.schemas';\nimport { CoreResourceOperation } from '../resources/resources.shared.core.definitions';\nimport { ResourceOperationRiskLevel, ResourceRelationship } from '../resources/resources.shared.schemas';\nimport { CoreResourceType, coreResourceShared_FieldIdentifier } from '../resources/resources.shared.core.definitions';\nimport { ResourceOperationVariantType } from '../resources/resources.shared.schemas';\nimport { createResourceConfiguration_Initialization } from '../resources/resources-config.shared.factory';\nimport { ResourceSystemAccessMode } from '../resources/resources-config.shared.schemas';\nimport { CORE_APP_ROLES, CORE_ORG_ROLES } from '../security/authorizations/roles.shared.schemas';\nimport { DataPortabilityProvenance } from '../compliance/privacy/subject-export.shared.schemas';\n\n// ─── USER PROGRESSION STATE ─────────────────────────────────────────────────────\n\ntype UserProgressionStateCoreOperations =\n  | CoreResourceOperation.READ\n  | CoreResourceOperation.SEARCH\n  | CoreResourceOperation.UPDATE\n  | CoreResourceOperation.CREATE\n  | CoreResourceOperation.DELETE;\n\nexport const userProgressionStateResourceConfiguration_InitializationFactory = (resourcesRelationships: ResourceRelationship[]) => createResourceConfiguration_Initialization<\n  Record<string, never>,\n  UserProgressionStateCoreOperations,\n  typeof UserProgressionStateSchema\n>({\n  mainSchema: UserProgressionStateSchema,\n  resourceIdentifier: CoreResourceType.USER_PROGRESSION_STATE,\n  resourceFieldIdentifier: coreResourceShared_FieldIdentifier[CoreResourceType.USER_PROGRESSION_STATE],\n  resourceRelationships: resourcesRelationships,\n  isSystemResource: true,\n  // onParentCreate eager-seeding writes through createAsSystem → opt into the\n  // fail-closed system-write policy (composition-oncreate-lifecycle plan).\n  systemAccessPolicy: {\n    exportSubject: ResourceSystemAccessMode.ALLOWED, create: ResourceSystemAccessMode.ALLOWED },\n  portabilityPolicy: { defaultProvenance: DataPortabilityProvenance.DERIVED },\n\n  coreOperations: [\n    CoreResourceOperation.READ,\n    CoreResourceOperation.SEARCH,\n    CoreResourceOperation.UPDATE,\n    CoreResourceOperation.CREATE,\n    // DELETE is REPOSITORY_ONLY (no HTTP route): powers the composition\n    // onParentDelete cascade so the self-healing state row is physically removed\n    // when its owning scope is deleted. Without it the cascade throws\n    // ErrorType.CONFIGURATION on any scope that has a materialized row.\n    CoreResourceOperation.DELETE,\n  ],\n\n  customOperation: {} as Record<string, never>,\n\n  operationsConfiguration: {\n    [CoreResourceOperation.READ]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          roles: [CORE_APP_ROLES.APP_USER],\n          riskLevel: ResourceOperationRiskLevel.LOW,\n        }\n      ]\n    },\n\n    [CoreResourceOperation.SEARCH]: {\n      variants: [{\n        variantType: ResourceOperationVariantType.API_CALL,\n        isDefault: true,\n        roles: [CORE_APP_ROLES.APP_USER],\n        riskLevel: ResourceOperationRiskLevel.LOW,\n        isSearchable: false,\n        searchableFields: [],\n        searchableOptions: { caseSensitive: false, fullMatchOnly: false },\n        filterFields: {},\n        sortFields: [],\n        maxPaginatedResultPerPageLimit: 50,\n      }],\n    },\n\n    [CoreResourceOperation.UPDATE]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n          isDefault: true,\n          roles: [CORE_APP_ROLES.APP_USER],\n          riskLevel: ResourceOperationRiskLevel.LOW,\n        }\n      ],\n    },\n\n    [CoreResourceOperation.CREATE]: {\n      variants: [\n        {\n          // INTERNAL_CALL (not REPOSITORY_ONLY): the onParentCreate seed's\n          // `createAsSystem` resolves the CREATE op via the service tier, which\n          // rejects REPOSITORY_ONLY → OPERATION_PATH_NOT_FOUND, silent no-seed. See\n          // the org-preferences config + composition-oncreate plan for the rationale.\n          variantType: ResourceOperationVariantType.INTERNAL_CALL,\n          isDefault: true,\n          roles: [CORE_APP_ROLES.APP_USER],\n          riskLevel: ResourceOperationRiskLevel.LOW,\n        }\n      ],\n    },\n\n    // Internal-only (REPOSITORY_ONLY, no HTTP route): powers the composition\n    // onParentDelete cascade so this self-healing state row is physically removed\n    // when its owning user is deleted. Without a DELETE op the cascade\n    // (deleteChildrenImmediate) throws ErrorType.CONFIGURATION on any user that\n    // has a materialized row — these rows self-heal on first READ, so most active\n    // users have one. Super-admin/HIGH: a privileged teardown, not the APP_USER\n    // self-write. See composition-oncreate-lifecycle plan (systemic DELETE gap).\n    [CoreResourceOperation.DELETE]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n          isDefault: true,\n          roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n          riskLevel: ResourceOperationRiskLevel.HIGH,\n        }\n      ],\n    },\n  },\n});\n\n// ─── ORGANIZATION PROGRESSION STATE ─────────────────────────────────────────────\n\ntype OrganizationProgressionStateCoreOperations =\n  | CoreResourceOperation.READ\n  | CoreResourceOperation.SEARCH\n  | CoreResourceOperation.UPDATE\n  | CoreResourceOperation.CREATE\n  | CoreResourceOperation.DELETE;\n\nexport const organizationProgressionStateResourceConfiguration_InitializationFactory = (resourcesRelationships: ResourceRelationship[]) => createResourceConfiguration_Initialization<\n  Record<string, never>,\n  OrganizationProgressionStateCoreOperations,\n  typeof OrganizationProgressionStateSchema\n>({\n  mainSchema: OrganizationProgressionStateSchema,\n  resourceIdentifier: CoreResourceType.ORGANIZATION_PROGRESSION_STATE,\n  resourceFieldIdentifier: coreResourceShared_FieldIdentifier[CoreResourceType.ORGANIZATION_PROGRESSION_STATE],\n  resourceRelationships: resourcesRelationships,\n  isSystemResource: true,\n  // onParentCreate eager-seeding writes through createAsSystem → opt into the\n  // fail-closed system-write policy (composition-oncreate-lifecycle plan).\n  systemAccessPolicy: { create: ResourceSystemAccessMode.ALLOWED },\n\n  coreOperations: [\n    CoreResourceOperation.READ,\n    CoreResourceOperation.SEARCH,\n    CoreResourceOperation.UPDATE,\n    CoreResourceOperation.CREATE,\n    // DELETE is REPOSITORY_ONLY (no HTTP route): powers the composition\n    // onParentDelete cascade so the self-healing state row is physically removed\n    // when its owning scope is deleted. Without it the cascade throws\n    // ErrorType.CONFIGURATION on any scope that has a materialized row.\n    CoreResourceOperation.DELETE,\n  ],\n\n  customOperation: {} as Record<string, never>,\n\n  operationsConfiguration: {\n    [CoreResourceOperation.READ]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          roles: [CORE_ORG_ROLES.ORG_MEMBER],\n          riskLevel: ResourceOperationRiskLevel.LOW,\n        }\n      ]\n    },\n\n    [CoreResourceOperation.SEARCH]: {\n      variants: [{\n        variantType: ResourceOperationVariantType.API_CALL,\n        isDefault: true,\n        roles: [CORE_ORG_ROLES.ORG_MEMBER],\n        riskLevel: ResourceOperationRiskLevel.LOW,\n        isSearchable: false,\n        searchableFields: [],\n        searchableOptions: { caseSensitive: false, fullMatchOnly: false },\n        filterFields: {},\n        sortFields: [],\n        maxPaginatedResultPerPageLimit: 50,\n      }],\n    },\n\n    [CoreResourceOperation.UPDATE]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n          isDefault: true,\n          roles: [CORE_ORG_ROLES.ORG_MEMBER],\n          riskLevel: ResourceOperationRiskLevel.LOW,\n        }\n      ],\n    },\n\n    [CoreResourceOperation.CREATE]: {\n      variants: [\n        {\n          // INTERNAL_CALL (not REPOSITORY_ONLY): the onParentCreate seed's\n          // `createAsSystem` resolves the CREATE op via the service tier, which\n          // rejects REPOSITORY_ONLY → OPERATION_PATH_NOT_FOUND, silent no-seed. See\n          // the org-preferences config + composition-oncreate plan for the rationale.\n          variantType: ResourceOperationVariantType.INTERNAL_CALL,\n          isDefault: true,\n          roles: [CORE_ORG_ROLES.ORG_MEMBER],\n          riskLevel: ResourceOperationRiskLevel.LOW,\n        }\n      ],\n    },\n\n    // Internal-only (REPOSITORY_ONLY, no HTTP route): powers the composition\n    // onParentDelete cascade so this self-healing state row is physically removed\n    // when its owning organization is deleted. Without a DELETE op the cascade\n    // (deleteChildrenImmediate) throws ErrorType.CONFIGURATION on any org that has\n    // a materialized row — these rows self-heal on first READ, so most active orgs\n    // have one. ORG_ADMIN/HIGH: the org-scope admin tier for a privileged teardown\n    // (org progression writes are ORG_MEMBER, but teardown is admin-gated).\n    // See composition-oncreate-lifecycle plan (systemic DELETE gap).\n    [CoreResourceOperation.DELETE]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n          isDefault: true,\n          roles: [CORE_ORG_ROLES.ORG_ADMIN],\n          riskLevel: ResourceOperationRiskLevel.HIGH,\n        }\n      ],\n    },\n  },\n});\n"]}

package/dist/esm/guidance/progression-state.shared.schemas.d.ts

@@ -6,7 +6,7 @@ import { z } from 'zod';
 export declare const ProgressionMilestoneAchievedSchema: z.ZodObject<{
     achievedAt: z.ZodCoercedDate<unknown>;
     count: z.ZodDefault<z.ZodNumber>;
-}, z.core.$strip, core.$ZodObjectExtra>;
+}, z.core.$strip>;
 export type ProgressionMilestoneAchieved = z.infer<typeof ProgressionMilestoneAchievedSchema>;
 /** ──────────────────────────────────────────────────────────────
  * Progression State — Per-Category Aggregated Progress
@@ -15,24 +15,54 @@ export type ProgressionMilestoneAchieved = z.infer<typeof ProgressionMilestoneAc
 export declare const ProgressionCategoryProgressSchema: z.ZodObject<{
     completedCount: z.ZodDefault<z.ZodNumber>;
     totalPoints: z.ZodDefault<z.ZodNumber>;
-}, z.core.$strip, core.$ZodObjectExtra>;
+}, z.core.$strip>;
 export type ProgressionCategoryProgress = z.infer<typeof ProgressionCategoryProgressSchema>;
 /** ──────────────────────────────────────────────────────────────
  * Progression State — Top-Level Document
  * ────────────────────────────────────────────────────────────── */
-/** Top-level progression state document (stored as core resource).
- *  Used identically across all three scope resources (USER, ORGANIZATION). */
+/** Shared progression state payload body.
+ *  Scope-specific state resources extend this schema with their owning FK
+ *  (`userId` / `organizationId`) before persistence. */
 export declare const ProgressionStateSchema: z.ZodObject<{
-    milestonesAchieved: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
+    milestonesAchieved: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
         achievedAt: z.ZodCoercedDate<unknown>;
         count: z.ZodDefault<z.ZodNumber>;
-    }, z.core.$strip, core.$ZodObjectExtra>>>;
-    operationCounts: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodNumber>>;
-    totalPoints: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodNumber>>;
+    }, z.core.$strip>>>>;
+    operationCounts: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodNumber>>>;
+    totalPoints: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodNumber>>>;
     categoriesProgress: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
         completedCount: z.ZodDefault<z.ZodNumber>;
         totalPoints: z.ZodDefault<z.ZodNumber>;
-    }, z.core.$strip, core.$ZodObjectExtra>>>;
-}, z.core.$strip, core.$ZodObjectExtra>;
+    }, z.core.$strip>>>;
+}, z.core.$strip>;
 export type ProgressionState = z.infer<typeof ProgressionStateSchema>;
+export declare const UserProgressionStateSchema: z.ZodObject<{
+    milestonesAchieved: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
+        achievedAt: z.ZodCoercedDate<unknown>;
+        count: z.ZodDefault<z.ZodNumber>;
+    }, z.core.$strip>>>>;
+    operationCounts: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodNumber>>>;
+    totalPoints: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodNumber>>>;
+    categoriesProgress: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
+        completedCount: z.ZodDefault<z.ZodNumber>;
+        totalPoints: z.ZodDefault<z.ZodNumber>;
+    }, z.core.$strip>>>;
+    userId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>>;
+}, z.core.$strip>;
+export type UserProgressionState = z.infer<typeof UserProgressionStateSchema>;
+export declare const OrganizationProgressionStateSchema: z.ZodObject<{
+    milestonesAchieved: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
+        achievedAt: z.ZodCoercedDate<unknown>;
+        count: z.ZodDefault<z.ZodNumber>;
+    }, z.core.$strip>>>>;
+    operationCounts: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodNumber>>>;
+    totalPoints: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodNumber>>>;
+    categoriesProgress: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
+        completedCount: z.ZodDefault<z.ZodNumber>;
+        totalPoints: z.ZodDefault<z.ZodNumber>;
+    }, z.core.$strip>>>;
+    organizationId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>>;
+}, z.core.$strip>;
+export type OrganizationProgressionState = z.infer<typeof OrganizationProgressionStateSchema>;
+export type PersistedProgressionState = UserProgressionState | OrganizationProgressionState;
 //# sourceMappingURL=progression-state.shared.schemas.d.ts.map

package/dist/esm/guidance/progression-state.shared.schemas.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"progression-state.shared.schemas.d.ts","sourceRoot":"","sources":["../../../src/guidance/progression-state.shared.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;oEAEoE;AAEpE,+CAA+C;AAC/C,eAAO,MAAM,kCAAkC;;;uCAK7C,CAAC;AACH,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kCAAkC,CAAC,CAAC;AAE9F;;oEAEoE;AAEpE,uCAAuC;AACvC,eAAO,MAAM,iCAAiC;;;uCAK5C,CAAC;AACH,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iCAAiC,CAAC,CAAC;AAE5F;;oEAEoE;AAEpE;8EAC8E;AAC9E,eAAO,MAAM,sBAAsB;;;;;;;;;;;uCAUjC,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC"}
+{"version":3,"file":"progression-state.shared.schemas.d.ts","sourceRoot":"","sources":["../../../../src/guidance/progression-state.shared.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB;;oEAEoE;AAEpE,+CAA+C;AAC/C,eAAO,MAAM,kCAAkC;;;iBAK7C,CAAC;AACH,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kCAAkC,CAAC,CAAC;AAE9F;;oEAEoE;AAEpE,uCAAuC;AACvC,eAAO,MAAM,iCAAiC;;;iBAK5C,CAAC;AACH,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iCAAiC,CAAC,CAAC;AAE5F;;oEAEoE;AAEpE;;wDAEwD;AACxD,eAAO,MAAM,sBAAsB;;;;;;;;;;;iBAYjC,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE,eAAO,MAAM,0BAA0B;;;;;;;;;;;;iBAErC,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE9E,eAAO,MAAM,kCAAkC;;;;;;;;;;;;iBAE7C,CAAC;AACH,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kCAAkC,CAAC,CAAC;AAE9F,MAAM,MAAM,yBAAyB,GAAG,oBAAoB,GAAG,4BAA4B,CAAC"}

package/dist/esm/guidance/progression-state.shared.schemas.js

@@ -1,4 +1,5 @@
 import { z } from 'zod';
+import { PersonalDataCategory } from '../compliance/privacy/personal-data-category.shared.schemas.js';
 /** ──────────────────────────────────────────────────────────────
  * Progression State — Milestone Achievement Record
  * ────────────────────────────────────────────────────────────── */
@@ -22,17 +23,26 @@ export const ProgressionCategoryProgressSchema = z.object({
 /** ──────────────────────────────────────────────────────────────
  * Progression State — Top-Level Document
  * ────────────────────────────────────────────────────────────── */
-/** Top-level progression state document (stored as core resource).
- *  Used identically across all three scope resources (USER, ORGANIZATION). */
+/** Shared progression state payload body.
+ *  Scope-specific state resources extend this schema with their owning FK
+ *  (`userId` / `organizationId`) before persistence. */
 export const ProgressionStateSchema = z.object({
     /** Map of milestoneRef → achievement record. Populated when a milestone is achieved. */
-    milestonesAchieved: z.record(z.string(), ProgressionMilestoneAchievedSchema).default({}),
+    // USAGE — a per-person record of what they accomplished and how often they acted.
+    milestonesAchieved: z.record(z.string(), ProgressionMilestoneAchievedSchema).default({})
+        .dataCategories(PersonalDataCategory.USAGE),
     /** Map of `${resourceType}:${operation}` → count. Incremented on every matching operation.
      *  This is the raw data used by COUNT_THRESHOLD conditions. */
-    operationCounts: z.record(z.string(), z.number().int()).default({}),
+    operationCounts: z.record(z.string(), z.number().int()).default({}).dataCategories(PersonalDataCategory.USAGE),
     /** Total points across all achieved milestones. Updated atomically with achievements. */
-    totalPoints: z.number().int().default(0).isSummaryField(),
+    totalPoints: z.number().int().default(0).isSummaryField().dataCategories(PersonalDataCategory.USAGE),
     /** Per-category progress. Pre-aggregated for frontend display efficiency. */
     categoriesProgress: z.record(z.string(), ProgressionCategoryProgressSchema).default({}),
 });
-//# sourceMappingURL=progression-state.shared.schemas.js.map
+export const UserProgressionStateSchema = ProgressionStateSchema.extend({
+    userId: z.string().min(1).isDBIndexed().isForeignKey().isSummaryField().excludeFromUpdate(),
+});
+export const OrganizationProgressionStateSchema = ProgressionStateSchema.extend({
+    organizationId: z.string().min(1).isDBIndexed().isForeignKey().isSummaryField().excludeFromUpdate(),
+});
+//# sourceMappingURL=progression-state.shared.schemas.js.map

package/dist/esm/guidance/progression-state.shared.schemas.js.map

@@ -1 +1 @@
-{"version":3,"file":"progression-state.shared.schemas.js","sourceRoot":"","sources":["../../../src/guidance/progression-state.shared.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;oEAEoE;AAEpE,+CAA+C;AAC/C,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC,CAAC,MAAM,CAAC;IACzD,sCAAsC;IACtC,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE;IAC3B,qFAAqF;IACrF,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;CACnC,CAAC,CAAC;AAGH;;oEAEoE;AAEpE,uCAAuC;AACvC,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC,CAAC,MAAM,CAAC;IACxD,sDAAsD;IACtD,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3C,2CAA2C;IAC3C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;CACzC,CAAC,CAAC;AAGH;;oEAEoE;AAEpE;8EAC8E;AAC9E,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,wFAAwF;IACxF,kBAAkB,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,kCAAkC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACxF;mEAC+D;IAC/D,eAAe,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACnE,yFAAyF;IACzF,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,cAAc,EAAE;IACzD,6EAA6E;IAC7E,kBAAkB,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,iCAAiC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CACxF,CAAC,CAAC"}
+{"version":3,"file":"progression-state.shared.schemas.js","sourceRoot":"","sources":["../../../../src/guidance/progression-state.shared.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,oBAAoB,EAAE,MAAM,6DAA6D,CAAC;AAEnG;;oEAEoE;AAEpE,+CAA+C;AAC/C,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC,CAAC,MAAM,CAAC;IACzD,sCAAsC;IACtC,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE;IAC3B,qFAAqF;IACrF,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;CACnC,CAAC,CAAC;AAGH;;oEAEoE;AAEpE,uCAAuC;AACvC,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC,CAAC,MAAM,CAAC;IACxD,sDAAsD;IACtD,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3C,2CAA2C;IAC3C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;CACzC,CAAC,CAAC;AAGH;;oEAEoE;AAEpE;;wDAEwD;AACxD,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,wFAAwF;IACxF,kFAAkF;IAClF,kBAAkB,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,kCAAkC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;SACrF,cAAc,CAAC,oBAAoB,CAAC,KAAK,CAAC;IAC7C;mEAC+D;IAC/D,eAAe,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,cAAc,CAAC,oBAAoB,CAAC,KAAK,CAAC;IAC9G,yFAAyF;IACzF,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC,cAAc,CAAC,oBAAoB,CAAC,KAAK,CAAC;IACpG,6EAA6E;IAC7E,kBAAkB,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,iCAAiC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CACxF,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,0BAA0B,GAAG,sBAAsB,CAAC,MAAM,CAAC;IACtE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,YAAY,EAAE,CAAC,cAAc,EAAE,CAAC,iBAAiB,EAAE;CAC5F,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,kCAAkC,GAAG,sBAAsB,CAAC,MAAM,CAAC;IAC9E,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,YAAY,EAAE,CAAC,cAAc,EAAE,CAAC,iBAAiB,EAAE;CACpG,CAAC,CAAC","sourcesContent":["import { z } from 'zod';\nimport { PersonalDataCategory } from '../compliance/privacy/personal-data-category.shared.schemas';\n\n/** ──────────────────────────────────────────────────────────────\n * Progression State — Milestone Achievement Record\n * ────────────────────────────────────────────────────────────── */\n\n/** Record of a single milestone achievement */\nexport const ProgressionMilestoneAchievedSchema = z.object({\n  /** When the milestone was achieved */\n  achievedAt: z.coerce.date(),\n  /** How many times the triggering operation occurred (for COUNT_THRESHOLD context) */\n  count: z.number().int().default(0),\n});\nexport type ProgressionMilestoneAchieved = z.infer<typeof ProgressionMilestoneAchievedSchema>;\n\n/** ──────────────────────────────────────────────────────────────\n * Progression State — Per-Category Aggregated Progress\n * ────────────────────────────────────────────────────────────── */\n\n/** Per-category aggregated progress */\nexport const ProgressionCategoryProgressSchema = z.object({\n  /** Number of milestones completed in this category */\n  completedCount: z.number().int().default(0),\n  /** Total points earned in this category */\n  totalPoints: z.number().int().default(0),\n});\nexport type ProgressionCategoryProgress = z.infer<typeof ProgressionCategoryProgressSchema>;\n\n/** ──────────────────────────────────────────────────────────────\n * Progression State — Top-Level Document\n * ────────────────────────────────────────────────────────────── */\n\n/** Shared progression state payload body.\n *  Scope-specific state resources extend this schema with their owning FK\n *  (`userId` / `organizationId`) before persistence. */\nexport const ProgressionStateSchema = z.object({\n  /** Map of milestoneRef → achievement record. Populated when a milestone is achieved. */\n  // USAGE — a per-person record of what they accomplished and how often they acted.\n  milestonesAchieved: z.record(z.string(), ProgressionMilestoneAchievedSchema).default({})\n    .dataCategories(PersonalDataCategory.USAGE),\n  /** Map of `${resourceType}:${operation}` → count. Incremented on every matching operation.\n   *  This is the raw data used by COUNT_THRESHOLD conditions. */\n  operationCounts: z.record(z.string(), z.number().int()).default({}).dataCategories(PersonalDataCategory.USAGE),\n  /** Total points across all achieved milestones. Updated atomically with achievements. */\n  totalPoints: z.number().int().default(0).isSummaryField().dataCategories(PersonalDataCategory.USAGE),\n  /** Per-category progress. Pre-aggregated for frontend display efficiency. */\n  categoriesProgress: z.record(z.string(), ProgressionCategoryProgressSchema).default({}),\n});\nexport type ProgressionState = z.infer<typeof ProgressionStateSchema>;\n\nexport const UserProgressionStateSchema = ProgressionStateSchema.extend({\n  userId: z.string().min(1).isDBIndexed().isForeignKey().isSummaryField().excludeFromUpdate(),\n});\nexport type UserProgressionState = z.infer<typeof UserProgressionStateSchema>;\n\nexport const OrganizationProgressionStateSchema = ProgressionStateSchema.extend({\n  organizationId: z.string().min(1).isDBIndexed().isForeignKey().isSummaryField().excludeFromUpdate(),\n});\nexport type OrganizationProgressionState = z.infer<typeof OrganizationProgressionStateSchema>;\n\nexport type PersistedProgressionState = UserProgressionState | OrganizationProgressionState;\n"]}

package/dist/esm/http-api-binding/http-api-binding-id.shared.utils.d.ts

@@ -0,0 +1,69 @@
+/**
+ * HTTP-API resource-id synthesis — THE single authority for encoding/decoding the engine-facing
+ * `_id` of an `HTTP_API`-backed resource from its remote key components.
+ *
+ * Contract (design paper `.claude/plans/etl-composite-key-synthesis.md`):
+ * - **Deterministic + injective**: the same remote row yields the same `_id` on every machine,
+ *   forever; two rows never collide (JSON array encoding preserves order and type).
+ * - **Charset law**: every synthesized id matches `^[A-Za-z0-9._~-]+$` (URL-unreserved). This is
+ *   what survives the two measured hazards: the frontend's unencoded `String.replace` URL
+ *   substitution (forbids `/ ? # % $`) and colon-parsed websocket-room / Redis keys (forbids `:`).
+ * - **Two static forms**, selected by the BINDING, never sniffed per row:
+ *   verbatim (single key whose codec's whole value space is charset-safe — GUID, INTEGER) or
+ *   encoded (base64url of the canonical JSON array of normalized components, no padding).
+ * - **Decodable offline**: `_id` → key components needs no remote call.
+ *
+ * Errors are thrown as the typed {@link HttpApiResourceIdError} — this module is shared-tier (no
+ * `ErrorBuilder` here; same precedent as `selectByPersistenceAdapter`). Backend callers classify
+ * it by INSTANCE into a LOUD `VALIDATION` refusal — never a silent not-found (the Mongo
+ * CastError-to-404 behavior is explicitly NOT mimicked).
+ *
+ * No `Buffer` here on purpose: this file must run in the browser bundle as well as Node, so
+ * base64url is implemented over `TextEncoder`/`TextDecoder`.
+ */
+import { type HttpApiKeyField } from './http-api-binding.shared.schemas';
+/**
+ * The typed refusal every codec failure throws — undecodable ids, non-canonical aliases, missing
+ * or malformed key components. Typed (rather than message-matched) so the backend adapter can
+ * classify it into a VALIDATION projection without regexing prose that a reword would silently
+ * break.
+ */
+export declare class HttpApiResourceIdError extends Error {
+    constructor(message: string);
+}
+/** One normalized key component value as it participates in id synthesis. */
+export type HttpApiKeyComponentValue = string | number;
+/**
+ * The charset law for every synthesized HTTP-API resource id: URL-unreserved characters only.
+ * See the module JSDoc for the two measured hazards this survives.
+ */
+export declare const HTTP_API_RESOURCE_ID_CHARSET: RegExp;
+/**
+ * Normalize one raw remote key value per its declared codec. Normalization is what makes the
+ * synthesis STABLE: the same remote row must produce byte-identical components regardless of the
+ * remote system's incidental formatting (GUID casing, datetime precision).
+ */
+export declare function normalizeHttpApiKeyComponent(keyField: HttpApiKeyField, rawValue: unknown): HttpApiKeyComponentValue;
+/**
+ * Synthesize the engine-facing `_id` for one remote row, from its raw remote key values in
+ * `keyFields` order. The form (verbatim vs encoded) is a static property of the binding
+ * (`httpApiBindingUsesVerbatimKey`).
+ */
+export declare function synthesizeHttpApiResourceId(binding: {
+    keyFields: readonly HttpApiKeyField[];
+}, rawComponents: readonly unknown[]): string;
+/**
+ * Resolve an engine-facing `_id` back to its normalized key components, in `keyFields` order.
+ * Purely local — no remote call. Throws on any id this binding could not have synthesized —
+ * INCLUDING every non-canonical ALIAS of a valid id (base64url trailing-bit variants,
+ * JSON-whitespace variants, non-normalized verbatim forms such as an uppercase GUID): one remote
+ * row answers to exactly ONE engine id, because row identity, URL canonicality, dedup keys and
+ * id-based exclusion filters are all built on that equality. Enforced by re-synthesizing from the
+ * resolved components and requiring byte-equality with the incoming id.
+ */
+export declare function resolveHttpApiKeyComponents(binding: {
+    keyFields: readonly HttpApiKeyField[];
+}, resourceId: string): HttpApiKeyComponentValue[];
+/** Runtime guard for the charset law. */
+export declare function isCharsetSafeHttpApiResourceId(candidate: string): boolean;
+//# sourceMappingURL=http-api-binding-id.shared.utils.d.ts.map

package/dist/esm/http-api-binding/http-api-binding-id.shared.utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-api-binding-id.shared.utils.d.ts","sourceRoot":"","sources":["../../../../src/http-api-binding/http-api-binding-id.shared.utils.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAmBH,OAAO,EAGL,KAAK,eAAe,EACrB,MAAM,mCAAmC,CAAC;AAE3C;;;;;GAKG;AACH,qBAAa,sBAAuB,SAAQ,KAAK;gBACnC,OAAO,EAAE,MAAM;CAI5B;AAED,6EAA6E;AAC7E,MAAM,MAAM,wBAAwB,GAAG,MAAM,GAAG,MAAM,CAAC;AAEvD;;;GAGG;AACH,eAAO,MAAM,4BAA4B,EAAE,MAA6B,CAAC;AA6DzE;;;;GAIG;AACH,wBAAgB,4BAA4B,CAC1C,QAAQ,EAAE,eAAe,EACzB,QAAQ,EAAE,OAAO,GAChB,wBAAwB,CA4C1B;AAaD;;;;GAIG;AACH,wBAAgB,2BAA2B,CACzC,OAAO,EAAE;IAAE,SAAS,EAAE,SAAS,eAAe,EAAE,CAAA;CAAE,EAClD,aAAa,EAAE,SAAS,OAAO,EAAE,GAChC,MAAM,CAqBR;AAED;;;;;;;;GAQG;AACH,wBAAgB,2BAA2B,CACzC,OAAO,EAAE;IAAE,SAAS,EAAE,SAAS,eAAe,EAAE,CAAA;CAAE,EAClD,UAAU,EAAE,MAAM,GACjB,wBAAwB,EAAE,CAqC5B;AAED,yCAAyC;AACzC,wBAAgB,8BAA8B,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAEzE"}