refactor(db): migrate career profile aggregate

Transfer the canonical career profile, revision history, and six relational child collections to provider-aware migration ownership. Preserve legacy JSON, ordered child data, indexes, and cascade semantics.

docs/audits/audit-remediation-backlog.md

@@ -558,7 +558,7 @@ SEC-008 implements the same durable state machine with `<final>.uploading` and `
 
 ### P3-1 — Reduce dual schema ownership incrementally
 
-**Status (2026-08-30): in progress.** All 49 model tables now have an executable, disjoint creation-owner classification. Twenty formerly reconciler-created tables—including authentication support, email-provider connections, CV persistence/history, job-workspace AI notes, append-only AI interactions, workflow checklists, cover-letter history, and durable interview preparation—have moved through additive provider-aware migrations with legacy-row preservation, downgrade/retry safety, startup-DDL removal, fresh SQLite runtime proof and generated MariaDB SQL. The Gmail decision migration also closes its missing MariaDB creation path. Fifteen startup-created tables remain; see `docs/verification/jt-019-schema-ownership.md` and V-194–V-206.
+**Status (2026-08-30): in progress.** All 49 model tables now have an executable, disjoint creation-owner classification. Twenty-eight formerly reconciler-created tables—including authentication support, email-provider connections, CV persistence/history, job-workspace AI notes, append-only AI interactions, workflow checklists, cover-letter history, durable interview preparation, and the complete Career Profile aggregate—have moved through additive provider-aware migrations with legacy-row preservation, downgrade/retry safety, startup-DDL removal, fresh SQLite runtime proof and generated MariaDB SQL. The Gmail decision migration also closes its missing MariaDB creation path. Only the seven ASP.NET Identity tables remain startup-created; see `docs/verification/jt-019-schema-ownership.md` and V-194–V-207.
 
 - **Findings/scope:** JT-019; inventory reconciler operations and move stable schema ownership to EF migrations in small steps.
 - **Dependencies:** provider upgrade fixtures and P2-2 restore safety.

docs/audits/verification-log.md

@@ -238,3 +238,4 @@ Output was reduced to filenames and commit counts. The token artifact appears un
 | V-204 | Ownership/migration chain; populated adoption/downgrade/retry; workflow/FK/index assertions; MariaDB script; full backend | Repository root / disposable local SQLite | Move application workflow checklist state to migration ownership without losing automatic or manual progress | PASS — focused ownership/migration 16/16; auto-completed system and pending manual items survive adoption, downgrade and re-upgrade; idempotency/order indexes exist; deleting the parent application cascades through checklist items; generated MariaDB SQL is provider-safe; startup no longer creates the table; full backend 732/732 | MariaDB SQL generated only; no provider account or production migration. Guarded malformed-empty/index/auto-increment repair remains temporarily. Seventeen reconciler-owned tables remain | JT-019 checklist transfer complete; cover-letter and interview-preparation tables continue incrementally |
 | V-205 | Ownership/migration chain; populated adoption/downgrade/retry; document/FK/index assertions; MariaDB script; full backend | Repository root / disposable local SQLite | Move append-only cover-letter revision history to migration ownership without losing recoverable documents | PASS — focused ownership/migration 17/17; manual and AI revisions plus source/action metadata survive adoption, downgrade and re-upgrade; owner/job/version index exists; deleting the parent application cascades through history; generated MariaDB SQL is provider-safe; startup no longer creates the table; full backend 733/733 | MariaDB SQL generated only; no provider account or production migration. Guarded malformed-empty/index/auto-increment repair remains temporarily. Sixteen reconciler-owned tables remain | JT-019 cover-letter history transfer complete; interview-preparation items and career-profile aggregate continue incrementally |
 | V-206 | Ownership/migration chain; populated adoption/downgrade/retry; practice-state/FK/index assertions; MariaDB script; full backend | Repository root / disposable local SQLite | Move durable interview-preparation items to migration ownership without losing user or AI preparation content | PASS — focused ownership/migration 18/18; user-authored and AI-generated questions, answers, prepared state and source metadata survive adoption, downgrade and re-upgrade; owner/job/sort index exists; deleting the parent application cascades through preparation items; generated MariaDB SQL is provider-safe; startup no longer creates the table; full backend 734/734 | MariaDB SQL generated only; no provider account or production migration. Guarded malformed-empty/index/auto-increment repair remains temporarily. Fifteen reconciler-owned tables remain | JT-019 feature-table transfers complete; the Career Profile aggregate and Identity group remain dependency-aware batches |
+| V-207 | Ownership/migration chain; populated aggregate adoption/downgrade/retry; JSON/text/FK/index assertions; MariaDB script; full backend | Repository root / disposable local SQLite | Move the canonical Career Profile, append-only history, and six relational child types to migration ownership without losing career data | PASS — focused ownership/migration 19/19; canonical and long-tail JSON, Norwegian text, version history, experience, education, skill, project, certification and language rows survive adoption, downgrade and re-upgrade; all 14 aggregate indexes exist; deleting the profile cascades through history and children; generated MariaDB SQL uses bounded indexed keys and provider-safe types; startup creates none of the eight tables; full backend 735/735 | MariaDB SQL generated only; no production migration. Guarded historical LongTailJson/index/auto-increment repairs remain temporarily. Seven reconciler-owned Identity tables remain | JT-019 feature and career transfers complete; isolate the Identity ownership boundary next |

docs/infrastructure/database-ownership.md

@@ -40,9 +40,7 @@ Neither a single reconciliation position nor one shared provider sequence works:
 
 - **Pass 1 must come first.** A legacy database has hand-added columns and Identity tables that
   predate the migrations; without repairing them (and stamping the legacy migration id into
-  `__EFMigrationsHistory`) `Migrate()` collides with them. `AddCareerProfileRelationalChildren` also
-  adds children that reference `CareerProfiles`, a **reconciler-owned** table — so it must exist
-  before migrations run.
+  `__EFMigrationsHistory`) `Migrate()` collides with them.
 - **The final pass must come after.** On a brand-new database the migration-owned tables do not exist during
   pass 1, so every reconciler table that references one (FK into `JobApplications`) is skipped, as
   are the index and `AUTO_INCREMENT` repairs.
@@ -67,7 +65,9 @@ already-correct database. Two consequences worth knowing:
 Created by EF migrations, never by the reconciler:
 
 `AccountDeletionFiles`, `AccountDeletionRequests`, `AiInteractions`, `AiUsageRecords`, `AiWorkspaceNotes`,
-`ApplicationChecklistItems`, `Attachments`, `Companies`, `CoverLetterVersions`,
+`ApplicationChecklistItems`, `Attachments`, `CareerCertifications`, `CareerEducations`,
+`CareerExperiences`, `CareerLanguages`, `CareerProfiles`, `CareerProfileVersions`, `CareerProjects`,
+`CareerSkills`, `Companies`, `CoverLetterVersions`,
 `Correspondences`, `CvExtractionRuns`, `CvUploadArtifacts`, `CvVariants`, `CvVariantVersions`,
 `EmailDrafts`, `EmailSendAttempts`, `GmailConnections`,
 `GmailReviewDecisions`, `ImapConnections`, `InterviewPrepItems`, `InterviewPrepNotes`, `JobApplications`, `JobEvents`, `Jobs`,
@@ -127,6 +127,11 @@ remains cascading.
 AI-generated questions, answers, preparation state, sources, and ordering are retained; application
 deletion remains cascading.
 
+The Career Profile aggregate (`CareerProfiles`, `CareerProfileVersions`, and all six relational
+child tables) moved in `20260830133000_AdoptCareerProfileSchema`. Canonical/long-tail JSON,
+append-only history, stable child keys and ordering are retained; bounded MariaDB owner/item keys
+keep all aggregate indexes provider-safe.
+
 The reconciler may **repair** these (add a missing column, add an index, fix a non-`AUTO_INCREMENT`
 primary key) and may seed the default `RuleSettings` row — but it must never `CREATE TABLE` them.
 It used to create `RuleSettings`, which is precisely why a clean install failed with
@@ -134,12 +139,7 @@ It used to create `RuleSettings`, which is precisely why a clean install failed
 
 ### Reconciler-owned
 
-Created by `StartupInitializationExtensions`, with a **no-op migration** holding the model snapshot:
-
-`CareerProfiles`, `CareerProfileVersions`, the six CareerProfile children (`CareerExperiences`,
-`CareerEducations`, `CareerSkills`, `CareerProjects`, `CareerCertifications`, `CareerLanguages`).
-
-The seven ASP.NET Identity tables are also currently reconciler-owned, despite older wording that
+The seven ASP.NET Identity tables are currently reconciler-owned, despite older wording that
 called them migration-owned: `AspNetRoles`, `AspNetUsers`, `AspNetRoleClaims`, `AspNetUserClaims`,
 `AspNetUserLogins`, `AspNetUserRoles`, and `AspNetUserTokens`. Guarded migration bootstraps for
 `AspNetUsers` supports standalone traversal but does not yet transfer ownership. The historical
@@ -153,11 +153,11 @@ No-op migrations, each with a comment explaining why:
 
 | Migration | Tables |
 |---|---|
-| `20260717222917_AddCareerProfileRelationalChildren` | the six CareerProfile children |
+| `20260717222917_AddCareerProfileRelationalChildren` | historical no-op; ownership transferred by `20260830133000_AdoptCareerProfileSchema` |
 | `20260718074509_AddCvVariants` | historical no-op; ownership transferred by `20260830128000_AdoptCvVariantSchema` |
 | `20260718131138_AddAiInteractions` | historical no-op; ownership transferred by `20260830129000_AdoptAiInteractionSchema` |
 | `20260719085904_AddApplicationChecklistItems` | historical no-op; ownership transferred by `20260830130000_AdoptApplicationChecklistSchema` |
-| `20260719094728_SyncCareerChildKeyLengths` | snapshot sync only |
+| `20260719094728_SyncCareerChildKeyLengths` | historical snapshot sync; ownership transferred by `20260830133000_AdoptCareerProfileSchema` |
 | `20260719120954_AddCoverLetterVersions` | historical no-op; ownership transferred by `20260830131000_AdoptCoverLetterVersionSchema` |
 | `20260719145044_AddInterviewPrepItems` | historical no-op; ownership transferred by `20260830132000_AdoptInterviewPrepItemSchema` |
 
@@ -170,7 +170,7 @@ skips it on a fresh database and pass 2 creates it:
 |---|---|
 | `TailoredCvDrafts`, `InterviewPrepNotes`, `AiWorkspaceNotes`, `CvVariants`, `AiInteractions`, `ApplicationChecklistItems`, `CoverLetterVersions`, `InterviewPrepItems` | `JobApplications` (migration-owned) |
 | `CvVariantVersions` | `CvVariants` |
-| `CareerProfileVersions`, the six CareerProfile children | `CareerProfiles` |
+| `CareerProfileVersions`, the six CareerProfile children | `CareerProfiles` (migration-owned) |
 | `CvExtractionRuns` | `CvUploadArtifacts` |
 
 Index creation goes through one helper, `EnsureMySqlIndex`, which is guarded on **table** existence

docs/verification/jt-019-schema-ownership.md

@@ -41,6 +41,9 @@ cohesive table groups. It does not attempt to delete the legacy reconciler whole
   manual and AI-approved text plus source/action metadata.
 - Added `20260830132000_AdoptInterviewPrepItemSchema` for durable interview-practice content,
   retaining user and AI questions, answers, prepared state, source metadata, and ordering.
+- Added `20260830133000_AdoptCareerProfileSchema` for the canonical profile, append-only history,
+  and all six ordered relational child types. Legacy JSON, Norwegian text, stable keys, and cascade
+  ownership are retained.
 - Corrected the ownership runbook: new tables now default to migrations; the reconciler is legacy
   compatibility code to retire one dependency group at a time.
 
@@ -81,14 +84,17 @@ migration.
 - Representative user-authored and AI-generated interview-preparation items survive adoption,
   downgrade, and re-upgrade with practice state intact; their ordering index and application cascade
   remain effective.
+- A populated Career Profile with history, long-tail JSON, Norwegian text, experience, education,
+  skills, projects, certifications, and languages survives adoption, downgrade, and re-upgrade; all
+  14 aggregate indexes and parent cascades remain effective.
 - Generated MariaDB SQL contains the provider-correct `SystemEmailSettings` DDL.
-- Full backend: 734/734 passed after the interview-preparation transfer.
+- Full backend: 735/735 passed after the Career Profile aggregate transfer.
 - Fresh application startup over a new disposable SQLite database applied
   `20260830120000_AdoptSystemEmailSettingsSchema` and reached the healthy listening state.
 
 ## Remaining JT-019 work
 
-Fifteen model tables remain startup-created: the Career Profile aggregate and Identity group.
+Seven model tables remain startup-created: the ASP.NET Identity group.
 with parent dependencies. Transfer them in small dependency-aware migrations with blank, populated,
 retry and MariaDB runtime proof. Column/index repairs must remain until historical upgrade fixtures
 prove each one redundant.

docs/work-programmes/master-progress.md

@@ -56,6 +56,7 @@ Updated: 2026-08-30
 - Moved application checklist workflow state into a provider-aware migration; system-key idempotency, manual tasks, ordering, completion state, and application cascades are preserved.
 - Moved append-only cover-letter revision history into a provider-aware migration; manual and AI text, source/action metadata, ordering, and application cascades are preserved.
 - Moved durable interview-preparation items into a provider-aware migration; user and AI content, answers, practice state, sources, ordering, and application cascades are preserved.
+- Moved the complete Career Profile aggregate into a provider-aware migration; canonical and long-tail JSON, version history, all six relational child types, stable ordering, indexes, and cascades are preserved.
 
 ### In progress
 
@@ -86,7 +87,7 @@ Updated: 2026-08-30
 - Focused frontend: 2 suites, 6 tests passed.
 - Full frontend: 64 suites, 272 tests passed.
 - Next production build and TypeScript: passed.
-- Full backend: 734/734 tests passed after the interview-preparation JT-019 transfer.
+- Full backend: 735/735 tests passed after the Career Profile aggregate JT-019 transfer.
 - Portable Playwright launcher: resolved the user-local .NET 9 SDK; backend Release build passed with 0 warnings/errors.
 - Playwright: initial full run 9/10 exposed the intentional mobile Settings control change; updated focused rerun passed 1/1. A final complete browser rerun remains in the end-of-batch gate.
 - Focused backend match/intelligence verification: 34/34 passed.