@wildo-ai/saas-technical-doc 1.1.2 → 1.1.4

package/dist/esm/companion/application-documentation/technical-documentation-engine-content-bundle.js

@@ -2,10 +2,14 @@ import { IMPLICIT_LEAD_SECTION_HEADING } from '../rendering/technical-documentat
 import { APPLICATION_CONNECTION_DOCUMENTATION_SOURCE_REF, } from './application-connection-documentation.js';
 import { APPLICATION_AUTHENTICATION_DOCUMENTATION_SOURCE_REF, } from './application-authentication-documentation.js';
 import { APPLICATION_INTEGRATION_DOCUMENTATION_SOURCE_REF, } from './application-integration-documentation.js';
+import { APPLICATION_DOMAIN_DOCUMENTATION_SOURCE_REF, } from './application-domain-documentation.js';
 import { APPLICATION_ADMINISTRATION_DOCUMENTATION_SOURCE_REF, } from './application-administration-documentation.js';
 import { canonicalizeTechnicalDocumentationJson, TechnicalDocumentationAccessClass, TechnicalDocumentationApiReferenceSection, TechnicalDocumentationApiReferenceTargetKind, TechnicalDocumentationApplicabilityEvidenceAxis, TechnicalDocumentationApplicabilityEvidenceStatus, TechnicalDocumentationEditorialStatus, TechnicalDocumentationEvidenceSubjectRef, TechnicalDocumentationLinkKind, TechnicalDocumentationReaderAudience, TechnicalDocumentationSourceClassification, TechnicalDocumentationSourceOwnership, TechnicalDocumentationUnitKind, createTechnicalDocumentationUnitV1, } from '@wildo-ai/saas-specifications/technical-documentation';
 import { EngineDocumentationSpecificationFamilyRef, } from '@wildo-ai/saas-specifications/companion';
 import { APPLICATION_CONSUMER_DOCUMENTATION_CONSUMER_FACT_SOURCE_PREFIX, APPLICATION_CONSUMER_DOCUMENTATION_ENGINE_CONTENT_SOURCE_PREFIX, } from '../../content/application-consumer-documentation-content-manifest.schemas.js';
+// From the DECLARATIONS module, never the materializer: the materializer imports the render model,
+// which imports this file, and naming a diagram here at module load closes that cycle (#474).
+import { createTechnicalDocumentationApplicationRequestDiagramAssetRequest } from '../technical-documentation-diagram-definitions.js';
 import { APPLICATION_ORGANIZATION_ROLES_DOCUMENTATION_SOURCE_REF } from './application-organization-role-documentation.js';
 import { APPLICATION_ORGANIZATION_UNIT_RESOURCES_DOCUMENTATION_SOURCE_REF, } from './application-organization-unit-resource-documentation.js';
 const PROVEN = [TechnicalDocumentationApplicabilityEvidenceStatus.PROVEN];
@@ -36,12 +40,6 @@ const ORGANIZATION_SIEM_RECOVERY_APPLICABILITY_REQUIREMENTS = [{
         subjectRef: TechnicalDocumentationEvidenceSubjectRef.ORGANIZATION_SIEM_DELIVERY_RECOVERY,
         acceptableStatuses: [...PROVEN],
     }];
-/** Billing is one operational journey; every page requires the admitted account and subscription surfaces. */
-const ORGANIZATION_BILLING_APPLICABILITY_REQUIREMENTS = [{
-        axis: TechnicalDocumentationApplicabilityEvidenceAxis.EXPOSED_API_SURFACE,
-        subjectRef: TechnicalDocumentationEvidenceSubjectRef.ORGANIZATION_BILLING_ADMINISTRATION,
-        acceptableStatuses: [...PROVEN],
-    }];
 const MCP_INTEGRATION_APPLICABILITY_REQUIREMENTS = [{
         axis: TechnicalDocumentationApplicabilityEvidenceAxis.CONFIGURED_ACTIVATION,
         subjectRef: TechnicalDocumentationEvidenceSubjectRef.APPLICATION_MCP_TOOL_SURFACE,
@@ -69,6 +67,7 @@ const APPLICATION_AUTHENTICATION_TOKEN_PATTERN = /\{\{APPLICATION_AUTHENTICATION
 const APPLICATION_ADMINISTRATION_TOKEN_PATTERN = /\{\{APPLICATION_ADMINISTRATION:([A-Za-z0-9]+)\}\}/g;
 /** Same shape again for the tools and events this application publishes. */
 const APPLICATION_INTEGRATION_TOKEN_PATTERN = /\{\{APPLICATION_INTEGRATION:([A-Za-z0-9]+)\}\}/g;
+const APPLICATION_DOMAIN_TOKEN_PATTERN = /\{\{APPLICATION_DOMAIN:([A-Za-z0-9]+)\}\}/g;
 /**
  * Build one semantic guide-to-reference link without embedding a Docusaurus
  * route. The verified OpenAPI link index resolves the resource only when the
@@ -112,7 +111,6 @@ const scimProvisioningConfigApiReferenceTarget = () => resourceApiReferenceTarge
 const auditLogsApiReferenceTarget = () => resourceApiReferenceTarget('Audit records API reference', 'auditLogs');
 const organizationSiemExportConfigApiReferenceTarget = () => resourceApiReferenceTarget('Organization SIEM export configuration API reference', 'organizationSiemExportConfig');
 const organizationSiemDeliveryDlqApiReferenceTarget = () => resourceApiReferenceTarget('Organization SIEM delivery recovery API reference', 'organizationSiemDeliveryDlq');
-const organizationBillingAccountApiReferenceTarget = () => resourceApiReferenceTarget('Organization billing account API reference', 'organizationBillingAccounts');
 const organizationSubscriptionsApiReferenceTarget = () => resourceApiReferenceTarget('Organization subscriptions API reference', 'organizationSubscriptions');
 const organizationInvoiceRefsApiReferenceTarget = () => resourceApiReferenceTarget('Organization invoice summaries API reference', 'organizationInvoiceRefs');
 const organizationUsageRecordsApiReferenceTarget = () => resourceApiReferenceTarget('Organization usage records API reference', 'organizationUsageRecords');
@@ -124,6 +122,74 @@ const organizationUsageRecordsApiReferenceTarget = () => resourceApiReferenceTar
  * and title; this map owns type, audience, publication posture and navigation
  * relationships, allowing the projector to reject a mismatched content set.
  */
+/**
+ * The unit-ref namespace generated resource pages live in, and the only place its shape is written.
+ *
+ * `technical-documentation:unit/manages/<resource>` — an ENGINE ref with a reserved segment, not an
+ * application-owned one. The distinction is load-bearing: `pathForUnit` still refuses a unit an
+ * application named, and these are engine units whose subject happens to come from the application.
+ */
+export function applicationDomainResourcePageUnitRef(resourceIdentifier) {
+    return `technical-documentation:unit/manages/${resourceIdentifier}`;
+}
+/** The unit-ref prefix a renderer matches to recognise a generated resource page. */
+export const APPLICATION_DOMAIN_RESOURCE_PAGE_UNIT_REF_PREFIX = 'technical-documentation:unit/manages/';
+/**
+ * One definition shared by every generated resource page.
+ *
+ * A per-resource entry in `ENGINE_CONTENT_UNIT_DEFINITIONS` is impossible by construction — the
+ * resources are not known when this module is written — and it would be the wrong shape anyway:
+ * these pages differ only in subject, so a per-resource definition would be N copies of one answer
+ * with N chances to drift.
+ */
+const GENERATED_RESOURCE_UNIT_DEFINITION = Object.freeze({
+    kind: TechnicalDocumentationUnitKind.REFERENCE,
+    readerAudiences: [
+        TechnicalDocumentationReaderAudience.APPLICATION_OPERATIONS_STAFF,
+        TechnicalDocumentationReaderAudience.CONSUMING_INTERNAL_SERVICE,
+        TechnicalDocumentationReaderAudience.EXTERNAL_INTEGRATION_DEVELOPER,
+        TechnicalDocumentationReaderAudience.ORGANIZATION_ADMINISTRATOR,
+        TechnicalDocumentationReaderAudience.ORGANIZATION_INTEGRATION_DEVELOPER,
+    ],
+    accessClass: TechnicalDocumentationAccessClass.PUBLIC,
+    /*
+     * APPROVED, explicitly. A generated per-resource page is emitted only for a resource the
+     * application actually publishes, so there is no draft state for it to be in — but the value is
+     * declared rather than defaulted because the authored tier can now say otherwise, and a reader
+     * comparing the two tiers should see the answer rather than infer it from an absence.
+     */
+    editorialStatus: TechnicalDocumentationEditorialStatus.APPROVED,
+    /*
+     * No assets. A generated per-resource page describes ONE application resource, and there is no
+     * engine-authored picture of a resource the engine has never seen — a diagram here would depict
+     * the framework's idea of a resource rather than this one. Declared empty rather than omitted so
+     * the absence reads as a decision beside the authored tier, which does request one.
+     */
+    assetRequests: [],
+});
+/**
+ * Unit kinds this catalog deliberately produces NO unit for, each with the reason.
+ *
+ * The vocabulary has eight members and, until 2026-09-09, two of them had no producer at all — a
+ * silent gap, because a kind nobody authors looks exactly like a kind nobody needed (#474). RUNBOOK
+ * now has one. CHANGE does not, and the reason is structural rather than editorial:
+ *
+ * A CHANGE unit is a record of what changed in ONE application, so only that application could
+ * author it — and an application-authored unit cannot be routed. `pathForUnit` admits engine-
+ * namespaced slugs and the reserved `unit/manages/` namespace, and refuses everything else with
+ * "has no consumer navigation category". Application material reaches the site only as an ENGINE
+ * unit carrying application-projected facts, never as an application-authored page. So the engine
+ * cannot write a changelog it has no knowledge of, and the party that could has no door.
+ *
+ * The member is therefore kept rather than retired: what is missing is a route for
+ * application-authored units, not the concept. When that route exists, this entry is removed in the
+ * same change — and `technical-documentation-engine-content-bundle.test.ts` fails until it is,
+ * because the partition below is asserted total over the enum.
+ */
+export const ENGINE_CONTENT_UNIT_KINDS_WITHOUT_PRODUCER = {
+    [TechnicalDocumentationUnitKind.CHANGE]: 'A change record belongs to one application, and an application-authored unit has no route — `pathForUnit` '
+        + 'admits only engine-namespaced slugs and the reserved `unit/manages/` namespace. Blocked on routing, not on authoring.',
+};
 export const ENGINE_CONTENT_UNIT_DEFINITIONS = Object.freeze({
     'technical-documentation:unit/application-orientation': {
         kind: TechnicalDocumentationUnitKind.ORIENTATION,
@@ -142,6 +208,34 @@ export const ENGINE_CONTENT_UNIT_DEFINITIONS = Object.freeze({
             'technical-documentation:unit/first-request',
         ],
     },
+    'technical-documentation:unit/what-this-application-manages': {
+        kind: TechnicalDocumentationUnitKind.ORIENTATION,
+        /*
+         * Every audience, because this is the one page that answers "what IS this?" — the question
+         * that comes before the reason any of them opened the documentation. An operator, an
+         * integrator and an organization administrator all need it, and none of them should have to
+         * infer the product from the pages about administering it.
+         */
+        readerAudiences: [
+            TechnicalDocumentationReaderAudience.APPLICATION_OPERATIONS_STAFF,
+            TechnicalDocumentationReaderAudience.CONSUMING_INTERNAL_SERVICE,
+            TechnicalDocumentationReaderAudience.EXTERNAL_INTEGRATION_DEVELOPER,
+            TechnicalDocumentationReaderAudience.ORGANIZATION_ADMINISTRATOR,
+            TechnicalDocumentationReaderAudience.ORGANIZATION_INTEGRATION_DEVELOPER,
+        ],
+        accessClass: TechnicalDocumentationAccessClass.PUBLIC,
+        /*
+         * No applicability requirement. An application with no resources of its own still publishes
+         * this page, and the projection says so in a sentence — suppressing it would leave a reader
+         * unable to tell "manages nothing through its API" from "nobody wrote this page".
+         */
+        applicabilityRequirements: [],
+        relatedUnitRefs: [
+            'technical-documentation:unit/first-request',
+            'technical-documentation:unit/webhooks',
+            'technical-documentation:unit/organization-roles',
+        ],
+    },
     'technical-documentation:unit/authentication': {
         kind: TechnicalDocumentationUnitKind.ORIENTATION,
         readerAudiences: [
@@ -1002,8 +1096,18 @@ export const ENGINE_CONTENT_UNIT_DEFINITIONS = Object.freeze({
         ],
         apiReferenceTargets: [organizationSiemDeliveryDlqApiReferenceTarget()],
     },
-    'technical-documentation:unit/protect-and-retain-audit-evidence': {
-        kind: TechnicalDocumentationUnitKind.CONCEPT,
+    /*
+     * The catalog's first RUNBOOK, and the kind had no producer until 2026-09-09 (#474).
+     *
+     * It is not a re-labelled HOW_TO. Every other page in this section explains ONE capability;
+     * `operate-webhook-deliveries` was checked first and is genuinely explanatory — statuses, a retry
+     * ladder, monitoring advice — which is why re-kinding it to fill the vocabulary was rejected. A
+     * RUNBOOK is an ORDER under time pressure, and the ordering is the content: contain before you
+     * assess, assess before you recover, and loop back to contain when the assessment finds a change.
+     * No existing page says what to do FIRST.
+     */
+    'technical-documentation:unit/respond-to-leaked-credential': {
+        kind: TechnicalDocumentationUnitKind.RUNBOOK,
         readerAudiences: [
             TechnicalDocumentationReaderAudience.APPLICATION_OPERATIONS_STAFF,
             TechnicalDocumentationReaderAudience.ORGANIZATION_ADMINISTRATOR,
@@ -1011,176 +1115,29 @@ export const ENGINE_CONTENT_UNIT_DEFINITIONS = Object.freeze({
         accessClass: TechnicalDocumentationAccessClass.PUBLIC,
         applicabilityRequirements: [],
         relatedUnitRefs: [
-            'technical-documentation:unit/audit-and-siem',
+            'technical-documentation:unit/api-keys-lifecycle',
+            'technical-documentation:unit/oauth-operate-and-revoke',
+            'technical-documentation:unit/suspend-or-remove-user',
+            'technical-documentation:unit/investigate-audit-event',
+            'technical-documentation:unit/review-privileged-and-access-changes',
             'technical-documentation:unit/export-audit-records',
-            'technical-documentation:unit/operate-and-troubleshoot-siem-delivery',
-        ],
-        apiReferenceTargets: [auditLogsApiReferenceTarget()],
-    },
-    'technical-documentation:unit/billing': {
-        kind: TechnicalDocumentationUnitKind.ORIENTATION,
-        readerAudiences: [
-            TechnicalDocumentationReaderAudience.APPLICATION_OPERATIONS_STAFF,
-            TechnicalDocumentationReaderAudience.ORGANIZATION_ADMINISTRATOR,
-        ],
-        accessClass: TechnicalDocumentationAccessClass.PUBLIC,
-        applicabilityRequirements: ORGANIZATION_BILLING_APPLICABILITY_REQUIREMENTS,
-        relatedUnitRefs: [
-            'technical-documentation:unit/understand-billing-plans-and-access',
-            'technical-documentation:unit/start-billing-subscription',
-            'technical-documentation:unit/change-or-end-billing-subscription',
-            'technical-documentation:unit/billing-records-and-usage',
-            'technical-documentation:unit/reconcile-billing-and-access',
-            'technical-documentation:unit/troubleshoot-billing-change',
-            'technical-documentation:unit/audit-and-siem',
-        ],
-        apiReferenceTargets: [
-            organizationBillingAccountApiReferenceTarget(),
-            organizationSubscriptionsApiReferenceTarget(),
-        ],
-    },
-    'technical-documentation:unit/understand-billing-plans-and-access': {
-        kind: TechnicalDocumentationUnitKind.CONCEPT,
-        readerAudiences: [
-            TechnicalDocumentationReaderAudience.APPLICATION_OPERATIONS_STAFF,
-            TechnicalDocumentationReaderAudience.ORGANIZATION_ADMINISTRATOR,
-        ],
-        accessClass: TechnicalDocumentationAccessClass.PUBLIC,
-        applicabilityRequirements: ORGANIZATION_BILLING_APPLICABILITY_REQUIREMENTS,
-        relatedUnitRefs: [
-            'technical-documentation:unit/billing',
-            'technical-documentation:unit/start-billing-subscription',
-            'technical-documentation:unit/reconcile-billing-and-access',
-        ],
-        apiReferenceTargets: [organizationBillingAccountApiReferenceTarget()],
-    },
-    'technical-documentation:unit/start-billing-subscription': {
-        kind: TechnicalDocumentationUnitKind.HOW_TO,
-        readerAudiences: [TechnicalDocumentationReaderAudience.ORGANIZATION_ADMINISTRATOR],
-        accessClass: TechnicalDocumentationAccessClass.PUBLIC,
-        applicabilityRequirements: ORGANIZATION_BILLING_APPLICABILITY_REQUIREMENTS,
-        relatedUnitRefs: [
-            'technical-documentation:unit/billing',
-            'technical-documentation:unit/understand-billing-plans-and-access',
-            'technical-documentation:unit/reconcile-billing-and-access',
-            'technical-documentation:unit/troubleshoot-billing-change',
-        ],
-        apiReferenceTargets: [
-            operationFamilyApiReferenceTarget('Open an organization checkout', 'organizationBillingAccounts', 'open_checkout'),
-        ],
-    },
-    'technical-documentation:unit/change-or-end-billing-subscription': {
-        kind: TechnicalDocumentationUnitKind.HOW_TO,
-        readerAudiences: [TechnicalDocumentationReaderAudience.ORGANIZATION_ADMINISTRATOR],
-        accessClass: TechnicalDocumentationAccessClass.PUBLIC,
-        applicabilityRequirements: ORGANIZATION_BILLING_APPLICABILITY_REQUIREMENTS,
-        relatedUnitRefs: [
-            'technical-documentation:unit/billing',
-            'technical-documentation:unit/understand-billing-plans-and-access',
-            'technical-documentation:unit/reconcile-billing-and-access',
-            'technical-documentation:unit/troubleshoot-billing-change',
-        ],
-        apiReferenceTargets: [
-            operationFamilyApiReferenceTarget('Change an organization subscription plan', 'organizationSubscriptions', 'change_plan'),
-            operationFamilyApiReferenceTarget('Cancel an organization subscription', 'organizationSubscriptions', 'cancel'),
-            operationFamilyApiReferenceTarget('Resume an organization subscription', 'organizationSubscriptions', 'resume'),
-        ],
-    },
-    'technical-documentation:unit/manage-invoices-and-payments': {
-        kind: TechnicalDocumentationUnitKind.CONCEPT,
-        readerAudiences: [
-            TechnicalDocumentationReaderAudience.APPLICATION_OPERATIONS_STAFF,
-            TechnicalDocumentationReaderAudience.ORGANIZATION_ADMINISTRATOR,
-        ],
-        accessClass: TechnicalDocumentationAccessClass.PUBLIC,
-        applicabilityRequirements: ORGANIZATION_BILLING_APPLICABILITY_REQUIREMENTS,
-        relatedUnitRefs: [
-            'technical-documentation:unit/billing',
-            'technical-documentation:unit/billing-records-and-usage',
-            'technical-documentation:unit/reconcile-billing-and-access',
-            'technical-documentation:unit/understand-metered-usage',
             'technical-documentation:unit/protect-and-retain-audit-evidence',
         ],
-        apiReferenceTargets: [
-            organizationInvoiceRefsApiReferenceTarget(),
-            operationFamilyApiReferenceTarget('Open the authenticated billing portal', 'organizationBillingAccounts', 'open_portal'),
-        ],
-    },
-    'technical-documentation:unit/billing-records-and-usage': {
-        kind: TechnicalDocumentationUnitKind.ORIENTATION,
-        readerAudiences: [
-            TechnicalDocumentationReaderAudience.APPLICATION_OPERATIONS_STAFF,
-            TechnicalDocumentationReaderAudience.ORGANIZATION_ADMINISTRATOR,
-        ],
-        accessClass: TechnicalDocumentationAccessClass.PUBLIC,
-        applicabilityRequirements: ORGANIZATION_BILLING_APPLICABILITY_REQUIREMENTS,
-        relatedUnitRefs: [
-            'technical-documentation:unit/billing',
-            'technical-documentation:unit/manage-invoices-and-payments',
-            'technical-documentation:unit/understand-metered-usage',
-            'technical-documentation:unit/reconcile-billing-and-access',
-            'technical-documentation:unit/troubleshoot-billing-change',
-        ],
-        apiReferenceTargets: [
-            organizationInvoiceRefsApiReferenceTarget(),
-            organizationUsageRecordsApiReferenceTarget(),
-        ],
     },
-    'technical-documentation:unit/understand-metered-usage': {
+    'technical-documentation:unit/protect-and-retain-audit-evidence': {
         kind: TechnicalDocumentationUnitKind.CONCEPT,
         readerAudiences: [
             TechnicalDocumentationReaderAudience.APPLICATION_OPERATIONS_STAFF,
             TechnicalDocumentationReaderAudience.ORGANIZATION_ADMINISTRATOR,
         ],
         accessClass: TechnicalDocumentationAccessClass.PUBLIC,
-        applicabilityRequirements: ORGANIZATION_BILLING_APPLICABILITY_REQUIREMENTS,
-        relatedUnitRefs: [
-            'technical-documentation:unit/billing',
-            'technical-documentation:unit/billing-records-and-usage',
-            'technical-documentation:unit/manage-invoices-and-payments',
-            'technical-documentation:unit/reconcile-billing-and-access',
-            'technical-documentation:unit/troubleshoot-billing-change',
-        ],
-        apiReferenceTargets: [organizationUsageRecordsApiReferenceTarget()],
-    },
-    'technical-documentation:unit/reconcile-billing-and-access': {
-        kind: TechnicalDocumentationUnitKind.HOW_TO,
-        readerAudiences: [
-            TechnicalDocumentationReaderAudience.APPLICATION_OPERATIONS_STAFF,
-            TechnicalDocumentationReaderAudience.ORGANIZATION_ADMINISTRATOR,
-        ],
-        accessClass: TechnicalDocumentationAccessClass.PUBLIC,
-        applicabilityRequirements: ORGANIZATION_BILLING_APPLICABILITY_REQUIREMENTS,
+        applicabilityRequirements: [],
         relatedUnitRefs: [
-            'technical-documentation:unit/billing',
-            'technical-documentation:unit/manage-invoices-and-payments',
-            'technical-documentation:unit/understand-metered-usage',
-            'technical-documentation:unit/troubleshoot-billing-change',
             'technical-documentation:unit/audit-and-siem',
+            'technical-documentation:unit/export-audit-records',
+            'technical-documentation:unit/operate-and-troubleshoot-siem-delivery',
         ],
-        apiReferenceTargets: [
-            operationFamilyApiReferenceTarget('Read aggregated organization billing state', 'organizationBillingAccounts', 'get_state'),
-            organizationSubscriptionsApiReferenceTarget(),
-        ],
-    },
-    'technical-documentation:unit/troubleshoot-billing-change': {
-        kind: TechnicalDocumentationUnitKind.TROUBLESHOOTING,
-        readerAudiences: [
-            TechnicalDocumentationReaderAudience.APPLICATION_OPERATIONS_STAFF,
-            TechnicalDocumentationReaderAudience.ORGANIZATION_ADMINISTRATOR,
-        ],
-        accessClass: TechnicalDocumentationAccessClass.PUBLIC,
-        applicabilityRequirements: ORGANIZATION_BILLING_APPLICABILITY_REQUIREMENTS,
-        relatedUnitRefs: [
-            'technical-documentation:unit/billing',
-            'technical-documentation:unit/reconcile-billing-and-access',
-            'technical-documentation:unit/manage-invoices-and-payments',
-            'technical-documentation:unit/understand-metered-usage',
-        ],
-        apiReferenceTargets: [
-            organizationBillingAccountApiReferenceTarget(),
-            organizationSubscriptionsApiReferenceTarget(),
-        ],
+        apiReferenceTargets: [auditLogsApiReferenceTarget()],
     },
     'technical-documentation:unit/integrations': {
         kind: TechnicalDocumentationUnitKind.ORIENTATION,
@@ -1365,6 +1322,17 @@ export const ENGINE_CONTENT_UNIT_DEFINITIONS = Object.freeze({
             'technical-documentation:unit/api-keys',
             'technical-documentation:unit/common-rest-api',
         ],
+        /*
+         * The FIRST asset any engine page has ever requested (#474), and deliberately the deterministic
+         * one rather than a screenshot: it materializes offline, from a frozen definition, with no
+         * browser, no provisioned tenant and no live stack — so the asset path is exercised on every
+         * publication rather than only where a capture happens to be available.
+         *
+         * It belongs on this page because the diagram IS this page: a client sending an authenticated
+         * request through the application API to a documented resource is what "send your first
+         * request" describes in prose.
+         */
+        assetRequests: [createTechnicalDocumentationApplicationRequestDiagramAssetRequest()],
     },
     'technical-documentation:unit/common-rest-api': {
         kind: TechnicalDocumentationUnitKind.CONCEPT,
@@ -1863,6 +1831,18 @@ function resolveApplicationIntegrationMarkdown(markdown, declaredSourceRefs, fac
         presentationFor: (resolved, selector) => resolved.presentations[selector],
     });
 }
+/** What this application is FOR: its own resources, grouped as it groups them. Presentations only. */
+function resolveApplicationDomainMarkdown(markdown, declaredSourceRefs, fact) {
+    return resolveSelectorProjectionMarkdown({
+        markdown,
+        declaredSourceRefs,
+        sourceRef: APPLICATION_DOMAIN_DOCUMENTATION_SOURCE_REF,
+        label: 'application-domain',
+        fact,
+        selectorPattern: APPLICATION_DOMAIN_TOKEN_PATTERN,
+        presentationFor: (resolved, selector) => resolved.presentations[selector],
+    });
+}
 /** Who may perform each administrative action here. Presentations only. */
 function resolveApplicationAdministrationMarkdown(markdown, declaredSourceRefs, fact) {
     return resolveSelectorProjectionMarkdown({
@@ -1926,8 +1906,9 @@ export function projectEngineApplicationConsumerContentBundle(bundle, engineSpec
         const resolvedApplicationAuthentication = resolveApplicationAuthenticationMarkdown(resolvedApplicationConnection.markdown, identity.sourceRefs, applicationFacts.authentication);
         const resolvedApplicationAdministration = resolveApplicationAdministrationMarkdown(resolvedApplicationAuthentication.markdown, identity.sourceRefs, applicationFacts.administration);
         const resolvedApplicationIntegration = resolveApplicationIntegrationMarkdown(resolvedApplicationAdministration.markdown, identity.sourceRefs, applicationFacts.integration);
+        const resolvedApplicationDomain = resolveApplicationDomainMarkdown(resolvedApplicationIntegration.markdown, identity.sourceRefs, applicationFacts.domain);
         return [identity.unitRef, {
-                parsed: parseEngineMarkdown(resolvedApplicationIntegration.markdown, identity.unitRef),
+                parsed: parseEngineMarkdown(resolvedApplicationDomain.markdown, identity.unitRef),
                 resolvedConsumerFacts,
                 resolvedApplicationOrganizationRoles,
                 resolvedApplicationOrganizationUnitResources,
@@ -1935,6 +1916,7 @@ export function projectEngineApplicationConsumerContentBundle(bundle, engineSpec
                 resolvedApplicationAuthentication,
                 resolvedApplicationAdministration,
                 resolvedApplicationIntegration,
+                resolvedApplicationDomain,
             }];
     }));
     const relatedTargetByUnitRef = new Map(bundle.manifest.units.map((identity) => {
@@ -1956,66 +1938,121 @@ export function projectEngineApplicationConsumerContentBundle(bundle, engineSpec
                 },
             }];
     }));
-    return bundle.manifest.units.map((identity) => {
-        const definition = unitDefinitions[identity.unitRef];
-        if (definition === undefined)
-            throw new Error(`unsupported engine application-consumer content unit ${identity.unitRef}`);
-        const content = parsedContentByUnitRef.get(identity.unitRef);
-        if (content === undefined)
-            throw new Error(`engine content ${identity.unitRef} has no parsed content`);
-        const { parsed, resolvedConsumerFacts, resolvedApplicationOrganizationRoles, resolvedApplicationOrganizationUnitResources, resolvedApplicationConnection, resolvedApplicationAuthentication, resolvedApplicationAdministration, resolvedApplicationIntegration } = content;
-        const unitSlug = identity.unitRef.slice(identity.unitRef.lastIndexOf('/') + 1);
-        const relatedTargets = resolveRelatedUnitLinkTargets(identity.unitRef, definition.relatedUnitRefs, relatedTargetByUnitRef);
-        const ownProvenance = identity.sourceRefs.map((sourceRef) => {
-            const fact = resolvedConsumerFacts.entriesBySourceRef.get(sourceRef);
-            const applicationProjection = resolvedApplicationOrganizationRoles.fact?.sourceRef === sourceRef
-                ? resolvedApplicationOrganizationRoles.fact
-                : resolvedApplicationOrganizationUnitResources.fact?.sourceRef === sourceRef
-                    ? resolvedApplicationOrganizationUnitResources.fact
-                    : resolvedApplicationConnection.fact?.sourceRef === sourceRef
-                        ? resolvedApplicationConnection.fact
-                        : resolvedApplicationAuthentication.fact?.sourceRef === sourceRef
-                            ? resolvedApplicationAuthentication.fact
-                            : resolvedApplicationAdministration.fact?.sourceRef === sourceRef
-                                ? resolvedApplicationAdministration.fact
-                                : undefined;
-            return {
-                sourceRef,
-                ownership: applicationProjection === undefined
-                    ? TechnicalDocumentationSourceOwnership.ENGINE_GENERIC_CONTENT
-                    : TechnicalDocumentationSourceOwnership.APPLICATION_COMPANION_PROJECTION,
-                classification: TechnicalDocumentationSourceClassification.PUBLIC,
-                /*
-                 * A companion projection carries its own version; a curated engine fact takes the
-                 * catalog projector's; authored engine content takes the content bundle's. All three
-                 * were sha256 values until 2026-08-27 and none of them was ever compared to anything
-                 * except another copy of itself.
-                 */
-                sourceVersion: applicationProjection?.sourceVersion
-                    ?? (fact === undefined ? bundle.identity.contentBundleVersion : engineSpecificationCatalog.identity.projectorVersion),
-                sourceAnchorRef: null,
-            };
-        });
+    /*
+     * The generated tier.
+     *
+     * Every unit above is AUTHORED: a Markdown file in the content module, a definition beside it,
+     * and a fixed route. That is the right shape for a page whose text an engine owns, and the wrong
+     * one for a page PER RESOURCE — the resources belong to the application, and an engine that
+     * authored a page for each possible one would be authoring the application.
+     *
+     * So these units are projected whole, from the same domain fact the overview page uses. They are
+     * still ENGINE units, and deliberately: the engine owns the page's shape, its sections and its
+     * words, while the application supplies only the subject. That is what keeps `pathForUnit`'s
+     * refusal of application-owned units intact — nothing here asks it to route a unit an
+     * application named.
+     */
+    const generatedResourceUnits = (applicationFacts.domain?.resourcePages ?? []).map((page) => {
+        const unitRef = applicationDomainResourcePageUnitRef(page.resourceIdentifier);
+        const parsed = parseEngineMarkdown(page.markdown, unitRef);
+        const unitSlug = page.resourceIdentifier;
         return createTechnicalDocumentationUnitV1({
             schemaVersion: 1,
-            unitRef: identity.unitRef,
+            unitRef,
             unitVersion: 1,
-            kind: definition.kind,
-            readerAudiences: [...definition.readerAudiences],
+            kind: GENERATED_RESOURCE_UNIT_DEFINITION.kind,
+            readerAudiences: [...GENERATED_RESOURCE_UNIT_DEFINITION.readerAudiences],
             title: parsed.title,
             summary: parsed.summary,
             sections: parsed.sections.map((section, index) => ({
-                sectionRef: `technical-documentation:section/${unitSlug}-${index + 1}`,
+                sectionRef: `technical-documentation:section/manages-${unitSlug}-${index + 1}`,
                 heading: section.heading,
                 bodyMarkdown: section.bodyMarkdown,
             })),
-            links: [...relatedLinks(identity.unitRef, relatedTargets), ...apiReferenceLinks(identity.unitRef, definition.apiReferenceTargets ?? [])],
-            provenance: mergeProvenance(ownProvenance, relatedTargets),
-            applicabilityRequirements: [...definition.applicabilityRequirements],
-            accessClass: definition.accessClass,
-            editorialStatus: TechnicalDocumentationEditorialStatus.APPROVED,
-            assetRequests: [],
+            links: [],
+            /*
+             * Wholly application-projected: unlike an authored page carrying a token, there is no engine
+             * Markdown behind this one. Recording it as engine content would misattribute the only thing
+             * a reader might want to trace — where the words about their product came from.
+             */
+            provenance: [{
+                    sourceRef: APPLICATION_DOMAIN_DOCUMENTATION_SOURCE_REF,
+                    ownership: TechnicalDocumentationSourceOwnership.APPLICATION_COMPANION_PROJECTION,
+                    classification: TechnicalDocumentationSourceClassification.PUBLIC,
+                    sourceVersion: applicationFacts.domain?.sourceVersion ?? 1,
+                    sourceAnchorRef: null,
+                }],
+            /*
+             * No applicability requirement, because the unit's EXISTENCE is the evidence: it is emitted
+             * only for a resource the application actually publishes. A requirement here would be a
+             * second, weaker statement of the same fact.
+             */
+            applicabilityRequirements: [],
+            accessClass: GENERATED_RESOURCE_UNIT_DEFINITION.accessClass,
+            editorialStatus: GENERATED_RESOURCE_UNIT_DEFINITION.editorialStatus ?? TechnicalDocumentationEditorialStatus.APPROVED,
+            assetRequests: [...GENERATED_RESOURCE_UNIT_DEFINITION.assetRequests ?? []],
         });
-    }).sort((left, right) => left.unitRef.localeCompare(right.unitRef, 'en-US'));
+    });
+    return [...bundle.manifest.units.map((identity) => {
+            const definition = unitDefinitions[identity.unitRef];
+            if (definition === undefined)
+                throw new Error(`unsupported engine application-consumer content unit ${identity.unitRef}`);
+            const content = parsedContentByUnitRef.get(identity.unitRef);
+            if (content === undefined)
+                throw new Error(`engine content ${identity.unitRef} has no parsed content`);
+            const { parsed, resolvedConsumerFacts, resolvedApplicationOrganizationRoles, resolvedApplicationOrganizationUnitResources, resolvedApplicationConnection, resolvedApplicationAuthentication, resolvedApplicationAdministration, resolvedApplicationIntegration, resolvedApplicationDomain } = content;
+            const unitSlug = identity.unitRef.slice(identity.unitRef.lastIndexOf('/') + 1);
+            const relatedTargets = resolveRelatedUnitLinkTargets(identity.unitRef, definition.relatedUnitRefs, relatedTargetByUnitRef);
+            const ownProvenance = identity.sourceRefs.map((sourceRef) => {
+                const fact = resolvedConsumerFacts.entriesBySourceRef.get(sourceRef);
+                const applicationProjection = resolvedApplicationOrganizationRoles.fact?.sourceRef === sourceRef
+                    ? resolvedApplicationOrganizationRoles.fact
+                    : resolvedApplicationOrganizationUnitResources.fact?.sourceRef === sourceRef
+                        ? resolvedApplicationOrganizationUnitResources.fact
+                        : resolvedApplicationConnection.fact?.sourceRef === sourceRef
+                            ? resolvedApplicationConnection.fact
+                            : resolvedApplicationAuthentication.fact?.sourceRef === sourceRef
+                                ? resolvedApplicationAuthentication.fact
+                                : resolvedApplicationAdministration.fact?.sourceRef === sourceRef
+                                    ? resolvedApplicationAdministration.fact
+                                    : undefined;
+                return {
+                    sourceRef,
+                    ownership: applicationProjection === undefined
+                        ? TechnicalDocumentationSourceOwnership.ENGINE_GENERIC_CONTENT
+                        : TechnicalDocumentationSourceOwnership.APPLICATION_COMPANION_PROJECTION,
+                    classification: TechnicalDocumentationSourceClassification.PUBLIC,
+                    /*
+                     * A companion projection carries its own version; a curated engine fact takes the
+                     * catalog projector's; authored engine content takes the content bundle's. All three
+                     * were sha256 values until 2026-08-27 and none of them was ever compared to anything
+                     * except another copy of itself.
+                     */
+                    sourceVersion: applicationProjection?.sourceVersion
+                        ?? (fact === undefined ? bundle.identity.contentBundleVersion : engineSpecificationCatalog.identity.projectorVersion),
+                    sourceAnchorRef: null,
+                };
+            });
+            return createTechnicalDocumentationUnitV1({
+                schemaVersion: 1,
+                unitRef: identity.unitRef,
+                unitVersion: 1,
+                kind: definition.kind,
+                readerAudiences: [...definition.readerAudiences],
+                title: parsed.title,
+                summary: parsed.summary,
+                sections: parsed.sections.map((section, index) => ({
+                    sectionRef: `technical-documentation:section/${unitSlug}-${index + 1}`,
+                    heading: section.heading,
+                    bodyMarkdown: section.bodyMarkdown,
+                })),
+                links: [...relatedLinks(identity.unitRef, relatedTargets), ...apiReferenceLinks(identity.unitRef, definition.apiReferenceTargets ?? [])],
+                provenance: mergeProvenance(ownProvenance, relatedTargets),
+                applicabilityRequirements: [...definition.applicabilityRequirements],
+                accessClass: definition.accessClass,
+                editorialStatus: definition.editorialStatus ?? TechnicalDocumentationEditorialStatus.APPROVED,
+                assetRequests: [...definition.assetRequests ?? []],
+            });
+        }), ...generatedResourceUnits].sort((left, right) => left.unitRef.localeCompare(right.unitRef, 'en-US'));
 }
 //# sourceMappingURL=technical-documentation-engine-content-bundle.js.map