@jxsuite/starters 1.2.2 → 1.6.1

package/sites/professional-firm/project.schema.json

@@ -28,6 +28,10 @@
             "optimize": {
               "type": "boolean"
             },
+            "picture": {
+              "description": "Wrap a multi-format image in a <picture> with one <source> per format (default true). With it off the <img> carries a srcset in the preferred format alone, which browsers that cannot decode that format will still select from.",
+              "type": "boolean"
+            },
             "quality": {
               "properties": {
                 "avif": {
@@ -54,7 +58,10 @@
             },
             "service": {
               "description": "How images are optimized: \"build\" runs Sharp at build time; \"cloudflare\" emits /cdn-cgi/image transform URLs served by Cloudflare Image Transformations (requires the feature to be enabled on the serving zone).",
-              "enum": ["build", "cloudflare"],
+              "enum": [
+                "build",
+                "cloudflare"
+              ],
               "type": "string"
             },
             "sizes": {
@@ -98,11 +105,20 @@
               "type": "array"
             },
             "type": {
-              "enum": ["string", "number", "integer", "boolean", "array", "object"],
+              "enum": [
+                "string",
+                "number",
+                "integer",
+                "boolean",
+                "array",
+                "object"
+              ],
               "type": "string"
             }
           },
-          "required": ["type"],
+          "required": [
+            "type"
+          ],
           "type": "object"
         },
         "RelationshipRef": {
@@ -116,7 +132,9 @@
               "type": "string"
             }
           },
-          "required": ["$ref"],
+          "required": [
+            "$ref"
+          ],
           "type": "object"
         },
         "StyleObject": {
@@ -156,7 +174,9 @@
                     "type": "string"
                   }
                 },
-                "required": ["$ref"],
+                "required": [
+                  "$ref"
+                ],
                 "type": "object"
               },
               {
@@ -226,7 +246,13 @@
           "properties": {
             "adapter": {
               "description": "Platform adapter for deployment-specific output.",
-              "enum": ["static", "cloudflare-pages", "cloudflare-workers", "node", "bun"],
+              "enum": [
+                "static",
+                "cloudflare-pages",
+                "cloudflare-workers",
+                "node",
+                "bun"
+              ],
               "type": "string"
             },
             "deploy": {
@@ -248,17 +274,26 @@
                 },
                 "provider": {
                   "description": "Hosting provider the project is connected to.",
-                  "enum": ["cloudflare-pages"],
+                  "enum": [
+                    "cloudflare-pages"
+                  ],
                   "type": "string"
                 }
               },
-              "required": ["provider", "accountId", "projectName"],
+              "required": [
+                "provider",
+                "accountId",
+                "projectName"
+              ],
               "type": "object"
             },
             "format": {
               "default": "directory",
               "description": "Reserved; currently unused. Accepted for forward compatibility with single-file output (desktop single-file mode) — the build emits per-route directories regardless.",
-              "enum": ["directory", "single"],
+              "enum": [
+                "directory",
+                "single"
+              ],
               "type": "string"
             },
             "outDir": {
@@ -266,6 +301,167 @@
               "description": "Output directory for compiled site.",
               "type": "string"
             },
+            "headers": {
+              "additionalProperties": false,
+              "description": "Emit dist/_headers — the response headers only the build can know. Honored by Cloudflare Pages/Workers assets and Netlify; on the node/bun adapters the file documents what a reverse proxy in front of them must send.",
+              "properties": {
+                "cache": {
+                  "default": "auto",
+                  "description": "\"auto\" marks the content-addressed image variants immutable (RFC 8246) and revalidates everything else (RFC 9111). \"off\" emits no Cache-Control at all.",
+                  "enum": [
+                    "auto",
+                    "off"
+                  ],
+                  "type": "string"
+                },
+                "enabled": {
+                  "default": true,
+                  "type": "boolean"
+                },
+                "rules": {
+                  "additionalProperties": {
+                    "additionalProperties": {
+                      "type": "string"
+                    },
+                    "type": "object"
+                  },
+                  "description": "Verbatim rules, merged after the generated block.",
+                  "propertyNames": {
+                    "pattern": "^/"
+                  },
+                  "type": "object"
+                },
+                "security": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "contentTypeOptions": {
+                      "default": true,
+                      "type": "boolean"
+                    },
+                    "csp": {
+                      "default": false,
+                      "description": "CSP Level 3. Off by default: unlike the other security headers this one governs code the build cannot see — a third-party script that loads a second script, a widget that opens a frame — so turning it on is a change to verify in the browser console, not a safe default. `script-src` is derived from the inline scripts and external origins the build emitted; `style-src` keeps 'unsafe-inline', because per-page <style> blocks and per-element style attributes have no site-wide hash.",
+                      "oneOf": [
+                        {
+                          "type": "boolean"
+                        },
+                        {
+                          "const": "report-only"
+                        },
+                        {
+                          "additionalProperties": false,
+                          "properties": {
+                            "directives": {
+                              "additionalProperties": {
+                                "oneOf": [
+                                  {
+                                    "type": "string"
+                                  },
+                                  {
+                                    "const": false
+                                  }
+                                ]
+                              },
+                              "description": "Replace (string) or remove (false) a computed directive. A replacement is wholesale, so an addition restates the defaults.",
+                              "type": "object"
+                            },
+                            "mode": {
+                              "default": "enforce",
+                              "enum": [
+                                "enforce",
+                                "report-only"
+                              ]
+                            },
+                            "reportUri": {
+                              "format": "uri-reference",
+                              "type": "string"
+                            }
+                          },
+                          "type": "object"
+                        }
+                      ]
+                    },
+                    "frameOptions": {
+                      "default": "SAMEORIGIN",
+                      "oneOf": [
+                        {
+                          "enum": [
+                            "DENY",
+                            "SAMEORIGIN"
+                          ],
+                          "type": "string"
+                        },
+                        {
+                          "const": false
+                        }
+                      ]
+                    },
+                    "hsts": {
+                      "default": false,
+                      "description": "RFC 6797. Off by default: a wrong max-age locks the apex domain to HTTPS for that long, and the mistake is invisible until a certificate lapses. `preload` requires `includeSubDomains` and is a build error without it.",
+                      "oneOf": [
+                        {
+                          "type": "boolean"
+                        },
+                        {
+                          "additionalProperties": false,
+                          "properties": {
+                            "includeSubDomains": {
+                              "default": true,
+                              "type": "boolean"
+                            },
+                            "maxAge": {
+                              "default": 31536000,
+                              "minimum": 0,
+                              "type": "integer"
+                            },
+                            "preload": {
+                              "default": false,
+                              "type": "boolean"
+                            }
+                          },
+                          "type": "object"
+                        }
+                      ]
+                    },
+                    "permissionsPolicy": {
+                      "default": "camera=(), microphone=(), geolocation=()",
+                      "oneOf": [
+                        {
+                          "type": "string"
+                        },
+                        {
+                          "const": false
+                        }
+                      ]
+                    },
+                    "referrerPolicy": {
+                      "default": "strict-origin-when-cross-origin",
+                      "oneOf": [
+                        {
+                          "enum": [
+                            "no-referrer",
+                            "no-referrer-when-downgrade",
+                            "origin",
+                            "origin-when-cross-origin",
+                            "same-origin",
+                            "strict-origin",
+                            "strict-origin-when-cross-origin",
+                            "unsafe-url"
+                          ],
+                          "type": "string"
+                        },
+                        {
+                          "const": false
+                        }
+                      ]
+                    }
+                  },
+                  "type": "object"
+                }
+              },
+              "type": "object"
+            },
             "sitemap": {
               "default": true,
               "description": "Generate sitemap.xml from the route table (requires `url`). Set false to disable.",
@@ -274,7 +470,11 @@
             "trailingSlash": {
               "default": "always",
               "description": "Trailing slash behavior for generated URLs.",
-              "enum": ["always", "never", "ignore"],
+              "enum": [
+                "always",
+                "never",
+                "ignore"
+              ],
               "type": "string"
             }
           },
@@ -295,15 +495,26 @@
               "description": "Default charset for the page.",
               "type": "string"
             },
+            "dir": {
+              "description": "Base direction for the <html> element. Omitted when unset — a page's `$dir` overrides it. Right-to-left content renders left-to-right without this.",
+              "enum": [
+                "ltr",
+                "rtl",
+                "auto"
+              ],
+              "type": "string"
+            },
             "lang": {
               "default": "en",
-              "description": "Default lang attribute for the <html> element.",
+              "description": "Default lang attribute for the <html> element. A page's `$lang` overrides it.",
               "type": "string"
             },
             "layout": {
               "default": null,
               "description": "Default layout file path applied to all pages. Set to null to render pages without a layout.",
-              "examples": ["./layouts/base.json"],
+              "examples": [
+                "./layouts/base.json"
+              ],
               "oneOf": [
                 {
                   "type": "string"
@@ -312,37 +523,255 @@
                   "type": "null"
                 }
               ]
+            },
+            "shadow": {
+              "default": false,
+              "description": "Default shadow-DOM mode for every component (spec.md §16.6). Off unless set: a shadow root isolates component styles from the page and replaces the <slot> emulation with real slot distribution. A component's own `$shadow` overrides this in both directions.",
+              "oneOf": [
+                {
+                  "enum": [
+                    "open",
+                    "closed"
+                  ],
+                  "type": "string"
+                },
+                {
+                  "const": false,
+                  "type": "boolean"
+                }
+              ]
             }
           },
           "type": "object"
         },
         "extensions": {
           "description": "Extension packages: bare package names (resolved project-first through the package exports map) or relative paths. Each must export jx-extension.json.",
-          "examples": [["@jxsuite/parser"]],
+          "examples": [
+            [
+              "@jxsuite/parser"
+            ]
+          ],
           "items": {
             "type": "string"
           },
           "type": "array"
         },
+        "manifest": {
+          "additionalProperties": false,
+          "description": "W3C Web App Manifest, emitted as manifest.webmanifest with a <link rel=\"manifest\"> on every page. Absent means no manifest: it is a claim that a site is meant to be installed, and most are not.",
+          "properties": {
+            "backgroundColor": {
+              "type": "string"
+            },
+            "categories": {
+              "items": {
+                "type": "string"
+              },
+              "type": "array"
+            },
+            "description": {
+              "type": "string"
+            },
+            "dir": {
+              "enum": [
+                "ltr",
+                "rtl",
+                "auto"
+              ],
+              "type": "string"
+            },
+            "display": {
+              "default": "standalone",
+              "enum": [
+                "fullscreen",
+                "standalone",
+                "minimal-ui",
+                "browser"
+              ],
+              "type": "string"
+            },
+            "enabled": {
+              "default": true,
+              "type": "boolean"
+            },
+            "icons": {
+              "description": "Icons at 192px and 512px are what browsers require before offering to install the site; the build warns when either is missing.",
+              "items": {
+                "additionalProperties": false,
+                "properties": {
+                  "purpose": {
+                    "type": "string"
+                  },
+                  "sizes": {
+                    "examples": [
+                      "192x192"
+                    ],
+                    "type": "string"
+                  },
+                  "src": {
+                    "type": "string"
+                  },
+                  "type": {
+                    "type": "string"
+                  }
+                },
+                "required": [
+                  "src"
+                ],
+                "type": "object"
+              },
+              "type": "array"
+            },
+            "lang": {
+              "type": "string"
+            },
+            "name": {
+              "description": "Defaults to the project name.",
+              "type": "string"
+            },
+            "orientation": {
+              "type": "string"
+            },
+            "scope": {
+              "type": "string"
+            },
+            "shortName": {
+              "type": "string"
+            },
+            "startUrl": {
+              "default": "/",
+              "type": "string"
+            },
+            "themeColor": {
+              "type": "string"
+            }
+          },
+          "type": "object"
+        },
+        "serviceWorker": {
+          "default": false,
+          "description": "W3C Service Worker, emitted as sw.js. Off unless declared — a worker is sticky, so it is the one output that can keep breaking visitors after a deploy tries to fix them. **Turning it off means `false`, not deleting the key**: `false` emits a tombstone at the same URL that unregisters the old worker and clears its caches, and a 404 there is not an instruction to stop. HTML is always network-first; only the content-addressed /images/_optimized/* is served cache-first.",
+          "oneOf": [
+            {
+              "type": "boolean"
+            },
+            {
+              "additionalProperties": false,
+              "properties": {
+                "enabled": {
+                  "default": true,
+                  "type": "boolean"
+                },
+                "offlineFallback": {
+                  "description": "Page served for a failed navigation. Added to `precache` if not already there.",
+                  "type": "string"
+                },
+                "precache": {
+                  "description": "Site-absolute URLs fetched at install time. Each must be a file this build produces; one that is not fails the build, because a single unreachable entry stops the worker installing at all.",
+                  "items": {
+                    "pattern": "^/",
+                    "type": "string"
+                  },
+                  "type": "array"
+                },
+                "scope": {
+                  "default": "/",
+                  "type": "string"
+                }
+              },
+              "type": "object"
+            }
+          ]
+        },
+        "securityTxt": {
+          "additionalProperties": false,
+          "description": "RFC 9116 security.txt, emitted at .well-known/security.txt. `expires` is required by §2.5.5 and an absent or past value is a build error — an expired file advertises a reporting channel while telling the reporter not to trust it. A hand-placed public/.well-known/security.txt shadows this, which is how a clearsigned file ships.",
+          "properties": {
+            "acknowledgments": {
+              "items": {
+                "type": "string"
+              },
+              "type": "array"
+            },
+            "canonical": {
+              "type": "string"
+            },
+            "contact": {
+              "description": "At least one mailto:, https: or tel: URI (§2.5.3).",
+              "items": {
+                "type": "string"
+              },
+              "type": "array"
+            },
+            "enabled": {
+              "default": true,
+              "type": "boolean"
+            },
+            "encryption": {
+              "items": {
+                "type": "string"
+              },
+              "type": "array"
+            },
+            "expires": {
+              "format": "date-time",
+              "type": "string"
+            },
+            "hiring": {
+              "items": {
+                "type": "string"
+              },
+              "type": "array"
+            },
+            "policy": {
+              "items": {
+                "type": "string"
+              },
+              "type": "array"
+            },
+            "preferredLanguages": {
+              "description": "BCP 47 tags, validated and canonicalized like i18n.locales.",
+              "items": {
+                "pattern": "^[A-Za-z]{2,8}(-[A-Za-z0-9]{1,8})*$",
+                "type": "string"
+              },
+              "type": "array"
+            }
+          },
+          "type": "object"
+        },
         "i18n": {
           "description": "Internationalization configuration.",
           "properties": {
             "defaultLocale": {
-              "description": "Default locale code.",
-              "examples": ["en"],
+              "description": "Default locale, as a BCP 47 language tag. The pattern catches shape errors (`en_US`, `en--US`); the build is the authority on well-formedness.",
+              "examples": [
+                "en"
+              ],
+              "pattern": "^[A-Za-z]{2,8}(-[A-Za-z0-9]{1,8})*$",
               "type": "string"
             },
             "locales": {
-              "description": "Available locale codes.",
-              "examples": [["en", "fr", "de"]],
+              "description": "Available locales, as BCP 47 language tags.",
+              "examples": [
+                [
+                  "en",
+                  "fr",
+                  "de"
+                ]
+              ],
               "items": {
+                "pattern": "^[A-Za-z]{2,8}(-[A-Za-z0-9]{1,8})*$",
                 "type": "string"
               },
               "type": "array"
             },
             "routing": {
               "description": "Locale routing strategy.",
-              "enum": ["prefix-except-default", "prefix-always"],
+              "enum": [
+                "prefix-except-default",
+                "prefix-always"
+              ],
               "type": "string"
             }
           },
@@ -367,19 +796,81 @@
         "name": {
           "default": "Jx Site",
           "description": "Human-readable project name.",
-          "examples": ["My Portfolio", "Jx Example Site"],
+          "examples": [
+            "My Portfolio",
+            "Jx Example Site"
+          ],
           "type": "string"
         },
         "redirects": {
           "additionalProperties": {
-            "type": "string"
+            "oneOf": [
+              {
+                "description": "Destination path or URL; implies a 301.",
+                "type": "string"
+              },
+              {
+                "additionalProperties": false,
+                "description": "A redirect with an explicit RFC 9110 §15.4 status.",
+                "properties": {
+                  "destination": {
+                    "type": "string"
+                  },
+                  "status": {
+                    "default": 301,
+                    "description": "RFC 9110 §15.4 redirection status. 307 and 308 preserve the request method; 301 and 302 historically do not.",
+                    "enum": [
+                      301,
+                      302,
+                      303,
+                      307,
+                      308
+                    ],
+                    "type": "integer"
+                  }
+                },
+                "required": [
+                  "destination"
+                ],
+                "type": "object"
+              },
+              {
+                "additionalProperties": false,
+                "description": "A rewrite (proxy): the destination's content is served AT the source URL, with no redirect. Emitted as status 200 in `_redirects`, which is the host convention — not an HTTP redirection status.",
+                "properties": {
+                  "destination": {
+                    "type": "string"
+                  },
+                  "rewrite": {
+                    "const": true,
+                    "type": "boolean"
+                  }
+                },
+                "required": [
+                  "destination",
+                  "rewrite"
+                ],
+                "type": "object"
+              }
+            ]
           },
-          "description": "Static redirect rules. Maps source paths to destination paths.",
+          "description": "Static redirect and rewrite rules. Keys are source paths in URLPattern pathname syntax.",
           "examples": [
             {
+              "/api/*": {
+                "destination": "https://api.example.com/*",
+                "rewrite": true
+              },
+              "/legacy/*": {
+                "destination": "/archive/*",
+                "status": 308
+              },
               "/old-about": "/about"
             }
           ],
+          "propertyNames": {
+            "pattern": "^/"
+          },
           "type": "object"
         },
         "state": {
@@ -405,7 +896,10 @@
         },
         "url": {
           "description": "Production URL of the deployed site.",
-          "examples": ["https://example.com", "https://jxsuite.com"],
+          "examples": [
+            "https://example.com",
+            "https://jxsuite.com"
+          ],
           "type": "string"
         }
       },
@@ -437,7 +931,9 @@
                           "type": "string"
                         }
                       },
-                      "required": ["$ref"]
+                      "required": [
+                        "$ref"
+                      ]
                     },
                     {
                       "type": "string"
@@ -474,7 +970,10 @@
               },
               "source": {
                 "description": "Path to the content directory relative to the project root.",
-                "examples": ["./content/blog/", "./content/docs/"],
+                "examples": [
+                  "./content/blog/",
+                  "./content/docs/"
+                ],
                 "type": "string"
               }
             }