intent: a roll-up's status is relinquished when its sum returns to zero

[delchev]

Fixes #7016

What

A rollups: entry with status: / statusWhenFull: / statusWhenPartial: moved the parent to PAID / PARTIAL as allocations arrived, but never moved it back. Deleting the only allocation of a PAID invoice left it PAID with Paid 0 / Balance = Payable, and invisible to the auto-settlement.

The roll-up now relinquishes the status it set, restoring the status it displaced (the second option in the issue, the one that is always right):

• The first move into a roll-up-owned status snapshots the status it displaces into a hidden, read-only INTEGER column on the parent, Displaced<Status> (IntentNaming.displacedStatusProperty; emitted by EdmIntentGenerator for every local parent of a capacity roll-up with a status, one per status relation).
• A sum back at zero restores it, only while the parent still holds one of the two roll-up-owned statuses (a manual void of a partially paid document is never undone), then clears the snapshot. A roll-up-owned status with no recorded predecessor is logged and left alone, never guessed.
• Every handler variant carries the branch - create, update, delete and rekey - since an allocation amended to 0 or re-parented away is the same situation as a deleted one. Both writes ride the same derived map into one updateDerived, so the parent's listeners see one -updated.
• No statusWhenEmpty key: a declared return status is wrong for every invoice paid straight from ISSUED and never CONFIRMED.

The column is hidden through a new isHiddenProperty flag, which is now the one thing the Harmonia templates consult to keep bookkeeping out of forms, lists and details blocks (replacing the literal ProcessIds name checks). ModelParameterProcessor sets it from the model and by name for ProcessIds, so a .model written before the flag existed still hides the stamps; the modeler's serializer carries unknown attributes through its generic pass. isReadOnlyProperty puts the column in the preserved-on-update set, so a full-row form save cannot null it.

Tests

• RollupAggregatesTest - the emitted snapshot / restore / warn branches.
• GlueRollupStatusTest - the descriptor names the column on every variant of a status roll-up and on none of a count roll-up.
• EdmIntentGeneratorTest - the parent carries the hidden column; child and nomenclature do not.
• ModelParameterProcessorTest - the flag from the model and by name.
• IntentEngineIT - generated-code shape of all four handlers + the .model column.
• IntentEmissionCoverageIT - a live scenario: pledge of 1000 OPEN, payment 1000 -> Paid 1000 / Balance 0 / SETTLED / DisplacedStatus = OPEN; delete the payment -> Paid 0 / Balance 1000 / OPEN / DisplacedStatus null; and no generated surface renders the column.

Locally: both ITs green (61 tests), full unit suites of engine-intent (993) and ide-template (87) green, formatter:validate and release-profile javadoc clean.

Docs

• dirigible.io: docs(intent): a roll-up's status is relinquished when its sum returns to zero dirigible-io/dirigible-io.github.io#222 (merged)
• intentfile.org: docs(glue): a roll-up's status is relinquished when its sum returns to zero IntentFile/intentfile.github.io#44, spec proposal 0030: Proposal 0030: a roll-up's status is relinquished, not only set IntentFile/intent-specification#60 (open)
• In-repo: engine-intent README, intent-assistant-guide.md, module CLAUDE.md, RollupIntent javadoc.

🤖 Generated with Claude Code