test(codegen-compile): fold the adopter-build shapes into the shared fitness model

The codegen-compile gate compiles every port's output from
fixtures/persistence-conformance/canonical/meta.fitness.json. Shapes an
adopter app's build broke on were never in it, so the fixes for them were
held by nothing. Folded INTO the one model, not a second one (AGENTS.md:
"a second kitchen sink would drift"):

- ReferralAuth, a fourth TPH subtype, is the target of an identity.reference
  and of an M:N (Post.referrals through the new PostReferral junction),
  declares an M:N of its own (ReferralAuth.posts), and has a @required +
  @default field (urgency). Subtype-as-FK/M:N-target once emitted an import
  of a table a subtype does not have (TS) and a migration that dropped the FK;
  @default on a required subtype field desynced the TS interface from Zod.
- ProgramView.status restates Program.status through `extends` instead of
  repeating @values. That once emitted a C# enum type colliding with its own
  property.

Kept on a subtype no persistence scenario reads, so no existing scenario row
changes. The schema artifact is regenerated (the FK onto the subtype lands on
"auths"; urgency carries no DB default, per the subtype-only-column rule),
the bootstrap migration expects post_referrals and that FK, and the C#
integration fixtures are regenerated (ProgramView.Status is now non-nullable:
it inherits Program.status's @required, per ADR-0039).

All five compile gates are green on the widened model - the earlier fixes
hold, and now something holds them. Verified: TS compile gate 2/0 + schema
artifact/migration/query/oracle 46/0; C# compile gate + drift 3/0, C#
integration 36/0; Java compile gate + names 18/0, integration-tests 138/0;
Kotlin compile gate 1/0, integration-tests-kotlin 160/0 (incl. the
generated-vs-reference table check); Python compile gate + CLI 113/0, query
scenarios 28/0.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01EaGv4zNk4oT7FooD4eK5MD

Author: dmealing

docs/CONFORMANCE.md

@@ -84,11 +84,13 @@ manifest contains without moving the boundary between the two halves.
 
 - *Not a corpus, so it has no row.* It reuses
   `fixtures/persistence-conformance/canonical/meta.fitness.json` rather than adding a
-  kitchen sink beside the one that already exists — 16 entities, two view-backed
-  projections, two M:N junctions including a self-join, a 4-entity TPH hierarchy, jsonb,
-  isArray, currency, decimal, and `AllTypes` carrying every persistable field subtype.
-  A second such model would drift from the first, and this one is maintained by the
-  other corpora already.
+  kitchen sink beside the one that already exists — 18 entities, two view-backed
+  projections (one restating an entity's enum through `extends`), M:N junctions including
+  a self-join, a 5-entity TPH hierarchy whose subtypes are an FK and M:N target and declare
+  an M:N of their own, a `@required` + `@default` subtype field, jsonb, isArray, currency,
+  decimal, and `AllTypes` carrying every persistable field subtype. A second such model
+  would drift from the first, and this one is maintained by the other corpora already.
+  Shapes an adopter's build tripped over are folded INTO it, not into a second model.
 - *Why it exists.* Every corpus above gates BEHAVIOUR. None asks whether the emitted
   code builds — so four "generated code does not compile" defects shipped in 1.0.4 with
   the whole matrix green, because `gen` exits 0 in all four cases and the adopter's

fixtures/persistence-conformance/README.md

@@ -203,6 +203,15 @@ TPH behavior is gated separately by the **api-contract** generated-controller la
 (e.g. Kotlin's `TphGeneratedApiContractConformanceTest` boots the unmodified
 generated controller over HTTP).
 
+A fourth subtype, `ReferralAuth`, is in the model for the **codegen-compile gate**, not
+for these scenarios, and no `tph-*` scenario touches it. It carries the shapes an
+adopter's build broke on: it is the target of an `identity.reference` and of an M:N
+(`Post.referrals` through `PostReferral`), it declares an M:N of its own
+(`ReferralAuth.posts`), and it has a `@required` + `@default` field (`urgency`).
+`ProgramView.status` restates `Program.status` through `extends` for the same reason.
+Keeping these shapes on a subtype no scenario reads means existing scenario rows do not
+change.
+
 ### `op: roundtrip` — runtime WRITE round-trip
 
 `roundtrip` is the **all-types write** gate: the runner INSERTS the `insert:` row

fixtures/persistence-conformance/canonical/meta.fitness.json

@@ -73,7 +73,7 @@
           { "field.long":   { "name": "id", "extends": "Program.id",
                               "children": [ { "origin.passthrough": { "@from": "Program.id" } } ] } },
           { "field.string": { "name": "title",  "children": [ { "origin.passthrough": { "@from": "Program.title" } } ] } },
-          { "field.enum":   { "name": "status", "@values": ["DRAFT", "PUBLISHED", "ARCHIVED"],
+          { "field.enum":   { "name": "status", "extends": "Program.status",
                               "children": [ { "origin.passthrough": { "@from": "Program.status" } } ] } },
           { "identity.primary": { "name": "id", "extends": "Program.id", "@fields": "id" } }
         ]
@@ -115,6 +115,7 @@
           { "field.long":   { "name": "id" } },
           { "field.string": { "name": "title", "@required": true, "@maxLength": 200 } },
           { "relationship.association": { "name": "tags", "@cardinality": "many", "@objectRef": "Tag", "@through": "PostTag" } },
+          { "relationship.association": { "name": "referrals", "@cardinality": "many", "@objectRef": "ReferralAuth", "@through": "PostReferral" } },
           { "identity.primary": { "name": "id", "@fields": "id", "@generation": "increment" } }
         ]
       }},
@@ -179,7 +180,7 @@
         "children": [
           { "source.rdb": { "@table": "auths" } },
           { "field.long":   { "name": "id" } },
-          { "field.enum":   { "name": "type", "@values": ["Bridge", "Copay", "PriorAuth"] } },
+          { "field.enum":   { "name": "type", "@values": ["Bridge", "Copay", "PriorAuth", "Referral"] } },
           { "field.string": { "name": "reference", "@required": true, "@maxLength": 80 } },
           { "identity.primary": { "name": "id", "@fields": "id", "@generation": "increment" } }
         ]
@@ -208,6 +209,26 @@
           { "field.string": { "name": "approver", "@maxLength": 80 } }
         ]
       }},
+      { "object.entity": {
+        "name": "ReferralAuth",
+        "extends": "Auth",
+        "@discriminatorValue": "Referral",
+        "children": [
+          { "field.string": { "name": "urgency", "@required": true, "@default": "routine", "@maxLength": 16 } },
+          { "relationship.association": { "name": "posts", "@cardinality": "many", "@objectRef": "Post", "@through": "PostReferral" } }
+        ]
+      }},
+      { "object.entity": {
+        "name": "PostReferral",
+        "children": [
+          { "source.rdb": { "@table": "post_referrals" } },
+          { "field.long": { "name": "postId",     "@required": true } },
+          { "field.long": { "name": "referralId", "@required": true } },
+          { "identity.primary":   { "name": "id", "@fields": ["postId", "referralId"] } },
+          { "identity.reference": { "name": "fkPost",     "@fields": "postId",     "@references": "Post" } },
+          { "identity.reference": { "name": "fkReferral", "@fields": "referralId", "@references": "ReferralAuth" } }
+        ]
+      }},
       { "object.value": {
         "name": "Settings",
         "children": [

fixtures/persistence-conformance/canonical/schema.postgres.sql

@@ -93,8 +93,15 @@ CREATE TABLE "auths" (
   "quantity" INTEGER,
   "copayAmount" NUMERIC(10,2),
   "approver" VARCHAR(80),
+  "urgency" VARCHAR(16),
   CONSTRAINT "auths_pkey" PRIMARY KEY ("id"),
-  CONSTRAINT "auths_type_chk" CHECK ("type" IN ('Bridge', 'Copay', 'PriorAuth'))
+  CONSTRAINT "auths_type_chk" CHECK ("type" IN ('Bridge', 'Copay', 'PriorAuth', 'Referral'))
+);
+
+CREATE TABLE "post_referrals" (
+  "postId" BIGINT NOT NULL,
+  "referralId" BIGINT NOT NULL,
+  CONSTRAINT "post_referrals_pkey" PRIMARY KEY ("postId", "referralId")
 );
 
 CREATE TABLE "all_types" (
@@ -144,6 +151,10 @@ ALTER TABLE "friendships" ADD CONSTRAINT "friendships_personAId_fk" FOREIGN KEY
 
 ALTER TABLE "friendships" ADD CONSTRAINT "friendships_personBId_fk" FOREIGN KEY ("personBId") REFERENCES "people" ("id");
 
+ALTER TABLE "post_referrals" ADD CONSTRAINT "post_referrals_postId_fk" FOREIGN KEY ("postId") REFERENCES "posts" ("id");
+
+ALTER TABLE "post_referrals" ADD CONSTRAINT "post_referrals_referralId_fk" FOREIGN KEY ("referralId") REFERENCES "auths" ("id");
+
 CREATE VIEW "v_program" AS
   SELECT
     p.id AS id,

fixtures/persistence-conformance/migrations/bootstrap-canonical-from-empty.yaml

@@ -47,6 +47,8 @@ expect:
     - 'CHECK ("intEnumVal" IN (0, 5, 9))'
     - 'CREATE UNIQUE INDEX "byTitle" ON "programs" ("title");'
     - 'ALTER TABLE "weeks" ADD CONSTRAINT "weeks_programId_fk"'
+    # An identity.reference onto a TPH subtype binds the base's table (a subtype has none).
+    - 'ALTER TABLE "post_referrals" ADD CONSTRAINT "post_referrals_referralId_fk" FOREIGN KEY ("referralId") REFERENCES "auths" ("id")'
     # Match both TS (`CREATE VIEW`) and C# (`CREATE OR REPLACE VIEW`, idempotent)
     # via the common suffix substring.
     - 'VIEW "v_program" AS'
@@ -71,6 +73,9 @@ expect:
       - { table_name: "measurements" }
       - { table_name: "nodes" }
       - { table_name: "people" }
+      # post_referrals: an M:N junction whose second reference targets a TPH SUBTYPE
+      # (ReferralAuth) — its FK must land on the base's single table, "auths".
+      - { table_name: "post_referrals" }
       - { table_name: "post_tags" }
       - { table_name: "posts" }
       - { table_name: "programs" }

server/csharp/MetaObjects.Codegen.Tests/CodegenCompileConformanceTests.cs

@@ -21,8 +21,8 @@
 // WHY THIS IS NOT DbContextCompileTests. That test compiles a HAND-BUILT model chosen to
 // corner specific EF API surfaces, and it is the right tool for that. This one compiles
 // the shared corpus every other port also generates from, so a defect that needs the real
-// model's shape — 16 entities resolving against each other, two view-backed projections,
-// a self-joining M:N, a 4-entity TPH hierarchy — is caught by the same fixture in five
+// model's shape — 18 entities resolving against each other, two view-backed projections,
+// a self-joining M:N, a 5-entity TPH hierarchy with a subtype as an FK / M:N target — is caught by the same fixture in five
 // languages rather than by whichever port happened to hand-write a case for it.
 //
 // WHY THIS IS NOT IntegrationFixtureDriftTests. That one already loads this corpus and

server/csharp/MetaObjects.IntegrationTests/Generated/AppDbContext.g.cs

@@ -18,6 +18,7 @@ public AppDbContext(DbContextOptions<AppDbContext> options) : base(options) { }
     public DbSet<Node> Nodes { get; set; } = default!;
     public DbSet<Person> Persons { get; set; } = default!;
     public DbSet<Post> Posts { get; set; } = default!;
+    public DbSet<PostReferral> PostReferrals { get; set; } = default!;
     public DbSet<PostTag> PostTags { get; set; } = default!;
     public DbSet<Program> Programs { get; set; } = default!;
     public DbSet<ProgramStat> ProgramStats { get; set; } = default!;
@@ -45,14 +46,15 @@ protected override void OnModelCreating(ModelBuilder modelBuilder)
         modelBuilder.Entity<Asset>().Property(x => x.ExternalId).HasColumnType("uuid").HasConversion(v => System.Guid.Parse(v!), g => g.ToString("D"));
         modelBuilder.Entity<Asset>().Property(x => x.Payload).HasColumnType("jsonb");
         modelBuilder.Entity<Auth>().Property(x => x.Type).HasConversion<string>();
-        modelBuilder.Entity<Auth>().HasDiscriminator(e => e.Type).HasValue<BridgeAuth>(Auth.AuthType.Bridge).HasValue<CopayAuth>(Auth.AuthType.Copay).HasValue<PriorAuthAuth>(Auth.AuthType.PriorAuth);
+        modelBuilder.Entity<Auth>().HasDiscriminator(e => e.Type).HasValue<BridgeAuth>(Auth.AuthType.Bridge).HasValue<CopayAuth>(Auth.AuthType.Copay).HasValue<PriorAuthAuth>(Auth.AuthType.PriorAuth).HasValue<ReferralAuth>(Auth.AuthType.Referral);
         modelBuilder.Entity<Follow>().HasOne<Person>().WithMany().HasForeignKey(e => e.FollowerId).OnDelete(DeleteBehavior.NoAction);
         modelBuilder.Entity<Follow>().HasOne<Person>().WithMany().HasForeignKey(e => e.FolloweeId).OnDelete(DeleteBehavior.NoAction);
         modelBuilder.Entity<Friendship>().HasOne<Person>().WithMany().HasForeignKey(e => e.PersonAId).OnDelete(DeleteBehavior.NoAction);
         modelBuilder.Entity<Friendship>().HasOne<Person>().WithMany().HasForeignKey(e => e.PersonBId).OnDelete(DeleteBehavior.NoAction);
         modelBuilder.Entity<Measurement>().Property(x => x.PreciseKg).HasPrecision(9, 4);
         modelBuilder.Entity<Node>().HasOne<Node>().WithMany().HasForeignKey(e => e.ParentId).OnDelete(DeleteBehavior.NoAction);
         modelBuilder.Entity<Post>().HasMany(x => x.Tags).WithMany().UsingEntity<PostTag>(l => l.HasOne<Tag>().WithMany().HasForeignKey(j => j.TagId), r => r.HasOne<Post>().WithMany().HasForeignKey(j => j.PostId));
+        modelBuilder.Entity<Post>().HasMany(x => x.Referrals).WithMany().UsingEntity<PostReferral>(l => l.HasOne<ReferralAuth>().WithMany().HasForeignKey(j => j.ReferralId), r => r.HasOne<Post>().WithMany().HasForeignKey(j => j.PostId));
         modelBuilder.Entity<Program>().Property(x => x.Status).HasConversion<string>();
         modelBuilder.Entity<Program>().Property(x => x.CreatedAt).HasColumnType("timestamp without time zone");
         modelBuilder.Entity<Week>().HasOne<Program>().WithMany().HasForeignKey(e => e.ProgramId).OnDelete(DeleteBehavior.Cascade);

server/csharp/MetaObjects.IntegrationTests/Generated/Auth.g.cs

@@ -12,9 +12,10 @@ namespace MetaObjects.IntegrationTests.Generated;
 [System.Text.Json.Serialization.JsonDerivedType(typeof(BridgeAuth))]
 [System.Text.Json.Serialization.JsonDerivedType(typeof(CopayAuth))]
 [System.Text.Json.Serialization.JsonDerivedType(typeof(PriorAuthAuth))]
+[System.Text.Json.Serialization.JsonDerivedType(typeof(ReferralAuth))]
 public abstract class Auth
 {
-    public enum AuthType { Bridge, Copay, PriorAuth }
+    public enum AuthType { Bridge, Copay, PriorAuth, Referral }
     [Key]
     [Column(AuthNames.IdColumn)]
     public long Id { get; set; }

server/csharp/MetaObjects.IntegrationTests/Generated/Post.g.cs

@@ -20,4 +20,5 @@ public class Post
     [MinLength(1)]
     public string Title { get; set; } = default!;
     public ICollection<Tag> Tags { get; set; } = new List<Tag>();
+    public ICollection<ReferralAuth> Referrals { get; set; } = new List<ReferralAuth>();
 }

server/csharp/MetaObjects.IntegrationTests/Generated/PostReferral.g.cs

@@ -0,0 +1,20 @@
+// <auto-generated/>
+// Generated by MetaObjects entity-generator. Do not edit by hand.
+#nullable enable
+using System;
+using System.Collections.Generic;
+using System.ComponentModel.DataAnnotations;
+using System.ComponentModel.DataAnnotations.Schema;
+using Microsoft.EntityFrameworkCore;
+
+namespace MetaObjects.IntegrationTests.Generated;
+
+[PrimaryKey(nameof(PostId), nameof(ReferralId))]
+[Table(PostReferralNames.SourcePrimaryTable)]
+public class PostReferral
+{
+    [Column(PostReferralNames.PostIdColumn)]
+    public long PostId { get; set; }
+    [Column(PostReferralNames.ReferralIdColumn)]
+    public long ReferralId { get; set; }
+}