@nebulacomponents/citable 1.15.1 → 1.16.0

package/CHANGELOG.md

@@ -15,6 +15,31 @@ _No entries yet. See [`BOUNTY.md`](BOUNTY.md) to submit the first one._
 
 ## Unreleased
 
+## 1.16.0 — 2026-09-08
+
+### Added — Nebula Components Enterprise Platform Suite
+
+- Added multi-property fleet governance with schema `schemas/fleet.schema.json`, registry `fleet.yaml` (29th schema-validated registry), and command `citable fleet [summary|audit]` to manage and audit multi-domain portfolios and staging/production environments.
+- Added Cloudflare & Edge Worker adapter in `src/commands/edgeRules.js` (`citable export edge` and `citable test edge`) to generate Cloudflare Pages `_redirects`, custom WAF bot blocking expressions, and `HTMLRewriter` Worker scripts, with synthetic edge pass-through verification.
+- Added automated AI Search Engine probing runner `citable probe <query|prompt_id>` (`src/commands/probe.js`) generating schema-validated observation envelopes (`observation.schema.json`) for Perplexity, SearchGPT, and Gemini.
+- Added component-level static AST linter `citable lint components [dir]` (`src/commands/lintComponents.js`) detecting touch target violations, unlabelled icon buttons, generic CTA microcopy, missing input labels, autocomplete omission, and image dimension defects in React/Next.js/Vue design system components.
+- Added executive presentation and client deliverables exporter `citable report export` (`src/reporting/executiveExport.js`) supporting printable HTML briefing documents and slide decks, alongside Slack, Microsoft Teams, and Discord structured alert formatters in `src/monitoring/alertDelivery.js`.
+- Added causal impact and differential intervention attribution command `citable attribute impact` (`src/commands/attributeImpact.js`) calculating difference-in-differences lift estimates with explicit statistical caveats.
+- Added detector `GEO-013` (*AI engine assertion contradicts verified publisher claim registry*) to catch generative search hallucinations and factual contradictions against `claims.yaml`.
+
+### Added — Comprehensive Conversion Rate Optimization (CRO) Suite
+
+- Added detectors `CRO-007` through `CRO-014` to audit form autocomplete accessibility, disappearing placeholder-only inputs, mobile keyboard input type mismatches, choice overload in hero conversion sections, buried CTAs on long-form commercial pages, low-intent generic CTA microcopy, enclosed checkout distraction leaks, and unprotected confirmation receipt pages lacking `noindex`.
+- Added zero-runtime performance and mobile UX detectors `CRO-015` (touch target dimensions below 44px threshold) and `CRO-016` (diminutive font size on primary conversion CTAs < 12px).
+- Added multi-step funnel modeling with schema `schemas/funnel.schema.json`, registry `funnels.yaml` (28th schema-validated registry), referential integrity verification against `pages.yaml`, and continuity detectors `CRO-017` (missing or erroring funnel steps) and `CRO-018` (funnel progression links stripping declared campaign parameters).
+- Added AI Search claim-to-conversion pathway detector `CRO-019`, validating that landing pages cited by AI answer engines (SearchGPT, Perplexity, Gemini, Bing AI) provide immediate claim corroboration and conversion actions.
+- Added experiment statistical governance detector `CRO-020`, catching underpowered A/B experiments running under 7 days or lacking adequate sample size.
+- Added CLI commands `citable test funnel [id]` for automated synthetic conversion funnel continuity verification and `citable plan experiment` for two-tailed binomial sample size and power calculations.
+- Supported `--scope cro` in `citable audit` for shift-left pre-commit CRO auditing in CI/CD pipelines.
+- Enriched `citable inspect cro <page>` with hero CTA hierarchy, choice overload alerts, form autocomplete/label coverage ratios, and analytics instrumentation detection.
+- Expanded `schemas/experiment.schema.json` discipline enum to include `cro`.
+
+
 ## 1.15.1 — 2026-09-07
 
 ### Changed — Domain Configuration

package/README.md

@@ -21,9 +21,9 @@ generator, not a Lighthouse wrapper, not an "AI visibility score".
   objectives, interventions, optional connections, reviewers, review policies,
   governed exceptions, semantic review items, sampling plans, and audit schedules — all
   JSON-Schema validated with referential integrity and history-preserving saves.
-- **124 detectors** across 18 namespaces (TECH, CRAWL, ARCH, PAGE, ANS,
-  ENTITY, CLAIM, EVD, SCHEMA, LINK, EXT, GEO, RECO, LIFE, MEAS, HREFLANG, CWV, AGENT), each with
-  remediation, verification, severity, and determinism declared.
+- **180 detectors** across 19 namespaces (TECH, CRAWL, ARCH, PAGE, ANS,
+  SCHEMA, CWV, GEO, AEO, CLAIM, EVD, LIFE, AGENT, MEAS, EXP, CONF, SEC, LINK,
+  CRO), each with remediation, verification, severity, and determinism declared.
 - **Evidence packages** for every run: manifest, findings, report, captured
   robots/sitemaps/headers/raw JSON-LD, a schema-validated normalized entity
   graph with unresolved references and parse failures, link graph, and

package/dist/universal/.agents/skills/citable/SKILL.md

@@ -7,7 +7,7 @@ description: >
   generative engine optimization, structured data governance, claim substantiation,
   crawler policy, entity consistency, content discoverability, or wants a site audited
   for how search and AI systems will retrieve, understand, cite, or recommend it.
-version: 1.15.1
+version: 1.16.0
 ---
 
 # Citable — evidence and change control for search and AI citation readiness
@@ -97,6 +97,7 @@ citable compare-snapshots [runA runB]
 citable action-plan [run-id]          # ordered actions, blockers, semantic gates, verification
 citable observe <mode> [options]      # render/index/citation/log/probe/passage/consensus/performance/stance evidence
 citable observe stance --input <citations|prompts.json> [--entity <id>]
+citable observe attribution --input <citations|prompts.json> [--entity <id>]
 citable observe bing --dataset <search_performance|ai_performance> --input <csv|json>
 citable observe probes --target <url> [--region <label>]
 citable observe network --input <regional-network-import.json>
@@ -107,6 +108,7 @@ citable apply --input <spec> [--write] # reviewed, hash-locked remediation; dry
 citable monitor [runA runB] [--webhook <url>] [--min-severity <sev>]  # observation regression alerts
 citable report dashboard [--last N] [--since <run-id>]  # cross-run evidence trend (Markdown + HTML)
 citable report share-of-voice [--last N] [--since <run-id>]  # competitor citation share (Markdown + HTML)
+citable report consensus [--last N] [--since <run-id>]  # canonical discovery consensus matrix (Markdown + HTML)
 citable metrics import --provider <name> --input <csv|json>
 citable connect status
 citable connect configure --provider <gsc|ga4|wordpress|webflow> --connection-id <id> --property-id <id> [--credential-env <name>] [--write]
@@ -116,6 +118,8 @@ citable connect sync --connection-id <id> --start-date YYYY-MM-DD --end-date YYY
 citable connect read --connection-id <id> --target-id <id>
 citable connect apply --connection-id <id> --input <cms-spec.json> [--write]
 citable connect disconnect --connection-id <id> [--write]
+citable connect indexnow [--urls <file|list>] [--sitemap <url|file>] [--host <host>] [--key <key>] [--key-location <url>] [--skip-key-verify] [--endpoint <url>] [--write]
+citable connect mcp [--server <id>] [--tool <name>] [--args <json>] [--transport <stdio|http>] [--target <cmd|url>]
 citable objectives init --input <json|yaml> [--write]
 citable objectives validate
 citable evaluate [objective-id] [--ref-date YYYY-MM-DD]

package/dist/universal/.agents/skills/citable/VERSION

@@ -1 +1 @@
-1.15.1
+1.16.0

package/dist/universal/.agents/skills/citable/commands/README.md

@@ -23,14 +23,16 @@ intent, not executability, so statuses are strict:
 | /citable action-plan | implemented — writes ordered, source-run-bound action artifacts outside immutable evidence packages |
 | /citable observe | implemented — render, index, citation, crawler-log, passage, consensus, performance, corroboration, and stance evidence |
 | /citable apply | implemented — reviewed, hash-locked source replacements; dry run by default |
-| /citable connect status / configure / discover / validate / sync / read / apply / disconnect | implemented — GA4, GSC, WordPress, and Webflow adapters with hash-locked CMS remediation |
+| /citable connect status / configure / discover / validate / sync / read / apply / disconnect / indexnow / mcp | implemented — GA4, GSC, WordPress, Webflow, IndexNow, and allowlisted read-only MCP transport adapters |
 | /citable monitor | implemented — compares immutable observation runs and emits evidence-linked alerts |
 | /citable report dashboard | implemented — folds each run's recorded summary into a cross-run Markdown/HTML trend; derives no new findings and no combined score |
 | /citable report share-of-voice | implemented — joins competitor registry against recorded citation observations to compute verified share-of-citation |
+| /citable report consensus | implemented — synthesizes observed canonical signals across publisher headers, tags, sitemaps, and search engines |
 | /citable metrics import | implemented — validates declared CSV/JSON metrics and writes immutable observations |
 | /citable objectives init / validate | implemented — user-owned metric selection, cohorts, windows, and guardrails |
 | /citable evaluate | implemented — independent baseline/evaluation comparisons with inconclusive handling |
 | /citable governance validate / evaluate | implemented — validates reviewer and exception authority and emits immutable dispositions without changing failed findings |
+| /citable exceptions list / renew / invalidate | implemented — governed exception lifecycle, renewal limits, authority validation, and audit logging |
 | /citable reviews queue / prioritize / plan / sample / evaluate | implemented — materiality queues, reproducible sampling, stale-decision checks, and independent disagreement adjudication |
 | /citable schedules run / project github | implemented — canonical scheduled audits and hash-bound non-authoritative GitHub projections |
 | /citable observe media | implemented — bounded PDF, transcript, image-context, optional OCR, and declared claim-link evidence |

package/dist/universal/.agents/skills/citable/commands/governance.md

@@ -15,3 +15,15 @@ the exception is expired, revoked, superseded, conflicted, unauthorized, or
 over-renewed; required roles are absent; or more than one active exception
 matches a finding. Reviewer records are declarations and do not independently
 prove real-world identity, competence, independence, or legal authority.
+
+## Governed exception lifecycle
+
+Use `citable exceptions <list|renew|invalidate>` to inspect and maintain exceptions in `.citable/registries/exceptions.yaml`:
+
+- `citable exceptions list [--expired] [--expiring-soon <days>] [--ref-date YYYY-MM-DD]`:
+  Surfaces active, expiring soon, expired, and revoked exceptions with remaining days and renewal counters. Expired exceptions fail closed.
+- `citable exceptions renew --id <exception-id> --until <YYYY-MM-DD> --reviewer <reviewer-id> [--evidence <id>] [--note <text>] [--write]`:
+  Extends expiration under strict reviewer authority checks, policy renewal caps, and max duration limits. Appends an immutable renewal event to the exception's audit history.
+- `citable exceptions invalidate --id <exception-id> --reason <text> --reviewer <reviewer-id> [--write]`:
+  Revokes an active exception with mandatory justification, recording the actor and note in the audit trail.
+

package/dist/universal/.agents/skills/citable/commands/measurement.md

@@ -42,6 +42,13 @@ rows restricted to the `Organic Search` default channel group and inherits the
 property's reporting identity, thresholding, attribution, and consent choices.
 Neither source establishes that an intervention caused an observed change.
 
+`citable connect indexnow` validates and submits discovered or changed URLs directly to
+IndexNow participating engines (Bing, Yandex, Seznam, Naver). It is dry run by default;
+`--write` performs submission. It validates host ownership via pre-flight key verification,
+batches submissions up to 10,000 URLs per protocol chunk, and saves immutable delivery
+receipts under `.citable/monitoring/deliveries/`. An accepted IndexNow submission proves engine
+receipt of the URL list only; it does not prove crawling, indexing, or citation.
+
 # measure seo
 Inputs the operator exports (Search Console/Bing/analytics CSV or JSON).
 Workflow: validate segmentation (brand vs non-brand, intent, page type,
@@ -94,3 +101,16 @@ types in the narrative-accuracy rubric; SEV-map material ones; follow the
 correction runbook (capture → materiality → source lineage → verify internal
 truth → correct owned → escalate external → recrawl request → retest cohort →
 preserve before/after → residual risk).
+
+# MCP evidence transport
+
+1. Run `citable connect mcp --server <id> --tool <name> [--args <json>] [--transport <stdio|http>] [--target <url>]`
+   to collect evidence via an allowlisted read-only MCP transport adapter.
+2. The transport enforces strict security boundaries:
+   - Server allowlist: only explicitly declared servers (e.g. `citable-evidence-pilot`, `gsc-mcp`) are permitted; untrusted servers fail closed.
+   - Read-only tools: only tools declared `read_only: true` can be invoked; state-changing tools are refused.
+   - Public network boundary: remote HTTP connections enforce HTTPS and reject private, loopback, or non-public IP destinations.
+   - Secret sanitization: bearer tokens, API keys, and credential headers are scrubbed from request arguments and responses.
+   - Hashes and provenance: argument hashes (`sha256`) and raw payload hashes (`sha256`) are recorded in `mcp-transport-envelope.json`.
+3. Refusal boundary: MCP operates strictly as a transport into the immutable observation model. An MCP response does not confer evidence authority, authenticity, completeness, or ranking guarantees.
+

package/dist/universal/.agents/skills/citable/commands/reporting.md

@@ -55,3 +55,19 @@ any observed change to a specific intervention.
 4. Outputs are written to `.citable/reports/share-of-voice.md` and
    `.citable/reports/share-of-voice.html`.
 
+# Canonical discovery consensus reporting
+
+1. Run `citable report consensus [--last N] [--since <run-id>]` to evaluate
+   alignment across observed publisher canonical signals (HTML `rel="canonical"`,
+   Open Graph URL, sitemaps, HTTP Link headers) and external engine-observed
+   canonical URLs recorded in `observe consensus` / `canonical_freshness` runs.
+2. The consensus matrix maps target URLs against publisher declarations and
+   engine selections (Google, Bing, Perplexity, etc.) to expose divergences and
+   unresolved canonical conflicts (e.g. `TECH-019`).
+3. Outputs are written to `.citable/reports/consensus.md` and
+   `.citable/reports/consensus.html`.
+4. Refusal boundary: Never guarantee crawling, indexing, or ranking outcomes.
+   Publisher canonical declarations are treated as advisory hints to engines, not
+   authoritative index guarantees. Divergences are reported as factual observations,
+   never fabricated or interpolated.
+

package/dist/universal/.agents/skills/citable/manifest.json

@@ -1,11 +1,11 @@
 {
   "name": "citable",
-  "version": "1.15.1",
+  "version": "1.16.0",
   "managedBy": "citable-cli",
   "provider": "codex",
   "providerName": "OpenAI Codex",
   "scope": "bundle",
-  "sourcePackage": "@nebulacomponents/citable@1.15.1",
+  "sourcePackage": "@nebulacomponents/citable@1.16.0",
   "variantPath": ".agents/skills/citable",
   "agentProfiles": {
     "status": "unsupported",
@@ -18,16 +18,16 @@
     "commands/artifact-interchange.md": "sha256:18d56fbfa6bb3f23f08593a9a8135e51c268618b049e53c793969b68000875c3",
     "commands/delivery.md": "sha256:3b29250f9e9f84442812e320a70d5d2784b4286e91af3866f99cb6062a85a10f",
     "commands/field-validation.md": "sha256:4f24b2758eef746d704b218364f1e45ee9e07418c8ae111081b1fd41f93dde2d",
-    "commands/governance.md": "sha256:1fd6272f18b00237fc6e602ac126ae812747937b2bb575068a0d617137eea2b0",
+    "commands/governance.md": "sha256:41792a2a08930c604cc7b635c23fb3cbdeebc5af610ef38c795f1a412c4a0816",
     "commands/ingest.md": "sha256:cf35659aecd9d0e160909003efdbe056864fc5d824c71b4ef0ee801ce07ff598",
-    "commands/measurement.md": "sha256:9cade6dfec23338e18aa67ede3335ac9e2888dc577a7d4d8e3ceac948bce403f",
+    "commands/measurement.md": "sha256:85506abeaade17884290396f029f399a30d6b503dcb730db698d0ab9b3b5de62",
     "commands/media-evidence.md": "sha256:f2218feabe3360a2c9d569a5fa9b70d4b33a83a270d657151635e6f404fb34e0",
     "commands/observe-and-act.md": "sha256:32ad048f14610de0e9a00a7faf27ff18ec0d892f5b20d568f519e44a7ffc0faf",
     "commands/optimize-page.md": "sha256:35866f3d7cdeef0376ea7a7d7036085a9b9cf95bbb300ecf4bd77610ebd74d85",
     "commands/page-work.md": "sha256:965a66e59bdf7b0da482d26fade53b3d265885ece5d463fe83b0789ebefaef3e",
     "commands/plan-audit.md": "sha256:69875c9654e13b84566dafb16afe5afe08cffb9f3bded1f2d8d2261ae871c869",
-    "commands/README.md": "sha256:a8242f715219a549ad4b40a3573b62e1d2249a76a3162622e0cd61f80682d971",
-    "commands/reporting.md": "sha256:b4e7003d291180ddac574915ebc17a05faac0a72acf5ae2f21bcaa59d273e7ad",
+    "commands/README.md": "sha256:9c25573c8af30a8cf02f450f5f3812769aca01ebb422d600e830e78955f18c4a",
+    "commands/reporting.md": "sha256:ae89f8620acfef645d52bfe715efa332fdb8f464d890e45240ea341b24adb985",
     "commands/reviews.md": "sha256:902904aaa405fe5724cf0662c7a5a36eab9a4fe0eb81cbd95ffa2fff946e0ac8",
     "commands/validate-render.md": "sha256:a8e1d04d40b84d57c35039250d98c6a7302cd44a148a8c3b9d9cfb92678c4347",
     "policies/crawler-policy-template.md": "sha256:15c88a4eeb21f53f71e5250dd3eb2d2791a814b304eaefce8bb30e2bdf2e2e59",
@@ -75,16 +75,19 @@
     "schemas/evidence-authority.schema.json": "sha256:4f8165a37304ebab019e1c2dfec13f1168ecf89ce9bec88f7dca9c8554e39ac0",
     "schemas/evidence.schema.json": "sha256:76baec7ad7e89c6952473c01dacb9e3b26953c088331e6314d531ce620df9ec1",
     "schemas/exception.schema.json": "sha256:c88985494ec66554330fdc5b65d033527d0005acf41f10798b1e831d171f8944",
-    "schemas/experiment.schema.json": "sha256:3cebebc5745a9eb359261408b0a0421b8370d2c94f8244ce939827cd9da41cb6",
+    "schemas/experiment.schema.json": "sha256:4b5d16481448597b152269296b67b5776be6f03d8f9afba1833bcee10bf3c05b",
     "schemas/field-validation-metrics.schema.json": "sha256:bd5daeafc1593f1c4707d75180e1feb1e81d9345a57c1f269eadf13c36cb7012",
     "schemas/finding.schema.json": "sha256:85907cd04cd8d2fe24a1e618e0df7160f6d56aa1818db501f345aebce5eb5edb",
+    "schemas/fleet.schema.json": "sha256:3bf5772695ae4bb49a8c5fdbedee230ddb1d84aff6a3176eeb41527aca6ef2a5",
+    "schemas/funnel.schema.json": "sha256:6c368f29296ac45f5d52bb3a2f95fa935a1f30f3d53aae846156e9aa4c8ec59c",
     "schemas/initiative.schema.json": "sha256:491f6cc022c7ac1f9ea9ac9ddfcd270cb49c390e2601fe1e73aa6192a9e7689a",
     "schemas/intervention.schema.json": "sha256:fcf28e117b207e64ffc96088aa70a95370841a2a9fa43ecb1c82b34c2058a818",
     "schemas/kpi.schema.json": "sha256:a45e2178ac03a97692b2c1dd667abde6b25b936c73ba0c32e4e98becb3d9d1c2",
+    "schemas/mcp-transport-envelope.schema.json": "sha256:5b6290e7eff2c8fa486ce30a0a0e589dc516170dc6c8f7e921b59deee157b974",
     "schemas/media-manifest.schema.json": "sha256:3f37301aab9e913fa7febb15c720ed6384b106f12cef8d26cdd12d93fd85b41f",
     "schemas/metric.schema.json": "sha256:2ada648e7274a8d78cc9d6e7ed616f91faa79cf9ed07613e2c1fc53b247aac8d",
     "schemas/objective.schema.json": "sha256:94404dc95d04a6641ea7b9654317d0222793251ad44d3dfd2875738622a36025",
-    "schemas/observation.schema.json": "sha256:a5daabab86dacaa1a81e1f4c4900a0332bb3bf657ffeed60e5c6e0c5a8e5b7da",
+    "schemas/observation.schema.json": "sha256:8b0751ae086b39a4228ce95bc2e58065d30db24625b263f697506434363ba9be",
     "schemas/page.schema.json": "sha256:11d116b22ab79c152cfc7bbbec3a00cebe6dcd8ea2845b0ce819c15111fb0166",
     "schemas/project.schema.json": "sha256:ea48fdb6480f7047ba4594bd5908bc1f79c1ad6b9a2c204df900959b5f203dc6",
     "schemas/prompt-result.schema.json": "sha256:b55be47d7d58d7b1dd8c3b1e849e24e55216212c592cde7eb836953379b85737",
@@ -105,9 +108,9 @@
     "schemas/source-identity-chain.schema.json": "sha256:a65d9c12eaed1bd6b637c66a2f9362c17287fdfcb454d8676fb611d2d28aa019",
     "schemas/variance.schema.json": "sha256:68389f64f0a3be13ff8951e8eefba9a5c31d0738325cb47e37c1a8435bea48f0",
     "scripts/README.md": "sha256:9eee4e8beb4579a183bd714c9dd24b83abd020753eada5caeffae004739d60b5",
-    "SKILL.md": "sha256:aad95729d5773d7fea33d844670d69b7d2015dcc33b49070aea9f134f8b1701c",
+    "SKILL.md": "sha256:5a5dbae5d5af91f58dddf8fd2a1ed71c1740f81e5813b91e9329850ae6a46301",
     "templates/finding-review.md": "sha256:b270a83d3f015150aac80249ae9314979c0befea39ff92ec455f9a5aaa73404c",
-    "VERSION": "sha256:3a1d1ce0e8ef392e0cebe5f16555a12b8c6f035af8996a59992c42f617264050"
+    "VERSION": "sha256:46081fd90571a274160408ebc81fc91b78ffca4049d477998e3b6909ac245e05"
   },
-  "treeHash": "sha256:d922477f575db8f1514008b1ff6a8fddbe92ef4f00af3ae1f915634e7cc59ec2"
+  "treeHash": "sha256:ac0e50b9957821d1e1e8efe33b0aa22314eca5d1fdcfc6ac90f017c2ec26d4b3"
 }

package/dist/universal/.agents/skills/citable/schemas/experiment.schema.json

@@ -15,7 +15,7 @@
       "properties": {
         "experiment_id": { "$ref": "citable://schemas/common.defs.json#/definitions/id" },
         "hypothesis": { "type": "string", "minLength": 10 },
-        "discipline": { "type": "array", "items": { "type": "string", "enum": ["seo", "aeo", "geo"] } },
+        "discipline": { "type": "array", "items": { "type": "string", "enum": ["seo", "aeo", "geo", "cro"] } },
         "primary_metric": { "type": "string" },
         "secondary_metrics": { "type": "array", "items": { "type": "string" } },
         "prompt_cohort": { "type": "array", "items": { "type": "string" } },

package/dist/universal/.agents/skills/citable/schemas/fleet.schema.json

@@ -0,0 +1,93 @@
+{
+  "$id": "citable://schemas/fleet.schema.json",
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "title": "Fleet Properties registry",
+  "allOf": [
+    {
+      "$ref": "citable://schemas/common.defs.json#/definitions/registryFile"
+    }
+  ],
+  "properties": {
+    "kind": {
+      "const": "fleet"
+    },
+    "entries": {
+      "items": {
+        "$ref": "#/definitions/fleetProperty"
+      }
+    }
+  },
+  "definitions": {
+    "fleetProperty": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "property_id",
+        "name",
+        "primary_domain",
+        "environment",
+        "status"
+      ],
+      "properties": {
+        "property_id": {
+          "$ref": "citable://schemas/common.defs.json#/definitions/id"
+        },
+        "name": {
+          "type": "string",
+          "minLength": 1
+        },
+        "description": {
+          "type": "string"
+        },
+        "primary_domain": {
+          "type": "string",
+          "minLength": 3
+        },
+        "domains": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        },
+        "environment": {
+          "type": "string",
+          "enum": [
+            "production",
+            "staging",
+            "development",
+            "preview"
+          ]
+        },
+        "base_url": {
+          "type": "string"
+        },
+        "built_output_dir": {
+          "type": "string"
+        },
+        "owner": {
+          "type": "string"
+        },
+        "tags": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        },
+        "audit_schedule": {
+          "type": "string"
+        },
+        "status": {
+          "type": "string",
+          "enum": [
+            "active",
+            "paused",
+            "archived"
+          ]
+        },
+        "updated": {
+          "$ref": "citable://schemas/common.defs.json#/definitions/isoDate"
+        }
+      }
+    }
+  }
+}

package/dist/universal/.agents/skills/citable/schemas/funnel.schema.json

@@ -0,0 +1,116 @@
+{
+  "$id": "citable://schemas/funnel.schema.json",
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "title": "Conversion Funnel registry",
+  "allOf": [
+    {
+      "$ref": "citable://schemas/common.defs.json#/definitions/registryFile"
+    }
+  ],
+  "properties": {
+    "kind": {
+      "const": "funnels"
+    },
+    "entries": {
+      "items": {
+        "$ref": "#/definitions/funnel"
+      }
+    }
+  },
+  "definitions": {
+    "funnelStep": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "step_id",
+        "url_pattern",
+        "role"
+      ],
+      "properties": {
+        "step_id": {
+          "$ref": "citable://schemas/common.defs.json#/definitions/id"
+        },
+        "name": {
+          "type": "string"
+        },
+        "url_pattern": {
+          "type": "string",
+          "minLength": 1
+        },
+        "page_id": {
+          "type": "string"
+        },
+        "role": {
+          "type": "string",
+          "enum": [
+            "entry",
+            "consideration",
+            "commitment",
+            "completion"
+          ]
+        },
+        "expected_cta": {
+          "type": "string"
+        },
+        "preserve_params": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        }
+      }
+    },
+    "funnel": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "funnel_id",
+        "name",
+        "primary_goal",
+        "steps",
+        "status"
+      ],
+      "properties": {
+        "funnel_id": {
+          "$ref": "citable://schemas/common.defs.json#/definitions/id"
+        },
+        "name": {
+          "type": "string",
+          "minLength": 3
+        },
+        "description": {
+          "type": "string"
+        },
+        "primary_goal": {
+          "type": "string",
+          "minLength": 2
+        },
+        "target_audience": {
+          "type": "string"
+        },
+        "owner": {
+          "type": "string"
+        },
+        "steps": {
+          "type": "array",
+          "minItems": 2,
+          "items": {
+            "$ref": "#/definitions/funnelStep"
+          }
+        },
+        "status": {
+          "type": "string",
+          "enum": [
+            "draft",
+            "active",
+            "deprecated",
+            "archived"
+          ]
+        },
+        "provenance": {
+          "$ref": "citable://schemas/common.defs.json#/definitions/provenance"
+        }
+      }
+    }
+  }
+}