@wildo-ai/saas-models 1.0.1

package/dist/esm/resources/resources-registry.shared.core.definitions.js

@@ -0,0 +1,691 @@
+import { RelationshipNature, ResourceRelationshipAccessScopeStrategy, ResourceRelationshipCardinality, ResourceParentResourceRequirement } from "./resources.shared.schemas.js";
+import { ContextPolicy_ObjectMode } from "./context-policy.shared.schemas.js";
+import { ChildLifecycleMode } from "./child-operations.shared.schemas.js";
+import { CoreResourceOperation } from "./resources.shared.core.definitions.js";
+import { CoreResourceType } from "./resources.shared.core.definitions.js";
+// Resource configuration factory imports
+import { usersResourceConfiguration_InitializationFactory } from "../users/users.shared.resources-config.schemas.js";
+import { userCredentialsResourceConfiguration_InitializationFactory } from "../users/user-credentials.shared.resources-config.schemas.js";
+import { auditLogsResourceConfiguration_InitializationFactory } from "../compliance/audit-trails/audit-logs.shared.resources-config.schemas.js";
+import { filesResourceConfiguration_InitializationFactory } from "../files/files.shared.resources-config.schemas.js";
+import { userSelfResourceConfiguration_InitializationFactory } from "../users/user-self.shared.resources-config.schemas.js";
+import { userProfilesResourceConfiguration_InitializationFactory } from "../users/user-profiles.shared.resources-config.schemas.js";
+import { userPreferencesResourceConfiguration_InitializationFactory } from "../users/user-preferences.shared.resources-config.schemas.js";
+import { userSelfProfilesResourceConfiguration_InitializationFactory } from "../users/user-self-profiles.shared.resources-config.schemas.js";
+import { userSelfPreferencesResourceConfiguration_InitializationFactory } from "../users/user-self-preferences.shared.resources-config.schemas.js";
+import { applicationResourceConfiguration_InitializationFactory } from "../applications/applications.shared.resources-config.schemas.js";
+import { organizationResourceConfiguration_InitializationFactory } from "../organizations/organizations.shared.resources-config.schemas.js";
+import { organizationUnitResourceConfiguration_InitializationFactory } from "../organizations/organization-units.shared.resources-config.schemas.js";
+import { organizationProfileResourceConfiguration_InitializationFactory } from "../organizations/organization-profile.shared.resources-config.schemas.js";
+import { organizationPreferencesResourceConfiguration_InitializationFactory } from "../organizations/organization-preferences.shared.resources-config.schemas.js";
+import { organizationNotificationsResourceConfiguration_InitializationFactory } from "../organizations/organization-notifications.shared.resources-config.schemas.js";
+import { organizationFeaturesResourceConfiguration_InitializationFactory } from "../organizations/organization-features.shared.resources-config.schemas.js";
+import { userFeaturesResourceConfiguration_InitializationFactory } from "../features/user-features.shared.resources-config.schemas.js";
+import { organizationMembersResourceConfiguration_InitializationFactory } from "../organizations/organization-members.shared.resources-config.schemas.js";
+import { organizationMemberInvitationsResourceConfiguration_InitializationFactory } from "../organizations/organization-member-invitations.shared.resources-config.schemas.js";
+import { orgApiKeysResourceConfiguration_InitializationFactory } from "../security/api-keys/api-keys-organization.shared.resources-config.schemas.js";
+import { appApiKeysResourceConfiguration_InitializationFactory } from "../security/api-keys/api-keys-application.shared.resources-config.schemas.js";
+import { billingAccountsPolymorphicFactories } from "../billing/billing-account.shared.resources-config.schemas.js";
+import { billingAccountsPolymorphicDeclaration } from "../billing/billing-account.shared.schemas.js";
+import { productsResourceConfiguration_InitializationFactory } from "../billing/product.shared.resources-config.schemas.js";
+import { pricesResourceConfiguration_InitializationFactory } from "../billing/price.shared.resources-config.schemas.js";
+import { billingSubscriptionsPolymorphicFactories } from "../billing/subscription.shared.resources-config.schemas.js";
+import { billingSubscriptionsPolymorphicDeclaration } from "../billing/subscription.shared.schemas.js";
+import { createPolymorphicScopeRelationships, createPolymorphicRelationships } from "./utils/resource-polymorphism.relationships.js";
+import { invoiceRefsPolymorphicFactories } from "../billing/invoice-ref.shared.resources-config.schemas.js";
+import { invoiceRefsPolymorphicDeclaration } from "../billing/invoice-ref.shared.schemas.js";
+import { usageRecordsPolymorphicFactories } from "../billing/usage-record.shared.resources-config.schemas.js";
+import { usageRecordsPolymorphicDeclaration } from "../billing/usage-record.shared.schemas.js";
+import { creditPoolsPolymorphicFactories } from "../billing/credit-pool.shared.resources-config.schemas.js";
+import { creditPoolsPolymorphicDeclaration } from "../billing/credit-pool.shared.schemas.js";
+import { promotionsResourceConfiguration_InitializationFactory } from "../billing/promotions.shared.resources-config.schemas.js";
+import { referralsResourceConfiguration_InitializationFactory } from "../billing/referral.shared.resources-config.schemas.js";
+import { notificationBadgesResourceConfiguration_InitializationFactory } from "../notifications/notification-badges.shared.resources-config.schemas.js";
+import { createResourcesRelationship } from "./resources-relationships.shared.factory.js";
+import { applicationVersionsResourceConfiguration_InitializationFactory } from "../applications/application-versions.shared.resources-config.schemas.js";
+import { applicationMetadataResourceConfiguration_InitializationFactory } from "../applications/application-metadata.shared.resources-config.schemas.js";
+// Queue system resources
+import { jobExecution_ResourceConfiguration_InitializationFactory, jobPayloadStorage_ResourceConfiguration_InitializationFactory } from "../queue/jobs.shared.resources-config.schemas.js";
+// Email system resources
+import { emailTemplateResourceConfiguration_InitializationFactory } from "../notifications/email/email-template.shared.resources-config.schemas.js";
+import { emailHeaderFooterTemplateResourceConfiguration_InitializationFactory } from "../notifications/email/email-header-footer-template.shared.resources-config.schemas.js";
+// Authentication resources
+import { userIdentityLinksResourceConfiguration_InitializationFactory } from "../users/user-identity-links.shared.resources-config.schemas.js";
+// Anonymous session resources (W7.3a)
+import { anonymousUsersResourceConfiguration_InitializationFactory } from "../users/anonymous-users.shared.resources-config.schemas.js";
+// Guidance State resources
+import { userGuidanceStateResourceConfiguration_InitializationFactory, organizationGuidanceStateResourceConfiguration_InitializationFactory } from "../guidance/guidance-state.shared.resources-config.schemas.js";
+// Auth polymorphic resource configs (SSO + SIEM + SCIM)
+import { ssoConfigPolymorphicFactories } from "../security/authentications/sso/sso-config.shared.resources-config.schemas.js";
+import { ssoConfigPolymorphicDeclaration } from "../security/authentications/sso/sso-config.shared.schemas.js";
+import { ssoConnectionPolymorphicFactories } from "../security/authentications/sso/sso-connection.shared.resources-config.schemas.js";
+import { ssoConnectionPolymorphicDeclaration } from "../security/authentications/sso/sso-connection.shared.schemas.js";
+import { authPolicyPolymorphicFactories } from "../security/authentications/policy/auth-policy.shared.resources-config.schemas.js";
+import { authPolicyPolymorphicDeclaration } from "../security/authentications/policy/auth-policy.shared.schemas.js";
+import { siemExportConfigPolymorphicFactories } from "../security/authentications/siem/siem-export-config.shared.resources-config.schemas.js";
+import { siemExportConfigPolymorphicDeclaration } from "../security/authentications/siem/siem-export-config.shared.schemas.js";
+import { siemDeliveryDlqPolymorphicFactories } from "../security/authentications/siem/siem-delivery-dlq.shared.resources-config.schemas.js";
+import { siemDeliveryDlqPolymorphicDeclaration } from "../security/authentications/siem/siem-delivery-dlq.shared.schemas.js";
+import { scimTokensPolymorphicFactories } from "../security/authentications/scim/scim-tokens.shared.resources-config.schemas.js";
+import { scimTokensPolymorphicDeclaration } from "../security/authentications/scim/scim-tokens.shared.schemas.js";
+import { scimProvisioningConfigPolymorphicFactories } from "../security/authentications/scim/scim-provisioning-config.shared.resources-config.schemas.js";
+import { scimProvisioningConfigPolymorphicDeclaration } from "../security/authentications/scim/scim-provisioning-config.shared.schemas.js";
+// Progression State resources
+import { userProgressionStateResourceConfiguration_InitializationFactory, organizationProgressionStateResourceConfiguration_InitializationFactory } from "../guidance/progression-state.shared.resources-config.schemas.js";
+// Lifecycle State resources
+import { userLifecycleStateResourceConfiguration_InitializationFactory, organizationLifecycleStateResourceConfiguration_InitializationFactory } from "../guidance/lifecycle-state.shared.resources-config.schemas.js";
+export const coreSharedResourceRelationship = [
+    // Core organizational relationships - Many-to-many through organization members
+    // Note: No isPrimaryScope here - applications are the primary scope for users, not organizations
+    createResourcesRelationship(CoreResourceType.ORGANIZATIONS, CoreResourceType.USERS, ResourceRelationshipCardinality.MANY, ResourceRelationshipCardinality.MANY, {
+        jointResourceType: CoreResourceType.ORGANIZATION_MEMBERS,
+        accessScopeStrategy: ResourceRelationshipAccessScopeStrategy.STANDALONE,
+        nature: RelationshipNature.ASSOCIATION,
+        // Many-to-many: summary only, disable on LIST/SEARCH for performance
+        contextPolicy: {
+            objectMode: ContextPolicy_ObjectMode.SUMMARY,
+            operationOverrides: {
+                [CoreResourceOperation.LIST]: { enabled: false },
+                [CoreResourceOperation.SEARCH]: { enabled: false },
+            }
+        }
+    }),
+    // User 1:1 relationships
+    createResourcesRelationship(CoreResourceType.USERS, CoreResourceType.USER_PROFILES, ResourceRelationshipCardinality.ONE, ResourceRelationshipCardinality.ONE, {
+        isPrimaryScope: true,
+        nature: RelationshipNature.COMPOSITION,
+        childOperations: { lifecycle: { onParentDelete: { enabled: true, mode: ChildLifecycleMode.IMMEDIATE, maxDepth: 1 } } },
+        foreignKeyField: 'userId',
+        // 1:1 profile: full on READ, summary otherwise
+        contextPolicy: {
+            objectMode: ContextPolicy_ObjectMode.SUMMARY,
+            operationOverrides: {
+                [CoreResourceOperation.READ]: { objectMode: ContextPolicy_ObjectMode.FULL },
+            }
+        }
+    }),
+    createResourcesRelationship(CoreResourceType.USERS, CoreResourceType.USER_PREFERENCES, ResourceRelationshipCardinality.ONE, ResourceRelationshipCardinality.ONE, {
+        isPrimaryScope: true,
+        nature: RelationshipNature.COMPOSITION,
+        childOperations: { lifecycle: { onParentDelete: { enabled: true, mode: ChildLifecycleMode.IMMEDIATE, maxDepth: 1 } } },
+        foreignKeyField: 'userId',
+        // 1:1 preferences: full on READ, summary otherwise
+        contextPolicy: {
+            objectMode: ContextPolicy_ObjectMode.SUMMARY,
+            operationOverrides: {
+                [CoreResourceOperation.READ]: { objectMode: ContextPolicy_ObjectMode.FULL },
+            }
+        }
+    }),
+    // Link Users to UserCredentials (standalone access, internal-only operations)
+    createResourcesRelationship(CoreResourceType.USERS, CoreResourceType.USER_CREDENTIALS, ResourceRelationshipCardinality.ONE, ResourceRelationshipCardinality.ONE, {
+        accessScopeStrategy: ResourceRelationshipAccessScopeStrategy.STANDALONE,
+        nature: RelationshipNature.COMPOSITION,
+        childOperations: { lifecycle: { onParentDelete: { enabled: true, mode: ChildLifecycleMode.IMMEDIATE, maxDepth: 1 } } },
+        foreignKeyField: 'userId',
+        // SECURITY: Never fetch credentials via context
+        contextPolicy: { enabled: false }
+    }),
+    // Link Users to UserIdentityLinks (1:N — user can have multiple OAuth2/SSO provider connections)
+    // Standalone access (internal-only operations), cascade delete on user removal.
+    // Unique compound index: userId + providerRef + connectionType (enforced at DB level)
+    // Secondary index: providerRef + providerUserId (fast lookup during JIT provisioning)
+    createResourcesRelationship(CoreResourceType.USERS, CoreResourceType.USER_IDENTITY_LINKS, ResourceRelationshipCardinality.ONE, ResourceRelationshipCardinality.MANY, {
+        accessScopeStrategy: ResourceRelationshipAccessScopeStrategy.STANDALONE,
+        nature: RelationshipNature.COMPOSITION,
+        childOperations: { lifecycle: { onParentDelete: { enabled: true, mode: ChildLifecycleMode.IMMEDIATE, maxDepth: 1 } } },
+        foreignKeyField: 'userId',
+        // SECURITY: Identity links contain raw IdP profiles — never fetch via context
+        contextPolicy: { enabled: false }
+    }),
+    // User Self 1:1 relationships - separated for access control
+    createResourcesRelationship(CoreResourceType.USER_SELF, CoreResourceType.USER_SELF_PROFILES, ResourceRelationshipCardinality.ONE, ResourceRelationshipCardinality.ONE, {
+        isPrimaryScope: true,
+        nature: RelationshipNature.COMPOSITION,
+        childOperations: { lifecycle: { onParentDelete: { enabled: true, mode: ChildLifecycleMode.IMMEDIATE, maxDepth: 1 } } },
+        foreignKeyField: 'userId',
+        // 1:1 profile: full on READ
+        contextPolicy: {
+            objectMode: ContextPolicy_ObjectMode.FULL,
+            operationOverrides: {
+                [CoreResourceOperation.READ]: { objectMode: ContextPolicy_ObjectMode.FULL },
+            }
+        }
+    }),
+    createResourcesRelationship(CoreResourceType.USER_SELF, CoreResourceType.USER_SELF_PREFERENCES, ResourceRelationshipCardinality.ONE, ResourceRelationshipCardinality.ONE, {
+        isPrimaryScope: true,
+        nature: RelationshipNature.COMPOSITION,
+        childOperations: { lifecycle: { onParentDelete: { enabled: true, mode: ChildLifecycleMode.IMMEDIATE, maxDepth: 1 } } },
+        foreignKeyField: 'userId',
+        // 1:1 preferences: full on READ
+        contextPolicy: {
+            objectMode: ContextPolicy_ObjectMode.SUMMARY,
+            operationOverrides: {
+                [CoreResourceOperation.READ]: { objectMode: ContextPolicy_ObjectMode.FULL },
+            }
+        }
+    }),
+    // User Self → Organization Members (for context fetching organizationMembers)
+    // 1:MANY - user can have multiple organization memberships
+    createResourcesRelationship(CoreResourceType.USER_SELF, CoreResourceType.ORGANIZATION_MEMBERS, ResourceRelationshipCardinality.ONE, ResourceRelationshipCardinality.MANY, {
+        isPrimaryScope: false, // Not primary scope - ORGANIZATION_MEMBERS has ORGANIZATIONS as primary
+        nature: RelationshipNature.REFERENCE,
+        foreignKeyField: 'userId',
+        // For context: fetch full on READ, disabled otherwise (performance)
+        contextPolicy: {
+            objectMode: ContextPolicy_ObjectMode.FULL,
+            operationOverrides: {
+                [CoreResourceOperation.LIST]: { enabled: false },
+                [CoreResourceOperation.SEARCH]: { enabled: false },
+            }
+        }
+    }),
+    // Organization member join table relationships - explicit for URL generation
+    // Note: Removed USERS → ORGANIZATION_MEMBERS to simplify user URL generation
+    // Users should primarily be accessed standalone or via application context
+    // Organization 1:1 and 1:many relationships
+    createResourcesRelationship(CoreResourceType.ORGANIZATIONS, CoreResourceType.ORGANIZATION_UNITS, ResourceRelationshipCardinality.ONE, ResourceRelationshipCardinality.MANY, {
+        isPrimaryScope: true,
+        nature: RelationshipNature.COMPOSITION,
+        childOperations: { lifecycle: { onParentDelete: { enabled: true, mode: ChildLifecycleMode.IMMEDIATE, maxDepth: 1 } } },
+        // High cardinality: disable on LIST/SEARCH for performance
+        contextPolicy: {
+            operationOverrides: {
+                [CoreResourceOperation.LIST]: { enabled: false },
+                [CoreResourceOperation.SEARCH]: { enabled: false },
+            }
+        }
+    }),
+    // Self-referential: parent unit → child units (tree structure).
+    // parentResourceRequirement=OPTIONAL because tree roots have no parent.
+    // accessScopeStrategy=OPTIONAL_CONTEXT generates both standalone and nested URLs.
+    // `allowCycle: true` is only the schema-level escape hatch for declaring a
+    // self-edge. The business model is still an acyclic hierarchy; re-parenting
+    // is handled explicitly via the MOVE operation on organization units.
+    createResourcesRelationship(CoreResourceType.ORGANIZATION_UNITS, CoreResourceType.ORGANIZATION_UNITS, ResourceRelationshipCardinality.ONE, ResourceRelationshipCardinality.MANY, {
+        nature: RelationshipNature.COMPOSITION,
+        foreignKeyField: 'parentUnitId',
+        allowCycle: true,
+        parentResourceRequirement: ResourceParentResourceRequirement.OPTIONAL,
+        accessScopeStrategy: ResourceRelationshipAccessScopeStrategy.OPTIONAL_CONTEXT,
+        contextPolicy: { enabled: false },
+    }),
+    createResourcesRelationship(CoreResourceType.ORGANIZATIONS, CoreResourceType.ORGANIZATION_PROFILES, ResourceRelationshipCardinality.ONE, ResourceRelationshipCardinality.ONE, {
+        isPrimaryScope: true,
+        nature: RelationshipNature.COMPOSITION,
+        childOperations: { lifecycle: { onParentDelete: { enabled: true, mode: ChildLifecycleMode.IMMEDIATE, maxDepth: 1 } } },
+        foreignKeyField: 'organizationId',
+        // 1:1 profile: full on READ
+        contextPolicy: {
+            objectMode: ContextPolicy_ObjectMode.SUMMARY,
+            operationOverrides: {
+                [CoreResourceOperation.READ]: { objectMode: ContextPolicy_ObjectMode.FULL },
+            }
+        }
+    }),
+    createResourcesRelationship(CoreResourceType.ORGANIZATIONS, CoreResourceType.ORGANIZATION_PREFERENCES, ResourceRelationshipCardinality.ONE, ResourceRelationshipCardinality.ONE, {
+        isPrimaryScope: true,
+        nature: RelationshipNature.COMPOSITION,
+        childOperations: { lifecycle: { onParentDelete: { enabled: true, mode: ChildLifecycleMode.IMMEDIATE, maxDepth: 1 } } },
+        foreignKeyField: 'organizationId',
+        // 1:1 preferences: full on READ
+        contextPolicy: {
+            objectMode: ContextPolicy_ObjectMode.SUMMARY,
+            operationOverrides: {
+                [CoreResourceOperation.READ]: { objectMode: ContextPolicy_ObjectMode.FULL },
+            }
+        }
+    }),
+    createResourcesRelationship(CoreResourceType.ORGANIZATIONS, CoreResourceType.ORGANIZATION_NOTIFICATIONS, ResourceRelationshipCardinality.ONE, ResourceRelationshipCardinality.ONE, {
+        isPrimaryScope: true,
+        nature: RelationshipNature.COMPOSITION,
+        childOperations: { lifecycle: { onParentDelete: { enabled: true, mode: ChildLifecycleMode.IMMEDIATE, maxDepth: 1 } } },
+        foreignKeyField: 'organizationId',
+        // Notifications are ephemeral - disable context
+        contextPolicy: { enabled: false }
+    }),
+    createResourcesRelationship(CoreResourceType.ORGANIZATIONS, CoreResourceType.ORGANIZATION_FEATURES, ResourceRelationshipCardinality.ONE, ResourceRelationshipCardinality.MANY, {
+        isPrimaryScope: true,
+        nature: RelationshipNature.COMPOSITION,
+        childOperations: { lifecycle: { onParentDelete: { enabled: true, mode: ChildLifecycleMode.IMMEDIATE, maxDepth: 1 } } },
+        // Features: summary by default
+        contextPolicy: {
+            objectMode: ContextPolicy_ObjectMode.SUMMARY,
+        }
+    }),
+    createResourcesRelationship(CoreResourceType.ORGANIZATIONS, CoreResourceType.ORGANIZATION_MEMBER_INVITATIONS, ResourceRelationshipCardinality.ONE, ResourceRelationshipCardinality.MANY, {
+        isPrimaryScope: true,
+        nature: RelationshipNature.COMPOSITION,
+        childOperations: { lifecycle: { onParentDelete: { enabled: true, mode: ChildLifecycleMode.IMMEDIATE, maxDepth: 1 } } },
+        // High cardinality: disable on LIST/SEARCH for performance
+        contextPolicy: {
+            operationOverrides: {
+                [CoreResourceOperation.LIST]: { enabled: false },
+                [CoreResourceOperation.SEARCH]: { enabled: false },
+            }
+        }
+    }),
+    createResourcesRelationship(CoreResourceType.APPLICATION, CoreResourceType.APPLICATION_METADATA, ResourceRelationshipCardinality.ONE, ResourceRelationshipCardinality.ONE, {
+        isPrimaryScope: true,
+        nature: RelationshipNature.COMPOSITION,
+        childOperations: { lifecycle: { onParentDelete: { enabled: true, mode: ChildLifecycleMode.IMMEDIATE, maxDepth: 1 } } },
+        foreignKeyField: 'appId',
+        // 1:1 metadata: full on READ
+        contextPolicy: {
+            objectMode: ContextPolicy_ObjectMode.SUMMARY,
+            operationOverrides: {
+                [CoreResourceOperation.READ]: { objectMode: ContextPolicy_ObjectMode.FULL },
+            }
+        }
+    }),
+    createResourcesRelationship(CoreResourceType.APPLICATION, CoreResourceType.APPLICATION_VERSIONS, ResourceRelationshipCardinality.ONE, ResourceRelationshipCardinality.MANY, {
+        isPrimaryScope: true,
+        nature: RelationshipNature.COMPOSITION,
+        childOperations: { lifecycle: { onParentDelete: { enabled: true, mode: ChildLifecycleMode.IMMEDIATE, maxDepth: 1 } } },
+        foreignKeyField: 'appId',
+        // High cardinality over time: disable on LIST/SEARCH
+        contextPolicy: {
+            operationOverrides: {
+                [CoreResourceOperation.LIST]: { enabled: false },
+                [CoreResourceOperation.SEARCH]: { enabled: false },
+            }
+        }
+    }),
+    // API Keys relationships
+    createResourcesRelationship(CoreResourceType.ORGANIZATIONS, CoreResourceType.ORG_API_KEYS, ResourceRelationshipCardinality.ONE, ResourceRelationshipCardinality.MANY, {
+        isPrimaryScope: true,
+        nature: RelationshipNature.COMPOSITION,
+        childOperations: { lifecycle: { onParentDelete: { enabled: true, mode: ChildLifecycleMode.IMMEDIATE, maxDepth: 1 } } },
+        // SECURITY: API keys should never be fetched via context
+        contextPolicy: { enabled: false }
+    }),
+    createResourcesRelationship(CoreResourceType.APPLICATION, CoreResourceType.APPLICATION_API_KEYS, ResourceRelationshipCardinality.ONE, ResourceRelationshipCardinality.MANY, {
+        isPrimaryScope: true,
+        nature: RelationshipNature.COMPOSITION,
+        childOperations: { lifecycle: { onParentDelete: { enabled: true, mode: ChildLifecycleMode.IMMEDIATE, maxDepth: 1 } } },
+        // SECURITY: API keys should never be fetched via context
+        contextPolicy: { enabled: false }
+    }),
+    // Audit Logs - System resource
+    createResourcesRelationship(CoreResourceType.APPLICATION, CoreResourceType.AUDIT_LOGS, ResourceRelationshipCardinality.ONE, ResourceRelationshipCardinality.MANY, {
+        accessScopeStrategy: ResourceRelationshipAccessScopeStrategy.STANDALONE,
+        nature: RelationshipNature.REFERENCE,
+        contextPolicy: { enabled: false }
+    }),
+    // Step 19D: Changed from STANDALONE to REQUIRES_CONTEXT for org-scoped Audit Log Viewer
+    createResourcesRelationship(CoreResourceType.ORGANIZATIONS, CoreResourceType.AUDIT_LOGS, ResourceRelationshipCardinality.ONE, ResourceRelationshipCardinality.MANY, {
+        isPrimaryScope: true,
+        foreignKeyField: 'organizationId',
+        nature: RelationshipNature.REFERENCE,
+        childOperations: {
+            lifecycle: { onParentDelete: { enabled: false } },
+        },
+        contextPolicy: {
+            operationOverrides: {
+                [CoreResourceOperation.LIST]: { enabled: false },
+                [CoreResourceOperation.SEARCH]: { enabled: false },
+            },
+        },
+    }),
+    createResourcesRelationship(CoreResourceType.USERS, CoreResourceType.AUDIT_LOGS, ResourceRelationshipCardinality.ONE, ResourceRelationshipCardinality.MANY, {
+        accessScopeStrategy: ResourceRelationshipAccessScopeStrategy.STANDALONE,
+        nature: RelationshipNature.REFERENCE,
+        contextPolicy: { enabled: false }
+    }),
+    // Notification Badges - System resource, accessed internally via NotificationBadgeBackendService
+    // Badges are scoped to different parent resources (users, organizations, application)
+    createResourcesRelationship(CoreResourceType.USERS, CoreResourceType.NOTIFICATION_BADGES, ResourceRelationshipCardinality.ONE, ResourceRelationshipCardinality.MANY, {
+        accessScopeStrategy: ResourceRelationshipAccessScopeStrategy.STANDALONE,
+        nature: RelationshipNature.COMPOSITION,
+        childOperations: { lifecycle: { onParentDelete: { enabled: true, mode: ChildLifecycleMode.IMMEDIATE, maxDepth: 1 } } },
+        // Notifications: ephemeral, accessed via dedicated service
+        contextPolicy: { enabled: false }
+    }),
+    createResourcesRelationship(CoreResourceType.ORGANIZATIONS, CoreResourceType.NOTIFICATION_BADGES, ResourceRelationshipCardinality.ONE, ResourceRelationshipCardinality.MANY, {
+        accessScopeStrategy: ResourceRelationshipAccessScopeStrategy.STANDALONE,
+        nature: RelationshipNature.COMPOSITION,
+        childOperations: { lifecycle: { onParentDelete: { enabled: true, mode: ChildLifecycleMode.IMMEDIATE, maxDepth: 1 } } },
+        // Notifications: ephemeral, accessed via dedicated service
+        contextPolicy: { enabled: false }
+    }),
+    createResourcesRelationship(CoreResourceType.APPLICATION, CoreResourceType.NOTIFICATION_BADGES, ResourceRelationshipCardinality.ONE, ResourceRelationshipCardinality.MANY, {
+        accessScopeStrategy: ResourceRelationshipAccessScopeStrategy.STANDALONE,
+        nature: RelationshipNature.COMPOSITION,
+        childOperations: { lifecycle: { onParentDelete: { enabled: true, mode: ChildLifecycleMode.IMMEDIATE, maxDepth: 1 } } },
+        // Notifications: ephemeral, accessed via dedicated service
+        contextPolicy: { enabled: false }
+    }),
+    // Queue System Resources - Internal infrastructure for job tracking and payload storage
+    // NOTE: These are INTERNAL resources, not exposed via API URLs.
+    // isPrimaryScope is NOT set (would conflict with STANDALONE strategy).
+    // Access is exclusively via repository services with INTERNAL variants.
+    createResourcesRelationship(CoreResourceType.APPLICATION, CoreResourceType.JOB_EXECUTIONS, ResourceRelationshipCardinality.ONE, ResourceRelationshipCardinality.MANY, {
+        accessScopeStrategy: ResourceRelationshipAccessScopeStrategy.STANDALONE,
+        nature: RelationshipNature.REFERENCE,
+        // Internal resource: never fetch via context, accessed via dedicated services
+        contextPolicy: { enabled: false }
+    }),
+    createResourcesRelationship(CoreResourceType.APPLICATION, CoreResourceType.JOB_PAYLOAD_STORAGE, ResourceRelationshipCardinality.ONE, ResourceRelationshipCardinality.MANY, {
+        accessScopeStrategy: ResourceRelationshipAccessScopeStrategy.STANDALONE,
+        nature: RelationshipNature.REFERENCE,
+        // Internal resource: never fetch via context, accessed via dedicated services
+        contextPolicy: { enabled: false }
+    }),
+    // ─── Email Template Relationships ───────────────────────────────
+    // EMAIL_TEMPLATES are APPLICATION-scoped (standalone, managed via lifecycle-api)
+    // Note: Standalone resources cannot have isPrimaryScope=true (they are accessed independently)
+    createResourcesRelationship(CoreResourceType.APPLICATION, CoreResourceType.EMAIL_TEMPLATES, ResourceRelationshipCardinality.ONE, ResourceRelationshipCardinality.MANY, {
+        // isPrimaryScope removed: STANDALONE access strategy means no parent scope in URL
+        accessScopeStrategy: ResourceRelationshipAccessScopeStrategy.STANDALONE,
+        nature: RelationshipNature.REFERENCE,
+        // Email templates: never fetch via context, accessed via dedicated services
+        contextPolicy: { enabled: false }
+    }),
+    // EMAIL_HEADER_FOOTER_TEMPLATES → APPLICATION
+    // Note: Standalone resources cannot have isPrimaryScope=true (they are accessed independently)
+    createResourcesRelationship(CoreResourceType.APPLICATION, CoreResourceType.EMAIL_HEADER_FOOTER_TEMPLATES, ResourceRelationshipCardinality.ONE, ResourceRelationshipCardinality.MANY, {
+        // isPrimaryScope removed: STANDALONE access strategy means no parent scope in URL
+        accessScopeStrategy: ResourceRelationshipAccessScopeStrategy.STANDALONE,
+        nature: RelationshipNature.REFERENCE,
+        // Header/footer templates: never fetch via context, accessed via dedicated services
+        contextPolicy: { enabled: false }
+    }),
+    // EMAIL_HEADER_FOOTER_TEMPLATES can optionally be nested under ORGANIZATIONS (for overrides)
+    createResourcesRelationship(CoreResourceType.ORGANIZATIONS, CoreResourceType.EMAIL_HEADER_FOOTER_TEMPLATES, ResourceRelationshipCardinality.ONE, ResourceRelationshipCardinality.MANY, {
+        isPrimaryScope: false, // Not primary - org override path
+        accessScopeStrategy: ResourceRelationshipAccessScopeStrategy.STANDALONE,
+        nature: RelationshipNature.REFERENCE,
+        // Org-scoped header/footer: accessed via dedicated services
+        contextPolicy: { enabled: false }
+    }),
+    // ── Billing Relationships (Polymorphic) ─────────────────────────────
+    // Scope → BillingAccounts (isPrimaryScope: true, 2 variants)
+    // ORGANIZATIONS → organizationBillingAccounts
+    // USERS → userBillingAccounts
+    ...createPolymorphicScopeRelationships(billingAccountsPolymorphicDeclaration, {
+        nature: RelationshipNature.COMPOSITION,
+        childOperations: { lifecycle: { onParentDelete: { enabled: true, mode: ChildLifecycleMode.IMMEDIATE, maxDepth: 1 } } },
+    }),
+    // Scope → Subscriptions (isPrimaryScope: true, 2 variants)
+    // ORGANIZATIONS → organizationSubscriptions
+    // USERS → userSubscriptions
+    ...createPolymorphicScopeRelationships(billingSubscriptionsPolymorphicDeclaration, {
+        nature: RelationshipNature.COMPOSITION,
+        childOperations: { lifecycle: { onParentDelete: { enabled: true, mode: ChildLifecycleMode.IMMEDIATE, maxDepth: 1 } } },
+    }),
+    // BillingAccounts → Subscriptions (variant-matched, 1:N)
+    // organizationBillingAccounts → organizationSubscriptions
+    // userBillingAccounts → userSubscriptions
+    ...createPolymorphicRelationships(billingAccountsPolymorphicDeclaration, billingSubscriptionsPolymorphicDeclaration, ResourceRelationshipCardinality.ONE, ResourceRelationshipCardinality.MANY, {
+        nature: RelationshipNature.COMPOSITION,
+        childOperations: { lifecycle: { onParentDelete: { enabled: true, mode: ChildLifecycleMode.IMMEDIATE, maxDepth: 1 } } },
+        contextPolicy: {},
+    }),
+    // ── Polymorphic Billing Children ─────────────────────────────────────
+    // Invoice Refs — scope relationships (2 variants)
+    ...createPolymorphicScopeRelationships(invoiceRefsPolymorphicDeclaration, {
+        nature: RelationshipNature.COMPOSITION,
+        childOperations: { lifecycle: { onParentDelete: { enabled: true, mode: ChildLifecycleMode.IMMEDIATE, maxDepth: 1 } } },
+    }),
+    // BillingAccounts → InvoiceRefs (variant-matched, 1:N)
+    ...createPolymorphicRelationships(billingAccountsPolymorphicDeclaration, invoiceRefsPolymorphicDeclaration, ResourceRelationshipCardinality.ONE, ResourceRelationshipCardinality.MANY, {
+        nature: RelationshipNature.COMPOSITION,
+        childOperations: { lifecycle: { onParentDelete: { enabled: true, mode: ChildLifecycleMode.IMMEDIATE, maxDepth: 1 } } },
+        contextPolicy: {},
+    }),
+    // Usage Records — scope relationships (3 variants)
+    ...createPolymorphicScopeRelationships(usageRecordsPolymorphicDeclaration, {
+        nature: RelationshipNature.COMPOSITION,
+        childOperations: { lifecycle: { onParentDelete: { enabled: true, mode: ChildLifecycleMode.IMMEDIATE, maxDepth: 1 } } },
+    }),
+    // BillingAccounts → UsageRecords (variant-matched, 1:N)
+    ...createPolymorphicRelationships(billingAccountsPolymorphicDeclaration, usageRecordsPolymorphicDeclaration, ResourceRelationshipCardinality.ONE, ResourceRelationshipCardinality.MANY, {
+        nature: RelationshipNature.COMPOSITION,
+        childOperations: { lifecycle: { onParentDelete: { enabled: true, mode: ChildLifecycleMode.IMMEDIATE, maxDepth: 1 } } },
+        contextPolicy: { enabled: false },
+    }),
+    // Credit Pools — scope relationships (3 variants)
+    ...createPolymorphicScopeRelationships(creditPoolsPolymorphicDeclaration, {
+        nature: RelationshipNature.COMPOSITION,
+        childOperations: { lifecycle: { onParentDelete: { enabled: true, mode: ChildLifecycleMode.IMMEDIATE, maxDepth: 1 } } },
+    }),
+    // BillingAccounts → CreditPools (variant-matched, 1:N)
+    ...createPolymorphicRelationships(billingAccountsPolymorphicDeclaration, creditPoolsPolymorphicDeclaration, ResourceRelationshipCardinality.ONE, ResourceRelationshipCardinality.MANY, {
+        nature: RelationshipNature.COMPOSITION,
+        childOperations: { lifecycle: { onParentDelete: { enabled: true, mode: ChildLifecycleMode.IMMEDIATE, maxDepth: 1 } } },
+        contextPolicy: {},
+    }),
+    // Referrals keep shared FK field names (`referrerBillingAccountId`, `referredBillingAccountId`)
+    // instead of polymorphic per-variant field expansion, so their billing-account links must
+    // be declared explicitly for registry FK resolution and nested relationship semantics.
+    createResourcesRelationship(CoreResourceType.USER_BILLING_ACCOUNTS, CoreResourceType.REFERRALS, ResourceRelationshipCardinality.ONE, ResourceRelationshipCardinality.MANY, {
+        accessScopeStrategy: ResourceRelationshipAccessScopeStrategy.STANDALONE,
+        nature: RelationshipNature.REFERENCE,
+        foreignKeyField: 'referrerBillingAccountId',
+        parentResourceRequirement: ResourceParentResourceRequirement.MANDATORY,
+        contextPolicy: { enabled: false },
+    }),
+    createResourcesRelationship(CoreResourceType.USER_BILLING_ACCOUNTS, CoreResourceType.REFERRALS, ResourceRelationshipCardinality.ONE, ResourceRelationshipCardinality.MANY, {
+        accessScopeStrategy: ResourceRelationshipAccessScopeStrategy.STANDALONE,
+        nature: RelationshipNature.REFERENCE,
+        foreignKeyField: 'referredBillingAccountId',
+        parentResourceRequirement: ResourceParentResourceRequirement.OPTIONAL,
+        contextPolicy: { enabled: false },
+    }),
+    createResourcesRelationship(CoreResourceType.ORGANIZATION_BILLING_ACCOUNTS, CoreResourceType.REFERRALS, ResourceRelationshipCardinality.ONE, ResourceRelationshipCardinality.MANY, {
+        accessScopeStrategy: ResourceRelationshipAccessScopeStrategy.STANDALONE,
+        nature: RelationshipNature.REFERENCE,
+        foreignKeyField: 'referrerBillingAccountId',
+        parentResourceRequirement: ResourceParentResourceRequirement.MANDATORY,
+        contextPolicy: { enabled: false },
+    }),
+    createResourcesRelationship(CoreResourceType.ORGANIZATION_BILLING_ACCOUNTS, CoreResourceType.REFERRALS, ResourceRelationshipCardinality.ONE, ResourceRelationshipCardinality.MANY, {
+        accessScopeStrategy: ResourceRelationshipAccessScopeStrategy.STANDALONE,
+        nature: RelationshipNature.REFERENCE,
+        foreignKeyField: 'referredBillingAccountId',
+        parentResourceRequirement: ResourceParentResourceRequirement.OPTIONAL,
+        contextPolicy: { enabled: false },
+    }),
+    // ── Non-Polymorphic Billing Relationships ────────────────────────────
+    // Products → Prices (1:N, cascade delete)
+    createResourcesRelationship(CoreResourceType.PRODUCTS, CoreResourceType.PRICES, ResourceRelationshipCardinality.ONE, ResourceRelationshipCardinality.MANY, {
+        nature: RelationshipNature.COMPOSITION,
+        childOperations: { lifecycle: { onParentDelete: { enabled: true, mode: ChildLifecycleMode.IMMEDIATE, maxDepth: 1 } } },
+        contextPolicy: {},
+    }),
+    // ── Guidance State Relationships (Tri-Scope) ─────────────────────────
+    // Each scope entity has 1:1 guidance state — system resource, standalone access
+    createResourcesRelationship(CoreResourceType.USERS, CoreResourceType.USER_GUIDANCE_STATE, ResourceRelationshipCardinality.ONE, ResourceRelationshipCardinality.ONE, {
+        isPrimaryScope: true,
+        foreignKeyField: 'userId',
+        nature: RelationshipNature.COMPOSITION,
+        contextPolicy: { enabled: false }
+    }),
+    createResourcesRelationship(CoreResourceType.ORGANIZATIONS, CoreResourceType.ORGANIZATION_GUIDANCE_STATE, ResourceRelationshipCardinality.ONE, ResourceRelationshipCardinality.ONE, {
+        isPrimaryScope: true,
+        foreignKeyField: 'organizationId',
+        nature: RelationshipNature.COMPOSITION,
+        contextPolicy: { enabled: false }
+    }),
+    // ── Progression State Relationships (Dual-Scope) ─────────────────────────
+    // Each scope entity has 1:1 progression state — system resource, standalone access
+    createResourcesRelationship(CoreResourceType.USERS, CoreResourceType.USER_PROGRESSION_STATE, ResourceRelationshipCardinality.ONE, ResourceRelationshipCardinality.ONE, {
+        isPrimaryScope: true,
+        foreignKeyField: 'userId',
+        nature: RelationshipNature.COMPOSITION,
+        contextPolicy: { enabled: false }
+    }),
+    createResourcesRelationship(CoreResourceType.ORGANIZATIONS, CoreResourceType.ORGANIZATION_PROGRESSION_STATE, ResourceRelationshipCardinality.ONE, ResourceRelationshipCardinality.ONE, {
+        isPrimaryScope: true,
+        foreignKeyField: 'organizationId',
+        nature: RelationshipNature.COMPOSITION,
+        contextPolicy: { enabled: false }
+    }),
+    // ── Lifecycle State Relationships (Dual-Scope) ─────────────────────────
+    // Each scope entity has 1:1 lifecycle state — system resource, standalone access
+    createResourcesRelationship(CoreResourceType.USERS, CoreResourceType.USER_LIFECYCLE_STATE, ResourceRelationshipCardinality.ONE, ResourceRelationshipCardinality.ONE, {
+        isPrimaryScope: true,
+        foreignKeyField: 'userId',
+        nature: RelationshipNature.COMPOSITION,
+        contextPolicy: { enabled: false }
+    }),
+    createResourcesRelationship(CoreResourceType.ORGANIZATIONS, CoreResourceType.ORGANIZATION_LIFECYCLE_STATE, ResourceRelationshipCardinality.ONE, ResourceRelationshipCardinality.ONE, {
+        isPrimaryScope: true,
+        foreignKeyField: 'organizationId',
+        nature: RelationshipNature.COMPOSITION,
+        contextPolicy: { enabled: false }
+    }),
+    // ── Auth Relationships (Polymorphic — Singletons: 1:1, Collections: 1:N) ──
+    // SSO Config — singleton (ONE per scope)
+    ...createPolymorphicScopeRelationships(ssoConfigPolymorphicDeclaration, {
+        childCardinality: ResourceRelationshipCardinality.ONE,
+        nature: RelationshipNature.COMPOSITION,
+        childOperations: { lifecycle: { onParentDelete: { enabled: true, mode: ChildLifecycleMode.IMMEDIATE, maxDepth: 1 } } },
+        contextPolicy: {
+            objectMode: ContextPolicy_ObjectMode.SUMMARY,
+            operationOverrides: {
+                [CoreResourceOperation.READ]: { objectMode: ContextPolicy_ObjectMode.FULL },
+            },
+        },
+    }),
+    // SSO Connections — collection (MANY per scope)
+    ...createPolymorphicScopeRelationships(ssoConnectionPolymorphicDeclaration, {
+        nature: RelationshipNature.COMPOSITION,
+        childOperations: { lifecycle: { onParentDelete: { enabled: true, mode: ChildLifecycleMode.IMMEDIATE, maxDepth: 1 } } },
+        contextPolicy: {
+            operationOverrides: {
+                [CoreResourceOperation.LIST]: { enabled: false },
+                [CoreResourceOperation.SEARCH]: { enabled: false },
+            },
+        },
+    }),
+    // Auth Policy — singleton (ONE per scope)
+    ...createPolymorphicScopeRelationships(authPolicyPolymorphicDeclaration, {
+        childCardinality: ResourceRelationshipCardinality.ONE,
+        nature: RelationshipNature.COMPOSITION,
+        childOperations: { lifecycle: { onParentDelete: { enabled: true, mode: ChildLifecycleMode.IMMEDIATE, maxDepth: 1 } } },
+        contextPolicy: {
+            objectMode: ContextPolicy_ObjectMode.SUMMARY,
+            operationOverrides: {
+                [CoreResourceOperation.READ]: { objectMode: ContextPolicy_ObjectMode.FULL },
+            },
+        },
+    }),
+    // SIEM Export Config — singleton (ONE per scope)
+    ...createPolymorphicScopeRelationships(siemExportConfigPolymorphicDeclaration, {
+        childCardinality: ResourceRelationshipCardinality.ONE,
+        nature: RelationshipNature.COMPOSITION,
+        childOperations: { lifecycle: { onParentDelete: { enabled: true, mode: ChildLifecycleMode.IMMEDIATE, maxDepth: 1 } } },
+        contextPolicy: {
+            objectMode: ContextPolicy_ObjectMode.SUMMARY,
+            operationOverrides: {
+                [CoreResourceOperation.READ]: { objectMode: ContextPolicy_ObjectMode.FULL },
+            },
+        },
+    }),
+    // SIEM Delivery DLQ — collection (MANY per scope)
+    ...createPolymorphicScopeRelationships(siemDeliveryDlqPolymorphicDeclaration, {
+        nature: RelationshipNature.COMPOSITION,
+        childOperations: { lifecycle: { onParentDelete: { enabled: true, mode: ChildLifecycleMode.IMMEDIATE, maxDepth: 1 } } },
+        contextPolicy: {
+            operationOverrides: {
+                [CoreResourceOperation.LIST]: { enabled: false },
+                [CoreResourceOperation.SEARCH]: { enabled: false },
+            },
+        },
+    }),
+    // SCIM Tokens — collection (MANY per scope)
+    ...createPolymorphicScopeRelationships(scimTokensPolymorphicDeclaration, {
+        nature: RelationshipNature.COMPOSITION,
+        childOperations: { lifecycle: { onParentDelete: { enabled: true, mode: ChildLifecycleMode.IMMEDIATE, maxDepth: 1 } } },
+        contextPolicy: {
+            objectMode: ContextPolicy_ObjectMode.SUMMARY,
+            operationOverrides: {
+                [CoreResourceOperation.READ]: { objectMode: ContextPolicy_ObjectMode.FULL },
+            },
+        },
+    }),
+    // SCIM Provisioning Config — singleton (ONE per scope)
+    ...createPolymorphicScopeRelationships(scimProvisioningConfigPolymorphicDeclaration, {
+        childCardinality: ResourceRelationshipCardinality.ONE,
+        nature: RelationshipNature.COMPOSITION,
+        childOperations: { lifecycle: { onParentDelete: { enabled: true, mode: ChildLifecycleMode.IMMEDIATE, maxDepth: 1 } } },
+        contextPolicy: {
+            objectMode: ContextPolicy_ObjectMode.SUMMARY,
+            operationOverrides: {
+                [CoreResourceOperation.READ]: { objectMode: ContextPolicy_ObjectMode.FULL },
+            },
+        },
+    }),
+];
+export const coreShared_ResourcesConfigurations_FactoryMap = {
+    [CoreResourceType.ORGANIZATIONS]: organizationResourceConfiguration_InitializationFactory,
+    [CoreResourceType.USERS]: usersResourceConfiguration_InitializationFactory,
+    [CoreResourceType.USER_CREDENTIALS]: userCredentialsResourceConfiguration_InitializationFactory,
+    [CoreResourceType.USER_SELF]: userSelfResourceConfiguration_InitializationFactory,
+    [CoreResourceType.USER_PROFILES]: userProfilesResourceConfiguration_InitializationFactory,
+    [CoreResourceType.USER_PREFERENCES]: userPreferencesResourceConfiguration_InitializationFactory,
+    [CoreResourceType.USER_SELF_PROFILES]: userSelfProfilesResourceConfiguration_InitializationFactory,
+    [CoreResourceType.USER_SELF_PREFERENCES]: userSelfPreferencesResourceConfiguration_InitializationFactory,
+    // Organization-related resources
+    [CoreResourceType.ORGANIZATION_UNITS]: organizationUnitResourceConfiguration_InitializationFactory,
+    [CoreResourceType.ORGANIZATION_PROFILES]: organizationProfileResourceConfiguration_InitializationFactory,
+    [CoreResourceType.ORGANIZATION_PREFERENCES]: organizationPreferencesResourceConfiguration_InitializationFactory,
+    [CoreResourceType.ORGANIZATION_NOTIFICATIONS]: organizationNotificationsResourceConfiguration_InitializationFactory,
+    [CoreResourceType.ORGANIZATION_FEATURES]: organizationFeaturesResourceConfiguration_InitializationFactory,
+    [CoreResourceType.USER_FEATURES]: userFeaturesResourceConfiguration_InitializationFactory,
+    [CoreResourceType.ORGANIZATION_MEMBERS]: organizationMembersResourceConfiguration_InitializationFactory,
+    [CoreResourceType.ORGANIZATION_MEMBER_INVITATIONS]: organizationMemberInvitationsResourceConfiguration_InitializationFactory,
+    // Application resources
+    [CoreResourceType.APPLICATION]: applicationResourceConfiguration_InitializationFactory,
+    [CoreResourceType.APPLICATION_METADATA]: applicationMetadataResourceConfiguration_InitializationFactory,
+    [CoreResourceType.APPLICATION_VERSIONS]: applicationVersionsResourceConfiguration_InitializationFactory,
+    // API Keys
+    [CoreResourceType.ORG_API_KEYS]: orgApiKeysResourceConfiguration_InitializationFactory,
+    [CoreResourceType.APPLICATION_API_KEYS]: appApiKeysResourceConfiguration_InitializationFactory,
+    // Billing resources — polymorphic variants (3 each for accounts & subscriptions)
+    ...billingAccountsPolymorphicFactories,
+    ...billingSubscriptionsPolymorphicFactories,
+    // Billing resources — non-polymorphic (shared catalog)
+    [CoreResourceType.PRODUCTS]: productsResourceConfiguration_InitializationFactory,
+    [CoreResourceType.PRICES]: pricesResourceConfiguration_InitializationFactory,
+    ...invoiceRefsPolymorphicFactories,
+    ...usageRecordsPolymorphicFactories,
+    ...creditPoolsPolymorphicFactories,
+    [CoreResourceType.PROMOTIONS]: promotionsResourceConfiguration_InitializationFactory,
+    [CoreResourceType.REFERRALS]: referralsResourceConfiguration_InitializationFactory,
+    // Audit and Compliance
+    [CoreResourceType.AUDIT_LOGS]: auditLogsResourceConfiguration_InitializationFactory,
+    // Notification Resources
+    [CoreResourceType.NOTIFICATION_BADGES]: notificationBadgesResourceConfiguration_InitializationFactory,
+    // File Management Resources
+    [CoreResourceType.FILES]: filesResourceConfiguration_InitializationFactory,
+    // Queue System Resources (internal infrastructure)
+    [CoreResourceType.JOB_EXECUTIONS]: jobExecution_ResourceConfiguration_InitializationFactory,
+    [CoreResourceType.JOB_PAYLOAD_STORAGE]: jobPayloadStorage_ResourceConfiguration_InitializationFactory,
+    // Email Resources
+    [CoreResourceType.EMAIL_TEMPLATES]: emailTemplateResourceConfiguration_InitializationFactory,
+    [CoreResourceType.EMAIL_HEADER_FOOTER_TEMPLATES]: emailHeaderFooterTemplateResourceConfiguration_InitializationFactory,
+    // Authentication Resources
+    [CoreResourceType.USER_IDENTITY_LINKS]: userIdentityLinksResourceConfiguration_InitializationFactory,
+    // Anonymous Session Resources (W7.3a)
+    [CoreResourceType.ANONYMOUS_USERS]: anonymousUsersResourceConfiguration_InitializationFactory,
+    // Guidance State Resources
+    [CoreResourceType.USER_GUIDANCE_STATE]: userGuidanceStateResourceConfiguration_InitializationFactory,
+    [CoreResourceType.ORGANIZATION_GUIDANCE_STATE]: organizationGuidanceStateResourceConfiguration_InitializationFactory,
+    // Progression State Resources
+    [CoreResourceType.USER_PROGRESSION_STATE]: userProgressionStateResourceConfiguration_InitializationFactory,
+    [CoreResourceType.ORGANIZATION_PROGRESSION_STATE]: organizationProgressionStateResourceConfiguration_InitializationFactory,
+    // Lifecycle State Resources
+    [CoreResourceType.USER_LIFECYCLE_STATE]: userLifecycleStateResourceConfiguration_InitializationFactory,
+    [CoreResourceType.ORGANIZATION_LIFECYCLE_STATE]: organizationLifecycleStateResourceConfiguration_InitializationFactory,
+    // Auth Resources — polymorphic variants (SSO + SIEM + SCIM, 7 × 2 = 14 entries)
+    ...ssoConfigPolymorphicFactories,
+    ...ssoConnectionPolymorphicFactories,
+    ...authPolicyPolymorphicFactories,
+    ...siemExportConfigPolymorphicFactories,
+    ...siemDeliveryDlqPolymorphicFactories,
+    ...scimTokensPolymorphicFactories,
+    ...scimProvisioningConfigPolymorphicFactories,
+};
+//# sourceMappingURL=resources-registry.shared.core.definitions.js.map