@wildo-ai/saas-models 1.1.5 → 1.1.7

package/dist/esm/resources/resources-registry.shared.core.definitions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resources-registry.shared.core.definitions.d.ts","sourceRoot":"","sources":["../../../../src/resources/resources-registry.shared.core.definitions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAsB,oBAAoB,EAA+G,MAAM,4BAA4B,CAAC;AAKnM,OAAO,EAAE,gBAAgB,EAAgB,MAAM,qCAAqC,CAAC;AACrF,OAAO,EAA+C,8CAA8C,EAAE,MAAM,mCAAmC,CAAC;AAmHhJ,eAAO,MAAM,8BAA8B,EAAG,oBAAoB,EA08DjE,CAAC;AAEF,eAAO,MAAM,6CAA6C,EAAE,8CAA8C,CAAC,gBAAgB,CA+G1H,CAAC"}
+{"version":3,"file":"resources-registry.shared.core.definitions.d.ts","sourceRoot":"","sources":["../../../src/resources/resources-registry.shared.core.definitions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAsB,oBAAoB,EAA+G,MAAM,4BAA4B,CAAC;AAKnM,OAAO,EAAE,gBAAgB,EAAgB,MAAM,qCAAqC,CAAC;AACrF,OAAO,EAA+C,8CAA8C,EAAE,MAAM,mCAAmC,CAAC;AAsJhJ,eAAO,MAAM,8BAA8B,EAAG,oBAAoB,EA+3EjE,CAAC;AAEF,eAAO,MAAM,6CAA6C,EAAE,8CAA8C,CAAC,gBAAgB,CAyI1H,CAAC"}

package/dist/esm/resources/resources-registry.shared.core.definitions.js

@@ -23,6 +23,10 @@ import { organizationPreferencesResourceConfiguration_InitializationFactory } fr
 import { applicationAccessGrantsResourceConfiguration_InitializationFactory } from '../security/authorizations/application-access-grants.shared.resources-config.schemas.js';
 import { systemOfRecordPartitionAssignmentsResourceConfiguration_InitializationFactory } from '../systems-of-record/system-of-record-partition-assignments.shared.resources-config.schemas.js';
 import { platformAccessGrantsResourceConfiguration_InitializationFactory } from '../security/authorizations/platform-access-grants.shared.resources-config.schemas.js';
+import { legalHoldsResourceConfiguration_InitializationFactory } from '../compliance/privacy/legal-holds.shared.resources-config.schemas.js';
+import { serviceEngagementAssignmentsResourceConfiguration_InitializationFactory, serviceEngagementsResourceConfiguration_InitializationFactory, serviceProviderRelationshipsResourceConfiguration_InitializationFactory, } from '../organizations/service-provider-relationships.shared.resources-config.schemas.js';
+import { serviceProviderActivityFeedResourceConfiguration_InitializationFactory, serviceProviderActivityFeedSettingsResourceConfiguration_InitializationFactory, } from '../organizations/service-provider-activity-feed.shared.resources-config.schemas.js';
+import { serviceProviderCapabilityGrantsResourceConfiguration_InitializationFactory } from '../organizations/service-provider-capability-grants.shared.resources-config.schemas.js';
 import { organizationNotificationsResourceConfiguration_InitializationFactory } from "../organizations/organization-notifications.shared.resources-config.schemas.js";
 import { organizationFeaturesResourceConfiguration_InitializationFactory } from "../organizations/organization-features.shared.resources-config.schemas.js";
 import { userFeaturesResourceConfiguration_InitializationFactory } from "../features/user-features.shared.resources-config.schemas.js";
@@ -57,6 +61,11 @@ import { applicationMetadataResourceConfiguration_InitializationFactory } from "
 // Queue system resources
 import { jobExecution_ResourceConfiguration_InitializationFactory, jobPayloadStorage_ResourceConfiguration_InitializationFactory } from "../queue/jobs.shared.resources-config.schemas.js";
 import { providerCallRecordsResourceConfiguration_InitializationFactory } from "../flows-actors/provider-call-records.shared.resources-config.schemas.js";
+import { modelCallAttributionsResourceConfiguration_InitializationFactory } from "../flows-actors/model-call-attributions.shared.resources-config.schemas.js";
+import { modelCostPeriodAggregatesResourceConfiguration_InitializationFactory } from "../flows-actors/model-cost-period-aggregates.shared.resources-config.schemas.js";
+import { agentWorkCaptureSettingsResourceConfiguration_InitializationFactory, agentWorkDecisionContentsPolymorphicFactories, agentWorkDecisionsPolymorphicFactories, evaluationDatasetExportsResourceConfiguration_InitializationFactory, evaluationExportAuthorizationsResourceConfiguration_InitializationFactory, } from "../flows-actors/agent-work-decisions.shared.resources-config.schemas.js";
+import { agentWorkDecisionContentsPolymorphicDeclaration, agentWorkDecisionsPolymorphicDeclaration } from "../flows-actors/agent-work-decisions.shared.schemas.js";
+import { retentionEnforcementRecordsResourceConfiguration_InitializationFactory } from "../compliance/privacy/retention-enforcement-records.shared.resources-config.schemas.js";
 // Flows-Actors execution resource (persisted flow/actor system executions)
 import { flowActorExecutionsPolymorphicFactories } from "../flows-actors/flows-actors-execution.shared.resources-config.schemas.js";
 import { flowActorExecutionsPolymorphicDeclaration } from "../flows-actors/flows-actors-execution.shared.schemas.js";
@@ -90,6 +99,10 @@ import { webhookConfigPolymorphicFactories } from "../notifications/m2m/webhook-
 import { webhookConfigPolymorphicDeclaration } from "../notifications/m2m/webhook-config.shared.schemas.js";
 import { m2mWebhookDeliveryLogPolymorphicFactories } from "../notifications/m2m/m2m-webhook-delivery-log.shared.resources-config.schemas.js";
 import { m2mWebhookDeliveryLogPolymorphicDeclaration } from "../notifications/m2m/m2m-webhook-delivery-log.shared.schemas.js";
+import { inboundDeliveryPolymorphicFactories } from "../inbound/inbound-delivery.shared.resources-config.schemas.js";
+import { inboundDeliveryPolymorphicDeclaration } from "../inbound/inbound-delivery.shared.schemas.js";
+import { conversationMessagesResourceConfiguration_InitializationFactory, conversationReplyTokensResourceConfiguration_InitializationFactory, conversationThreadsResourceConfiguration_InitializationFactory, } from "../inbound/conversation-threads.shared.resources-config.schemas.js";
+import { clientMailboxesResourceConfiguration_InitializationFactory, inboundAddressTombstonesResourceConfiguration_InitializationFactory, inboundEmailsResourceConfiguration_InitializationFactory, organizationEmailDomainsResourceConfiguration_InitializationFactory, } from "../notifications/inbound-email/inbound-email.shared.resources-config.schemas.js";
 import { scimTokensPolymorphicFactories } from "../security/authentications/scim/scim-tokens.shared.resources-config.schemas.js";
 import { scimTokensPolymorphicDeclaration } from "../security/authentications/scim/scim-tokens.shared.schemas.js";
 import { scimProvisioningConfigPolymorphicFactories } from "../security/authentications/scim/scim-provisioning-config.shared.resources-config.schemas.js";
@@ -526,6 +539,121 @@ export const coreSharedResourceRelationship = [
         childOperations: { lifecycle: { onParentDelete: { enabled: true, mode: ChildLifecycleMode.IMMEDIATE, maxDepth: 1 } } },
         foreignKeyField: 'organizationId',
     }),
+    // ── LEGAL HOLDS (#1634) ──────────────────────────────────────────────
+    //
+    // Stored in the tenant it holds, so the tenant sees every hold on its data. REFERENCE with the teardown
+    // cascade DISABLED: a hold is the operator's defence evidence and outlives a purged tenant until its
+    // AUDIT_LOGS period (counted from release) ends. An ACTIVE hold stops the purge outright.
+    createResourcesRelationship(CoreResourceType.ORGANIZATIONS, CoreResourceType.LEGAL_HOLDS, ResourceRelationshipCardinality.ONE, ResourceRelationshipCardinality.MANY, {
+        isPrimaryScope: true,
+        nature: RelationshipNature.REFERENCE,
+        childOperations: { lifecycle: { onParentDelete: { enabled: false } } },
+        foreignKeyField: 'organizationId',
+    }),
+    // The three people a hold names. REFERENCE + STANDALONE, never a teardown: erasing the placer, the
+    // releaser or the held person leaves the hold exactly as it is (RETAINED_BY_DECLARATION).
+    ...['placedByUserId', 'releasedByUserId', 'subjectUserId'].map((foreignKeyField) => createResourcesRelationship(CoreResourceType.USERS, CoreResourceType.LEGAL_HOLDS, ResourceRelationshipCardinality.ONE, ResourceRelationshipCardinality.MANY, {
+        accessScopeStrategy: ResourceRelationshipAccessScopeStrategy.STANDALONE,
+        nature: RelationshipNature.REFERENCE,
+        foreignKeyField,
+        parentResourceRequirement: foreignKeyField === 'placedByUserId'
+            ? ResourceParentResourceRequirement.MANDATORY
+            : ResourceParentResourceRequirement.OPTIONAL,
+        childOperations: { lifecycle: { onParentDelete: { enabled: false } } },
+        contextPolicy: { enabled: false },
+    })),
+    // ── SERVICE-PROVIDER RELATIONSHIPS (#1597) ──────────────────────────
+    //
+    // Three COMPOSITION children, each of the organization it is stored in: the relationship of the
+    // CLIENT (the party that controls it), the engagement mirror and the assignments of the FIRM. The
+    // other tenant is named by a plain id on each row and never by an edge — a navigable relationship
+    // from one tenant's row into another tenant is exactly what this model refuses to create.
+    // Purged with their organization; never seeded on create.
+    createResourcesRelationship(CoreResourceType.ORGANIZATIONS, CoreResourceType.SERVICE_PROVIDER_RELATIONSHIPS, ResourceRelationshipCardinality.ONE, ResourceRelationshipCardinality.MANY, {
+        isPrimaryScope: true,
+        nature: RelationshipNature.COMPOSITION,
+        childOperations: { lifecycle: { onParentDelete: { enabled: true, mode: ChildLifecycleMode.IMMEDIATE, maxDepth: 1 } } },
+        foreignKeyField: 'organizationId',
+    }),
+    createResourcesRelationship(CoreResourceType.ORGANIZATIONS, CoreResourceType.SERVICE_ENGAGEMENTS, ResourceRelationshipCardinality.ONE, ResourceRelationshipCardinality.MANY, {
+        isPrimaryScope: true,
+        nature: RelationshipNature.COMPOSITION,
+        childOperations: { lifecycle: { onParentDelete: { enabled: true, mode: ChildLifecycleMode.IMMEDIATE, maxDepth: 1 } } },
+        foreignKeyField: 'organizationId',
+    }),
+    createResourcesRelationship(CoreResourceType.ORGANIZATIONS, CoreResourceType.SERVICE_ENGAGEMENT_ASSIGNMENTS, ResourceRelationshipCardinality.ONE, ResourceRelationshipCardinality.MANY, {
+        isPrimaryScope: true,
+        nature: RelationshipNature.COMPOSITION,
+        childOperations: { lifecycle: { onParentDelete: { enabled: true, mode: ChildLifecycleMode.IMMEDIATE, maxDepth: 1 } } },
+        foreignKeyField: 'organizationId',
+    }),
+    // The assignment's engagement is in the SAME (firm) tenant, so it is a real edge. REFERENCE +
+    // STANDALONE: an assignment is addressed under its organization, and ending an engagement ENDS its
+    // assignments (status) rather than deleting the evidence of who served the client.
+    createResourcesRelationship(CoreResourceType.SERVICE_ENGAGEMENTS, CoreResourceType.SERVICE_ENGAGEMENT_ASSIGNMENTS, ResourceRelationshipCardinality.ONE, ResourceRelationshipCardinality.MANY, {
+        accessScopeStrategy: ResourceRelationshipAccessScopeStrategy.STANDALONE,
+        nature: RelationshipNature.REFERENCE,
+        foreignKeyField: 'serviceEngagementId',
+        parentResourceRequirement: ResourceParentResourceRequirement.MANDATORY,
+        childOperations: { lifecycle: { onParentDelete: { enabled: false } } },
+        contextPolicy: { enabled: false },
+    }),
+    // The expert. REFERENCE + STANDALONE, copied from `USERS → PLATFORM_ACCESS_GRANTS`: addressed under
+    // the organization, never under the user.
+    createResourcesRelationship(CoreResourceType.USERS, CoreResourceType.SERVICE_ENGAGEMENT_ASSIGNMENTS, ResourceRelationshipCardinality.ONE, ResourceRelationshipCardinality.MANY, {
+        accessScopeStrategy: ResourceRelationshipAccessScopeStrategy.STANDALONE,
+        nature: RelationshipNature.REFERENCE,
+        foreignKeyField: 'userId',
+        parentResourceRequirement: ResourceParentResourceRequirement.MANDATORY,
+        childOperations: { lifecycle: { onParentDelete: { enabled: false } } },
+        contextPolicy: { enabled: false },
+    }),
+    // ── SERVICE-PROVIDER ACTIVITY FEED (#1632) ──────────────────────────
+    //
+    // Both stored in the PROVIDER organization it is about, and purged with it. The client an entry names is a
+    // plain id, never an edge, for the same reason as the relationship's. The expert is a REFERENCE + STANDALONE
+    // edge, like the assignment's: addressed under the organization, never under the user, and an erasure of the
+    // expert freezes their entries (RETAIN_ONLY) rather than deleting the firm's record.
+    createResourcesRelationship(CoreResourceType.ORGANIZATIONS, CoreResourceType.SERVICE_PROVIDER_ACTIVITY_FEED_SETTINGS, ResourceRelationshipCardinality.ONE, ResourceRelationshipCardinality.ONE, {
+        isPrimaryScope: true,
+        nature: RelationshipNature.COMPOSITION,
+        childOperations: { lifecycle: { onParentDelete: { enabled: true, mode: ChildLifecycleMode.IMMEDIATE, maxDepth: 1 } } },
+        foreignKeyField: 'organizationId',
+    }),
+    createResourcesRelationship(CoreResourceType.ORGANIZATIONS, CoreResourceType.SERVICE_PROVIDER_ACTIVITY_FEED, ResourceRelationshipCardinality.ONE, ResourceRelationshipCardinality.MANY, {
+        isPrimaryScope: true,
+        nature: RelationshipNature.COMPOSITION,
+        childOperations: { lifecycle: { onParentDelete: { enabled: true, mode: ChildLifecycleMode.IMMEDIATE, maxDepth: 1 } } },
+        foreignKeyField: 'organizationId',
+    }),
+    createResourcesRelationship(CoreResourceType.USERS, CoreResourceType.SERVICE_PROVIDER_ACTIVITY_FEED, ResourceRelationshipCardinality.ONE, ResourceRelationshipCardinality.MANY, {
+        accessScopeStrategy: ResourceRelationshipAccessScopeStrategy.STANDALONE,
+        nature: RelationshipNature.REFERENCE,
+        foreignKeyField: 'expertUserId',
+        parentResourceRequirement: ResourceParentResourceRequirement.MANDATORY,
+        childOperations: { lifecycle: { onParentDelete: { enabled: false } } },
+        contextPolicy: { enabled: false },
+    }),
+    // ── DELEGATED CAPABILITIES (#1631) ──────────────────────────────────
+    //
+    // A grant lives in the CLIENT organization that lends it, and is purged with it. Its relationship is in the SAME
+    // (client) tenant, so it is a real edge — REFERENCE + STANDALONE, like the assignment's engagement: a grant is
+    // addressed under its organization, and a relationship that ends REVOKES its grants (status) rather than
+    // deleting the evidence of what the firm could administer.
+    createResourcesRelationship(CoreResourceType.ORGANIZATIONS, CoreResourceType.SERVICE_PROVIDER_CAPABILITY_GRANTS, ResourceRelationshipCardinality.ONE, ResourceRelationshipCardinality.MANY, {
+        isPrimaryScope: true,
+        nature: RelationshipNature.COMPOSITION,
+        childOperations: { lifecycle: { onParentDelete: { enabled: true, mode: ChildLifecycleMode.IMMEDIATE, maxDepth: 1 } } },
+        foreignKeyField: 'organizationId',
+    }),
+    createResourcesRelationship(CoreResourceType.SERVICE_PROVIDER_RELATIONSHIPS, CoreResourceType.SERVICE_PROVIDER_CAPABILITY_GRANTS, ResourceRelationshipCardinality.ONE, ResourceRelationshipCardinality.MANY, {
+        accessScopeStrategy: ResourceRelationshipAccessScopeStrategy.STANDALONE,
+        nature: RelationshipNature.REFERENCE,
+        foreignKeyField: 'relationshipId',
+        parentResourceRequirement: ResourceParentResourceRequirement.MANDATORY,
+        childOperations: { lifecycle: { onParentDelete: { enabled: false } } },
+        contextPolicy: { enabled: false },
+    }),
     // ── APPLICATION-WIDE grants ──────────────────────────────────────────
     //
     // The APPLICATION-scoped sibling. Same lifecycle, no tenant: an elevation that reaches every
@@ -990,6 +1118,18 @@ export const coreSharedResourceRelationship = [
         nature: RelationshipNature.REFERENCE,
         contextPolicy: { enabled: false },
     }),
+    // Retention-enforcement records (#1636): application-wide, routed under the application for the
+    // administration console, and the SAME shape as the audit door above for the same reasons — the edge
+    // is an address (primary scope + REQUIRES_CONTEXT), OPTIONAL so the Mongo convertor accepts the column,
+    // and `contextPolicy` disabled because a record must never be fetched as ambient context.
+    createResourcesRelationship(CoreResourceType.APPLICATION, CoreResourceType.RETENTION_ENFORCEMENT_RECORDS, ResourceRelationshipCardinality.ONE, ResourceRelationshipCardinality.MANY, {
+        isPrimaryScope: true,
+        foreignKeyField: 'applicationId',
+        parentResourceRequirement: ResourceParentResourceRequirement.OPTIONAL,
+        accessScopeStrategy: ResourceRelationshipAccessScopeStrategy.REQUIRES_CONTEXT,
+        nature: RelationshipNature.REFERENCE,
+        contextPolicy: { enabled: false },
+    }),
     // ── Notification Badges (Dual-Scope Polymorphic) ─────────────────────
     // Each scope owns its own resource type and its own MongoDB collection.
     // Accessed internally via `NotificationBadgeBackendService`, which dispatches
@@ -1039,6 +1179,61 @@ export const coreSharedResourceRelationship = [
         nature: RelationshipNature.REFERENCE,
         contextPolicy: { enabled: false }
     }),
+    // Model-call attributions and model-cost period aggregates (#1598): application-primary and route-less,
+    // like the provider-call records above. Their organization edges are below, with the teardown decision.
+    createResourcesRelationship(CoreResourceType.APPLICATION, CoreResourceType.MODEL_CALL_ATTRIBUTIONS, ResourceRelationshipCardinality.ONE, ResourceRelationshipCardinality.MANY, {
+        accessScopeStrategy: ResourceRelationshipAccessScopeStrategy.STANDALONE,
+        isPrimaryScope: true,
+        nature: RelationshipNature.REFERENCE,
+        contextPolicy: { enabled: false }
+    }),
+    createResourcesRelationship(CoreResourceType.APPLICATION, CoreResourceType.MODEL_COST_PERIOD_AGGREGATES, ResourceRelationshipCardinality.ONE, ResourceRelationshipCardinality.MANY, {
+        // REQUIRES_CONTEXT, like the retention enforcement records: the billing flow reads and links
+        // aggregates at `/applications/{applicationId}/…`, and the per-row APPLICATION authorization compares
+        // the row's `applicationId` with that URL's. A STANDALONE edge gave the route no application, so
+        // every READ and `link_invoice` was refused, super-administrator included (#1598, found live).
+        isPrimaryScope: true,
+        foreignKeyField: 'applicationId',
+        /*
+         * MANDATORY, matching the schema: every row is written with the application's canonical id, and
+         * `applicationId` is required there. The edge used to say OPTIONAL (copying the retention-enforcement
+         * records, whose rows may lack one) while the schema kept it required, and the Mongo convertor refuses
+         * a relationship FK whose requiredness disagrees with its schema path — so on a Mongo-persisted platform
+         * INIT died on `zod_converter_schema_conversion_failed` (framework 1.1.6, first fresh `wildo local dev`).
+         * PostgreSQL keeps the schema's own nullability for an authored FK, so its plan does not change.
+         */
+        parentResourceRequirement: ResourceParentResourceRequirement.MANDATORY,
+        accessScopeStrategy: ResourceRelationshipAccessScopeStrategy.REQUIRES_CONTEXT,
+        nature: RelationshipNature.REFERENCE,
+        contextPolicy: { enabled: false }
+    }),
+    // A tenant's attribution rows die with the tenant (Paul Q2 on #1598): COMPOSITION + the purge's cascade,
+    // the USER_IDENTITY_LINKS teardown-anchor shape (non-primary, STANDALONE, OPTIONAL: an unattributed row
+    // carries no organizationId). The organization DELETE's prefix closes the open cost period into an
+    // aggregate BEFORE this cascade runs, so no cost is lost with the rows.
+    //
+    // assurance-control: WILDO.PRIVACY.ERASURE_PROPAGATION — detail rows are deleted with their tenant.
+    createResourcesRelationship(CoreResourceType.ORGANIZATIONS, CoreResourceType.MODEL_CALL_ATTRIBUTIONS, ResourceRelationshipCardinality.ONE, ResourceRelationshipCardinality.MANY, {
+        accessScopeStrategy: ResourceRelationshipAccessScopeStrategy.STANDALONE,
+        isPrimaryScope: false,
+        parentResourceRequirement: ResourceParentResourceRequirement.OPTIONAL,
+        nature: RelationshipNature.COMPOSITION,
+        childOperations: { lifecycle: { onParentDelete: { enabled: true, mode: ChildLifecycleMode.IMMEDIATE, maxDepth: 1 } } },
+        foreignKeyField: 'organizationId',
+        contextPolicy: { enabled: false }
+    }),
+    // An aggregate is NOT torn down by the cascade: the organization DELETE's prefix deletes the tenant's
+    // UNLINKED aggregates itself, and an aggregate an invoice bills outlives the tenant for its statutory
+    // BUSINESS_RECORDS period (GDPR Art. 17(3)(b)). A REFERENCE edge with the cascade disabled, the billing
+    // family's answer for records kept past their scope.
+    createResourcesRelationship(CoreResourceType.ORGANIZATIONS, CoreResourceType.MODEL_COST_PERIOD_AGGREGATES, ResourceRelationshipCardinality.ONE, ResourceRelationshipCardinality.MANY, {
+        accessScopeStrategy: ResourceRelationshipAccessScopeStrategy.STANDALONE,
+        isPrimaryScope: false,
+        nature: RelationshipNature.REFERENCE,
+        childOperations: { lifecycle: { onParentDelete: { enabled: false } } },
+        foreignKeyField: 'organizationId',
+        contextPolicy: { enabled: false }
+    }),
     createResourcesRelationship(CoreResourceType.APPLICATION, CoreResourceType.JOB_PAYLOAD_STORAGE, ResourceRelationshipCardinality.ONE, ResourceRelationshipCardinality.MANY, {
         accessScopeStrategy: ResourceRelationshipAccessScopeStrategy.STANDALONE,
         isPrimaryScope: true,
@@ -1121,6 +1316,38 @@ export const coreSharedResourceRelationship = [
     // NOTE the deliberate absence of an execution→task relationship: `flowActorExecutionId`
     // is a SOFT indexed link, not a declared FK, because a task must be able to outlive the
     // conversation that produced it. See the base schema for the full rationale.
+    // Agent-work decisions and their content (#1599), owned by the same three scopes as the executions they record
+    // decisions on. COMPOSITION + cascade: a scope's records go with the scope, like its conversations. The metadata
+    // is kept for AUDIT_LOGS while the scope exists; an erasure severs the decider and scrubs the content.
+    ...createPolymorphicScopeRelationships(agentWorkDecisionsPolymorphicDeclaration, {
+        nature: RelationshipNature.COMPOSITION,
+        childOperations: { lifecycle: { onParentDelete: { enabled: true, mode: ChildLifecycleMode.IMMEDIATE, maxDepth: 1 } } },
+        contextPolicy: { enabled: false },
+    }),
+    ...createPolymorphicScopeRelationships(agentWorkDecisionContentsPolymorphicDeclaration, {
+        nature: RelationshipNature.COMPOSITION,
+        childOperations: { lifecycle: { onParentDelete: { enabled: true, mode: ChildLifecycleMode.IMMEDIATE, maxDepth: 1 } } },
+        contextPolicy: { enabled: false },
+    }),
+    // The organization's two agent-work settings (singletons) and its export ledger (#1599), torn down with it.
+    createResourcesRelationship(CoreResourceType.ORGANIZATIONS, CoreResourceType.AGENT_WORK_CAPTURE_SETTINGS, ResourceRelationshipCardinality.ONE, ResourceRelationshipCardinality.ONE, {
+        isPrimaryScope: true,
+        nature: RelationshipNature.COMPOSITION,
+        childOperations: { lifecycle: { onParentDelete: { enabled: true, mode: ChildLifecycleMode.IMMEDIATE, maxDepth: 1 } } },
+        contextPolicy: { enabled: false },
+    }),
+    createResourcesRelationship(CoreResourceType.ORGANIZATIONS, CoreResourceType.EVALUATION_EXPORT_AUTHORIZATIONS, ResourceRelationshipCardinality.ONE, ResourceRelationshipCardinality.ONE, {
+        isPrimaryScope: true,
+        nature: RelationshipNature.COMPOSITION,
+        childOperations: { lifecycle: { onParentDelete: { enabled: true, mode: ChildLifecycleMode.IMMEDIATE, maxDepth: 1 } } },
+        contextPolicy: { enabled: false },
+    }),
+    createResourcesRelationship(CoreResourceType.ORGANIZATIONS, CoreResourceType.EVALUATION_DATASET_EXPORTS, ResourceRelationshipCardinality.ONE, ResourceRelationshipCardinality.MANY, {
+        isPrimaryScope: true,
+        nature: RelationshipNature.COMPOSITION,
+        childOperations: { lifecycle: { onParentDelete: { enabled: true, mode: ChildLifecycleMode.IMMEDIATE, maxDepth: 1 } } },
+        contextPolicy: { enabled: false },
+    }),
     ...createPolymorphicScopeRelationships(flowActorTasksPolymorphicDeclaration, {
         nature: RelationshipNature.COMPOSITION,
         childOperations: { lifecycle: { onParentDelete: { enabled: true, mode: ChildLifecycleMode.IMMEDIATE, maxDepth: 1 } } },
@@ -1435,19 +1662,22 @@ export const coreSharedResourceRelationship = [
         // USER_SELF). It is the top-level tenant isolation field, not the scope discriminator.
         contextPolicy: { enabled: false },
     }),
-    // Referrals scope anchor — TEMPORARY SHIM — Phase 4.5 Step 2.5 Layer 3c TODO.
-    //
-    // Referrals naturally inherit polymorphism from `*_billingAccounts` (which
-    // are USER_SELF/ORG-polymorphic). The principled long-term design is to
-    // split `referrals` into the same polymorphic variant pair so each variant
-    // carries its own scope via the parent billing-account chain. Until that
-    // follow-up PR lands, the ORGANIZATIONS edge below carries a STANDALONE
-    // primary anchor so the resource has a defined `resourcePrimaryScope` and
-    // the registry-layer factory's no-fallback throw stays satisfied.
-    // Tracked in `.cursor/plans/m2m-webhook-organization-delivery-phase4-5-hardening.md`
-    // (Phase 4.5 Step 2.5 Layer 3c).
+    // Referrals are ROUTED under the organization that issued them (#1802).
+    //
+    // The row belongs to its referrer, and only an organization can refer: its `organizationId` is the
+    // referrer's tenant. Every door onto the resource is that organization's — ISSUE, CANCEL and the LIST the
+    // `organization-referrals` settings page reads — and each authorizes as that organization's owner, so the
+    // organization must be in the route (`/organizations/{organizationId}/referrals/…`).
+    //
+    // This edge was a STANDALONE "scope anchor" until 2026-09-28, which kept the resource off the organization
+    // URL surface: the routes mounted at `/api/v1/referrals/…`, no request could carry an organization, and every
+    // one answered 403 — the settings page (#1295) and both referral verbs alike. A second edge could not make
+    // this worse: the four billing-account edges below are STANDALONE references, so this is the only URL parent.
+    //
+    // The REFERRED side is not routed here, deliberately: a redemption is the new customer's act, and it is
+    // `BillingAccount_Operations.REDEEM_REFERRAL` on that customer's own billing account.
     createResourcesRelationship(CoreResourceType.ORGANIZATIONS, CoreResourceType.REFERRALS, ResourceRelationshipCardinality.ONE, ResourceRelationshipCardinality.MANY, {
-        accessScopeStrategy: ResourceRelationshipAccessScopeStrategy.STANDALONE,
+        accessScopeStrategy: ResourceRelationshipAccessScopeStrategy.REQUIRES_CONTEXT,
         isPrimaryScope: true,
         nature: RelationshipNature.REFERENCE,
         contextPolicy: { enabled: false },
@@ -1733,6 +1963,108 @@ export const coreSharedResourceRelationship = [
         childOperations: { lifecycle: { onParentDelete: { enabled: true, mode: ChildLifecycleMode.IMMEDIATE, maxDepth: 1 } } },
         contextPolicy: { enabled: false },
     }),
+    // Inbound deliveries (#1596) — collection, MANY per scope, off the context surface for the same reason
+    // as the outbound log. COMPOSITION + IMMEDIATE: a delivery's payload is its organization's data, so it
+    // is erased with the organization rather than outliving it in the application variant.
+    ...createPolymorphicScopeRelationships(inboundDeliveryPolymorphicDeclaration, {
+        nature: RelationshipNature.COMPOSITION,
+        childOperations: { lifecycle: { onParentDelete: { enabled: true, mode: ChildLifecycleMode.IMMEDIATE, maxDepth: 1 } } },
+        contextPolicy: { enabled: false },
+    }),
+    // ── CONVERSATION THREADS (#1630) ─────────────────────────────────────
+    //
+    // All three are the organization's, purged with it. Reply tokens are COMPOSITION children of their
+    // thread (deleted with it); messages only REFERENCE it (see that edge). Both are addressed under the
+    // organization with the thread as an optional context — the ORGANIZATION_MEMBERS →
+    // ORGANIZATION_UNIT_MEMBERS shape.
+    createResourcesRelationship(CoreResourceType.ORGANIZATIONS, CoreResourceType.CONVERSATION_THREADS, ResourceRelationshipCardinality.ONE, ResourceRelationshipCardinality.MANY, {
+        isPrimaryScope: true,
+        nature: RelationshipNature.COMPOSITION,
+        childOperations: { lifecycle: { onParentDelete: { enabled: true, mode: ChildLifecycleMode.IMMEDIATE, maxDepth: 1 } } },
+        foreignKeyField: 'organizationId',
+        contextPolicy: { enabled: false },
+    }),
+    createResourcesRelationship(CoreResourceType.ORGANIZATIONS, CoreResourceType.CONVERSATION_MESSAGES, ResourceRelationshipCardinality.ONE, ResourceRelationshipCardinality.MANY, {
+        isPrimaryScope: true,
+        nature: RelationshipNature.COMPOSITION,
+        // IMPERSONALIZE_AND_RETAIN, never silent (#1635): messages keep a statutory ground, and a silent edge is
+        // DELETE on a parent delete — the tenant purge would destroy correspondence the law requires kept. Retained,
+        // they stay restricted until their BUSINESS_RECORDS period ends and the retention-class sweep deletes them.
+        childOperations: { lifecycle: { onParentDelete: { enabled: true, mode: ChildLifecycleMode.IMMEDIATE, strategy: ChildLifecycleStrategy.IMPERSONALIZE_AND_RETAIN, maxDepth: 1 } } },
+        foreignKeyField: 'organizationId',
+        contextPolicy: { enabled: false },
+    }),
+    createResourcesRelationship(CoreResourceType.ORGANIZATIONS, CoreResourceType.CONVERSATION_REPLY_TOKENS, ResourceRelationshipCardinality.ONE, ResourceRelationshipCardinality.MANY, {
+        isPrimaryScope: true,
+        nature: RelationshipNature.COMPOSITION,
+        childOperations: { lifecycle: { onParentDelete: { enabled: true, mode: ChildLifecycleMode.IMMEDIATE, maxDepth: 1 } } },
+        foreignKeyField: 'organizationId',
+        contextPolicy: { enabled: false },
+    }),
+    // A REFERENCE, not a composition: a message is a business letter a statute keeps on its own clock
+    // (#1635), and deleting the thread — correlation, kept for a shorter period — must never take it along.
+    // The engagement → assignment precedent above: ending the parent leaves the evidence standing.
+    createResourcesRelationship(CoreResourceType.CONVERSATION_THREADS, CoreResourceType.CONVERSATION_MESSAGES, ResourceRelationshipCardinality.ONE, ResourceRelationshipCardinality.MANY, {
+        nature: RelationshipNature.REFERENCE,
+        foreignKeyField: 'threadId',
+        accessScopeStrategy: ResourceRelationshipAccessScopeStrategy.OPTIONAL_CONTEXT,
+        childOperations: { lifecycle: { onParentDelete: { enabled: false } } },
+        contextPolicy: { enabled: false },
+    }),
+    createResourcesRelationship(CoreResourceType.CONVERSATION_THREADS, CoreResourceType.CONVERSATION_REPLY_TOKENS, ResourceRelationshipCardinality.ONE, ResourceRelationshipCardinality.MANY, {
+        nature: RelationshipNature.COMPOSITION,
+        foreignKeyField: 'threadId',
+        accessScopeStrategy: ResourceRelationshipAccessScopeStrategy.OPTIONAL_CONTEXT,
+        childOperations: { lifecycle: { onParentDelete: { enabled: true, mode: ChildLifecycleMode.IMMEDIATE, maxDepth: 1 } } },
+        contextPolicy: { enabled: false },
+    }),
+    // ── RECEIVING EMAIL (#1600) ──────────────────────────────────────────
+    //
+    // The three organization-scoped resources are the organization's. The organization-deletion hook reads the
+    // domains BEFORE this cascade runs, so the provider's copies are deleted too (E9).
+    createResourcesRelationship(CoreResourceType.ORGANIZATIONS, CoreResourceType.INBOUND_EMAILS, ResourceRelationshipCardinality.ONE, ResourceRelationshipCardinality.MANY, {
+        isPrimaryScope: true,
+        nature: RelationshipNature.COMPOSITION,
+        // IMPERSONALIZE_AND_RETAIN, as for conversation messages (#1635): a received letter keeps a statutory
+        // ground, so the tenant purge keeps it restricted until its BUSINESS_RECORDS period ends and the
+        // retention-class sweep deletes it — its raw MIME and attachment files with it.
+        childOperations: { lifecycle: { onParentDelete: { enabled: true, mode: ChildLifecycleMode.IMMEDIATE, strategy: ChildLifecycleStrategy.IMPERSONALIZE_AND_RETAIN, maxDepth: 1 } } },
+        foreignKeyField: 'organizationId',
+        contextPolicy: { enabled: false },
+    }),
+    createResourcesRelationship(CoreResourceType.ORGANIZATIONS, CoreResourceType.ORGANIZATION_EMAIL_DOMAINS, ResourceRelationshipCardinality.ONE, ResourceRelationshipCardinality.MANY, {
+        isPrimaryScope: true,
+        nature: RelationshipNature.COMPOSITION,
+        childOperations: { lifecycle: { onParentDelete: { enabled: true, mode: ChildLifecycleMode.IMMEDIATE, maxDepth: 1 } } },
+        foreignKeyField: 'organizationId',
+        contextPolicy: { enabled: false },
+    }),
+    // The CLIENT organization owns its mailboxes. The firm's domain is named by a plain id, never an edge:
+    // a navigable edge from one tenant's row into another tenant's is what the model refuses.
+    createResourcesRelationship(CoreResourceType.ORGANIZATIONS, CoreResourceType.CLIENT_MAILBOXES, ResourceRelationshipCardinality.ONE, ResourceRelationshipCardinality.MANY, {
+        isPrimaryScope: true,
+        nature: RelationshipNature.COMPOSITION,
+        childOperations: { lifecycle: { onParentDelete: { enabled: true, mode: ChildLifecycleMode.IMMEDIATE, maxDepth: 1 } } },
+        foreignKeyField: 'organizationId',
+        contextPolicy: { enabled: false },
+    }),
+    // Application-wide, the retention-enforcement records shape: an address, never ambient context.
+    createResourcesRelationship(CoreResourceType.APPLICATION, CoreResourceType.INBOUND_ADDRESS_TOMBSTONES, ResourceRelationshipCardinality.ONE, ResourceRelationshipCardinality.MANY, {
+        isPrimaryScope: true,
+        foreignKeyField: 'applicationId',
+        /*
+         * MANDATORY, matching the schema: every row is written with the application's canonical id, and
+         * `applicationId` is required there. The edge used to say OPTIONAL (copying the retention-enforcement
+         * records, whose rows may lack one) while the schema kept it required, and the Mongo convertor refuses
+         * a relationship FK whose requiredness disagrees with its schema path — so on a Mongo-persisted platform
+         * INIT died on `zod_converter_schema_conversion_failed` (framework 1.1.6, first fresh `wildo local dev`).
+         * PostgreSQL keeps the schema's own nullability for an authored FK, so its plan does not change.
+         */
+        parentResourceRequirement: ResourceParentResourceRequirement.MANDATORY,
+        accessScopeStrategy: ResourceRelationshipAccessScopeStrategy.REQUIRES_CONTEXT,
+        nature: RelationshipNature.REFERENCE,
+        contextPolicy: { enabled: false },
+    }),
 ];
 export const coreShared_ResourcesConfigurations_FactoryMap = {
     [CoreResourceType.ORGANIZATIONS]: organizationResourceConfiguration_InitializationFactory,
@@ -1749,6 +2081,13 @@ export const coreShared_ResourcesConfigurations_FactoryMap = {
     [CoreResourceType.ORGANIZATION_PROFILES]: organizationProfileResourceConfiguration_InitializationFactory,
     [CoreResourceType.ORGANIZATION_PREFERENCES]: organizationPreferencesResourceConfiguration_InitializationFactory,
     [CoreResourceType.PLATFORM_ACCESS_GRANTS]: platformAccessGrantsResourceConfiguration_InitializationFactory,
+    [CoreResourceType.LEGAL_HOLDS]: legalHoldsResourceConfiguration_InitializationFactory,
+    [CoreResourceType.SERVICE_PROVIDER_RELATIONSHIPS]: serviceProviderRelationshipsResourceConfiguration_InitializationFactory,
+    [CoreResourceType.SERVICE_ENGAGEMENTS]: serviceEngagementsResourceConfiguration_InitializationFactory,
+    [CoreResourceType.SERVICE_ENGAGEMENT_ASSIGNMENTS]: serviceEngagementAssignmentsResourceConfiguration_InitializationFactory,
+    [CoreResourceType.SERVICE_PROVIDER_ACTIVITY_FEED_SETTINGS]: serviceProviderActivityFeedSettingsResourceConfiguration_InitializationFactory,
+    [CoreResourceType.SERVICE_PROVIDER_ACTIVITY_FEED]: serviceProviderActivityFeedResourceConfiguration_InitializationFactory,
+    [CoreResourceType.SERVICE_PROVIDER_CAPABILITY_GRANTS]: serviceProviderCapabilityGrantsResourceConfiguration_InitializationFactory,
     [CoreResourceType.APPLICATION_ACCESS_GRANTS]: applicationAccessGrantsResourceConfiguration_InitializationFactory,
     [CoreResourceType.SYSTEM_OF_RECORD_PARTITION_ASSIGNMENTS]: systemOfRecordPartitionAssignmentsResourceConfiguration_InitializationFactory,
     [CoreResourceType.ORGANIZATION_NOTIFICATIONS]: organizationNotificationsResourceConfiguration_InitializationFactory,
@@ -1793,6 +2132,15 @@ export const coreShared_ResourcesConfigurations_FactoryMap = {
     [CoreResourceType.JOB_EXECUTIONS]: jobExecution_ResourceConfiguration_InitializationFactory,
     [CoreResourceType.JOB_PAYLOAD_STORAGE]: jobPayloadStorage_ResourceConfiguration_InitializationFactory,
     [CoreResourceType.PROVIDER_CALL_RECORDS]: providerCallRecordsResourceConfiguration_InitializationFactory,
+    [CoreResourceType.MODEL_CALL_ATTRIBUTIONS]: modelCallAttributionsResourceConfiguration_InitializationFactory,
+    [CoreResourceType.MODEL_COST_PERIOD_AGGREGATES]: modelCostPeriodAggregatesResourceConfiguration_InitializationFactory,
+    // Agent-work decisions (#1599): the two polymorphic record families, and the organization's settings and ledger.
+    ...agentWorkDecisionsPolymorphicFactories,
+    ...agentWorkDecisionContentsPolymorphicFactories,
+    [CoreResourceType.AGENT_WORK_CAPTURE_SETTINGS]: agentWorkCaptureSettingsResourceConfiguration_InitializationFactory,
+    [CoreResourceType.EVALUATION_EXPORT_AUTHORIZATIONS]: evaluationExportAuthorizationsResourceConfiguration_InitializationFactory,
+    [CoreResourceType.EVALUATION_DATASET_EXPORTS]: evaluationDatasetExportsResourceConfiguration_InitializationFactory,
+    [CoreResourceType.RETENTION_ENFORCEMENT_RECORDS]: retentionEnforcementRecordsResourceConfiguration_InitializationFactory,
     // Flows-Actors Execution Resource (persisted flow/actor system executions)
     ...flowActorExecutionsPolymorphicFactories,
     // Flows-Actors Task Resource (the WORK plane behind the A2A `Task` object)
@@ -1827,5 +2175,14 @@ export const coreShared_ResourcesConfigurations_FactoryMap = {
     // M2M Outbound Webhook Resources — polymorphic dual-scope (2 × 2 = 4 entries)
     ...webhookConfigPolymorphicFactories,
     ...m2mWebhookDeliveryLogPolymorphicFactories,
+    // Inbound deliveries — polymorphic dual-scope (#1596)
+    ...inboundDeliveryPolymorphicFactories,
+    [CoreResourceType.CONVERSATION_THREADS]: conversationThreadsResourceConfiguration_InitializationFactory,
+    [CoreResourceType.CONVERSATION_MESSAGES]: conversationMessagesResourceConfiguration_InitializationFactory,
+    [CoreResourceType.CONVERSATION_REPLY_TOKENS]: conversationReplyTokensResourceConfiguration_InitializationFactory,
+    [CoreResourceType.INBOUND_EMAILS]: inboundEmailsResourceConfiguration_InitializationFactory,
+    [CoreResourceType.ORGANIZATION_EMAIL_DOMAINS]: organizationEmailDomainsResourceConfiguration_InitializationFactory,
+    [CoreResourceType.CLIENT_MAILBOXES]: clientMailboxesResourceConfiguration_InitializationFactory,
+    [CoreResourceType.INBOUND_ADDRESS_TOMBSTONES]: inboundAddressTombstonesResourceConfiguration_InitializationFactory,
 };
 //# sourceMappingURL=resources-registry.shared.core.definitions.js.map