@rathnasgala2/schemas 2.11.0 → 2.12.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rathnasgala2/schemas",
-  "version": "2.11.0",
+  "version": "2.12.0",
   "description": "Executable JSON Schema and OpenAPI contracts for Galascribe",
   "type": "module",
   "license": "Apache-2.0",
@@ -53,7 +53,6 @@
       "types": "./generated/typescript/index.d.ts",
       "import": "./generated/typescript/index.js"
     },
-    "./compatibility/compatibility.json": "./compatibility/compatibility.json",
     "./parity/digest-record-vectors.json": "./parity/digest-record-vectors.json",
     "./catalog-sources/internal-event-actions.json": "./catalog-sources/internal-event-actions.json",
     "./docs/catalogs/app-components.json": "./docs/catalogs/app-components.json",
@@ -62,7 +61,9 @@
     "./docs/catalogs/schema-inventory.json": "./docs/catalogs/schema-inventory.json",
     "./openapi/openapi.yaml": "./openapi/openapi.yaml",
     "./openapi/http-catalog.json": "./openapi/http-catalog.json",
-    "./package.json": "./package.json"
+    "./package.json": "./package.json",
+    "./fixtures/*": "./fixtures/*",
+    "./examples/*": "./examples/*"
   },
   "types": "./types/index.d.ts",
   "files": [
@@ -75,12 +76,13 @@
     "fixtures/",
     "generated/",
     "openapi/",
+    "!openapi/source/",
+    "!openapi/generator/",
     "catalog-sources/internal-event-actions.json",
     "docs/catalogs/internal-event-actions.json",
     "docs/catalogs/schema-inventory.json",
     "docs/catalogs/app-routes.json",
     "docs/catalogs/app-components.json",
-    "compatibility/compatibility.json",
     "parity/digest-record-vectors.json",
     "LICENSE",
     "NOTICE",
@@ -110,9 +112,12 @@
     "provenance": true
   },
   "scripts": {
-    "build": "npm run source-data:check && npm run tables:check && npm run schemas:check && npm run fixtures:check && npm run diagnostics:check && npm run parity-expectations:check && npm run declarations:check && npm run openapi:check && npm run events:check && npm run codegen:check && npm run compatibility:check && npm run app-catalogs:check && npm run browser-safety:check",
+    "build": "npm run source-data:check && npm run tables:check && npm run schemas:check && npm run schemas:shared-defs:check && npm run compatibility:check && npm run fixtures:check && npm run diagnostics:check && npm run parity-expectations:check && npm run declarations:check && npm run openapi:check && npm run events:check && npm run codegen:check && npm run app-catalogs:check && npm run browser-safety:check",
     "schemas:generate": "node scripts/generate-author-source-schemas.mjs",
     "schemas:check": "node scripts/generate-author-source-schemas.mjs --check",
+    "schemas:shared-defs:check": "node scripts/check-shared-defs.mjs",
+    "compatibility:check": "node scripts/check-backward-compatibility.mjs",
+    "compatibility:baseline:update": "node scripts/check-backward-compatibility.mjs --update-baseline",
     "fixtures:generate": "node scripts/generate-fixture-corpus.mjs",
     "fixtures:check": "node scripts/generate-fixture-corpus.mjs --check",
     "diagnostics:generate": "node scripts/generate-diagnostic-map.mjs",
@@ -129,7 +134,6 @@
     "codegen:compile": "tsc --project tsconfig.codegen.json",
     "codegen:generate": "npm run codegen:compile && node .build/codegen/generate-contracts.js",
     "codegen:check": "npm run codegen:compile && node .build/codegen/generate-contracts.js --check",
-    "compatibility:check": "node scripts/check-compatibility.mjs",
     "openapi:generate": "node scripts/generate-openapi.mjs",
     "openapi:check": "node scripts/generate-openapi.mjs --check",
     "events:generate": "node scripts/generate-internal-event-actions.mjs",
@@ -149,9 +153,8 @@
     "licenses:check": "node scripts/generate-license-inventory.mjs --check",
     "sbom:generate": "node scripts/generate-sbom.mjs",
     "sbom:check": "node scripts/generate-sbom.mjs --check",
-    "audit": "npm audit --audit-level=critical",
+    "audit": "npm audit --audit-level=high",
     "verify": "npm run build && npm run format:check && npm run lint && npm run typecheck && npm run architecture && npm run duplication && npm run workflows:check && npm run parity:supply-chain:check && npm test && npm run parity:check && npm run licenses:check && npm run sbom:check && npm run audit",
-    "prepublishOnly": "npm run verify",
     "publish:dry-run": "npm publish --dry-run --access public"
   },
   "dependencies": {
@@ -162,17 +165,17 @@
     "@cyclonedx/cyclonedx-npm": "6.0.1",
     "@eslint/js": "10.0.1",
     "@types/jsdom": "30.0.0",
-    "@types/node": "24.13.4",
-    "dependency-cruiser": "18.2.0",
-    "eslint": "10.10.0",
-    "eslint-plugin-jsdoc": "64.3.9",
+    "@types/node": "26.6.2",
+    "dependency-cruiser": "18.4.0",
+    "eslint": "10.11.0",
+    "eslint-plugin-jsdoc": "64.5.4",
     "globals": "17.12.0",
-    "jscpd": "5.2.0",
-    "jsdom": "30.0.1",
-    "prettier": "3.9.6",
+    "jscpd": "5.3.2",
+    "jsdom": "30.1.1",
+    "prettier": "3.9.9",
     "semver": "7.8.5",
     "typescript": "5.9.3",
-    "typescript-eslint": "8.70.0",
+    "typescript-eslint": "8.70.1",
     "yaml": "2.9.0"
   }
 }

package/sbom.cdx.json

@@ -97,8 +97,8 @@
       "type": "library",
       "name": "schemas",
       "group": "@rathnasgala2",
-      "version": "2.11.0",
-      "bom-ref": "@rathnasgala2/schemas@2.11.0",
+      "version": "2.12.0",
+      "bom-ref": "@rathnasgala2/schemas@2.12.0",
       "description": "Executable JSON Schema and OpenAPI contracts for Galascribe",
       "licenses": [
         {
@@ -108,7 +108,7 @@
           }
         }
       ],
-      "purl": "pkg:npm/%40rathnasgala2/schemas@2.11.0?vcs_url=git%2Bhttps%3A%2F%2Fgithub.com%2Frathnasgala2%2Fschema.git",
+      "purl": "pkg:npm/%40rathnasgala2/schemas@2.12.0?vcs_url=git%2Bhttps%3A%2F%2Fgithub.com%2Frathnasgala2%2Fschema.git",
       "externalReferences": [
         {
           "url": "https://github.com/rathnasgala2/schema/issues",
@@ -153,7 +153,7 @@
       "type": "library",
       "name": "ajv-formats",
       "version": "3.0.1",
-      "bom-ref": "@rathnasgala2/schemas@2.11.0|ajv-formats@3.0.1",
+      "bom-ref": "@rathnasgala2/schemas@2.12.0|ajv-formats@3.0.1",
       "licenses": [
         {
           "license": {
@@ -187,7 +187,7 @@
       "type": "library",
       "name": "ajv",
       "version": "8.20.0",
-      "bom-ref": "@rathnasgala2/schemas@2.11.0|ajv@8.20.0",
+      "bom-ref": "@rathnasgala2/schemas@2.12.0|ajv@8.20.0",
       "licenses": [
         {
           "license": {
@@ -221,7 +221,7 @@
       "type": "library",
       "name": "fast-deep-equal",
       "version": "3.1.3",
-      "bom-ref": "@rathnasgala2/schemas@2.11.0|fast-deep-equal@3.1.3",
+      "bom-ref": "@rathnasgala2/schemas@2.12.0|fast-deep-equal@3.1.3",
       "licenses": [
         {
           "license": {
@@ -255,7 +255,7 @@
       "type": "library",
       "name": "fast-uri",
       "version": "3.1.7",
-      "bom-ref": "@rathnasgala2/schemas@2.11.0|fast-uri@3.1.7",
+      "bom-ref": "@rathnasgala2/schemas@2.12.0|fast-uri@3.1.7",
       "licenses": [
         {
           "license": {
@@ -289,7 +289,7 @@
       "type": "library",
       "name": "json-schema-traverse",
       "version": "1.0.0",
-      "bom-ref": "@rathnasgala2/schemas@2.11.0|json-schema-traverse@1.0.0",
+      "bom-ref": "@rathnasgala2/schemas@2.12.0|json-schema-traverse@1.0.0",
       "licenses": [
         {
           "license": {
@@ -323,7 +323,7 @@
       "type": "library",
       "name": "require-from-string",
       "version": "2.0.2",
-      "bom-ref": "@rathnasgala2/schemas@2.11.0|require-from-string@2.0.2",
+      "bom-ref": "@rathnasgala2/schemas@2.12.0|require-from-string@2.0.2",
       "licenses": [
         {
           "license": {
@@ -1064,10 +1064,10 @@
   ],
   "dependencies": [
     {
-      "ref": "@rathnasgala2/schemas@2.11.0",
+      "ref": "@rathnasgala2/schemas@2.12.0",
       "dependsOn": [
-        "@rathnasgala2/schemas@2.11.0|ajv-formats@3.0.1",
-        "@rathnasgala2/schemas@2.11.0|ajv@8.20.0",
+        "@rathnasgala2/schemas@2.12.0|ajv-formats@3.0.1",
+        "@rathnasgala2/schemas@2.12.0|ajv@8.20.0",
         "pkg:npm/semver@7.8.5",
         "urn:gala:source-data:iana-ipv4-special-registry",
         "urn:gala:source-data:iana-ipv6-special-registry",
@@ -1089,31 +1089,31 @@
       ]
     },
     {
-      "ref": "@rathnasgala2/schemas@2.11.0|ajv-formats@3.0.1",
+      "ref": "@rathnasgala2/schemas@2.12.0|ajv-formats@3.0.1",
       "dependsOn": [
-        "@rathnasgala2/schemas@2.11.0|ajv@8.20.0"
+        "@rathnasgala2/schemas@2.12.0|ajv@8.20.0"
       ]
     },
     {
-      "ref": "@rathnasgala2/schemas@2.11.0|ajv@8.20.0",
+      "ref": "@rathnasgala2/schemas@2.12.0|ajv@8.20.0",
       "dependsOn": [
-        "@rathnasgala2/schemas@2.11.0|fast-deep-equal@3.1.3",
-        "@rathnasgala2/schemas@2.11.0|fast-uri@3.1.7",
-        "@rathnasgala2/schemas@2.11.0|json-schema-traverse@1.0.0",
-        "@rathnasgala2/schemas@2.11.0|require-from-string@2.0.2"
+        "@rathnasgala2/schemas@2.12.0|fast-deep-equal@3.1.3",
+        "@rathnasgala2/schemas@2.12.0|fast-uri@3.1.7",
+        "@rathnasgala2/schemas@2.12.0|json-schema-traverse@1.0.0",
+        "@rathnasgala2/schemas@2.12.0|require-from-string@2.0.2"
       ]
     },
     {
-      "ref": "@rathnasgala2/schemas@2.11.0|fast-deep-equal@3.1.3"
+      "ref": "@rathnasgala2/schemas@2.12.0|fast-deep-equal@3.1.3"
     },
     {
-      "ref": "@rathnasgala2/schemas@2.11.0|fast-uri@3.1.7"
+      "ref": "@rathnasgala2/schemas@2.12.0|fast-uri@3.1.7"
     },
     {
-      "ref": "@rathnasgala2/schemas@2.11.0|json-schema-traverse@1.0.0"
+      "ref": "@rathnasgala2/schemas@2.12.0|json-schema-traverse@1.0.0"
     },
     {
-      "ref": "@rathnasgala2/schemas@2.11.0|require-from-string@2.0.2"
+      "ref": "@rathnasgala2/schemas@2.12.0|require-from-string@2.0.2"
     },
     {
       "ref": "pkg:npm/semver@7.8.5"

package/schemas/adapter-capability.schema.json

@@ -271,7 +271,11 @@
         "adapterId": { "$ref": "#/$defs/plainLabel" },
         "adapterVersion": { "$ref": "#/$defs/semver" },
         "targetDigest": { "$ref": "#/$defs/digest" },
-        "baseUrl": { "$ref": "#/$defs/urlHttps" },
+        "baseUrl": {
+          "allOf": [{ "$ref": "#/$defs/urlHttps" }],
+          "maxLength": 2048,
+          "x-gala-utf8ByteLength": { "maximum": 2048 }
+        },
         "providerBinding": { "$ref": "#/$defs/destinationProviderCoordinates" }
       },
       "additionalProperties": false,

package/schemas/appearance.schema.json

@@ -205,7 +205,7 @@
           }
         }
       ],
-      "$comment": "The appearance validator requires default to be a member of allowed."
+      "$comment": "The semantic validator requires default to be a member of allowed, and enforces canonical set ordering for allowed."
     },
     "semanticTokens": {
       "type": "object",

package/schemas/artifact-manifest.schema.json

@@ -263,9 +263,11 @@
     },
     "positiveInt64": {
       "type": "string",
+      "minLength": 1,
+      "maxLength": 19,
       "pattern": "^[1-9][0-9]*$",
-      "format": "gala-int64",
-      "description": "Canonical positive signed-64-bit decimal string; range is checked by the semantic validator."
+      "format": "gala-positive-int64",
+      "x-gala-maximum": "9223372036854775807"
     },
     "spdxExpression": {
       "type": "string",
@@ -280,23 +282,18 @@
       "minLength": 1,
       "maxLength": 20,
       "pattern": "^[1-9][0-9]{0,19}$",
-      "format": "gala-github-positive-uint64"
-    },
-    "githubActionsArtifactId": {
-      "type": "string",
-      "minLength": 1,
-      "maxLength": 20,
-      "pattern": "^[1-9][0-9]{0,19}$",
-      "format": "gala-github-positive-uint64"
+      "format": "gala-github-positive-uint64",
+      "x-gala-maximum": "18446744073709551615"
     },
+    "githubActionsArtifactId": { "$ref": "#/$defs/githubPositiveDecimal" },
     "githubRepositoryCoordinate": {
       "type": "string",
       "minLength": 3,
       "maxLength": 140,
-      "pattern": "^[A-Za-z0-9](?:[A-Za-z0-9-]{0,37}[A-Za-z0-9])?/[A-Za-z0-9._-]{1,100}$",
-      "not": { "pattern": "^[^/]+/\\.{1,2}$" },
+      "pattern": "^[A-Za-z0-9](?:[A-Za-z0-9-]{0,37}[A-Za-z0-9])?/(?!\\.{1,2}$)[A-Za-z0-9._-]{1,100}$",
       "format": "gala-github-repository-coordinate",
-      "x-gala-utf8ByteLength": { "minimum": 3, "maximum": 140 }
+      "x-gala-asciiByteLength": { "minimum": 3, "maximum": 140 },
+      "description": "Exact GitHub owner/repository spelling; the repository component cannot be dot or dot-dot."
     },
     "githubActorLogin": {
       "type": "string",
@@ -639,7 +636,7 @@
       },
       "additionalProperties": false
     },
-    "renderPolicyIdentity": {
+    "manifestRenderPolicyIdentity": {
       "type": "object",
       "required": ["name", "version", "digest"],
       "properties": {
@@ -770,7 +767,7 @@
         }
       ]
     },
-    "reproducibleBuildRecord": {
+    "manifestReproducibleBuildRecord": {
       "type": "object",
       "required": [
         "repositoryId",
@@ -855,7 +852,7 @@
         "policyReleaseId": { "$ref": "#/$defs/stableId" },
         "buildPolicyDecisionDigest": { "$ref": "#/$defs/digest" },
         "stylingContractDigest": { "$ref": "#/$defs/digest" },
-        "renderPolicy": { "$ref": "#/$defs/renderPolicyIdentity" },
+        "renderPolicy": { "$ref": "#/$defs/manifestRenderPolicyIdentity" },
         "workflowIdentity": { "$ref": "#/$defs/digest" }
       },
       "additionalProperties": false
@@ -1029,7 +1026,7 @@
             { "properties": { "purpose": { "const": "unfrozen-output" } } }
           ]
         },
-        "rebuildRecord": { "$ref": "#/$defs/reproducibleBuildRecord" },
+        "rebuildRecord": { "$ref": "#/$defs/manifestReproducibleBuildRecord" },
         "lockDigest": { "$ref": "#/$defs/digest" },
         "packageReleaseCatalogDigest": { "$ref": "#/$defs/digest" },
         "buildInputDigest": { "$ref": "#/$defs/digest" },
@@ -1051,7 +1048,7 @@
         "buildPolicyDecisionDigest": { "$ref": "#/$defs/digest" },
         "capabilityDecisionDigest": { "$ref": "#/$defs/digest" },
         "stylingContractDigest": { "$ref": "#/$defs/digest" },
-        "renderPolicy": { "$ref": "#/$defs/renderPolicyIdentity" },
+        "renderPolicy": { "$ref": "#/$defs/manifestRenderPolicyIdentity" },
         "sandbox": { "$ref": "#/$defs/buildSandboxEvidence" },
         "secretInputs": { "const": [] }
       },

package/schemas/build-input.schema.json

@@ -187,7 +187,8 @@
       "minLength": 1,
       "maxLength": 20,
       "pattern": "^[1-9][0-9]{0,19}$",
-      "format": "gala-github-positive-uint64"
+      "format": "gala-github-positive-uint64",
+      "x-gala-maximum": "18446744073709551615"
     },
     "packageIdentity": {
       "type": "object",
@@ -327,7 +328,7 @@
       },
       "additionalProperties": false
     },
-    "renderPolicyIdentity": {
+    "manifestRenderPolicyIdentity": {
       "type": "object",
       "required": ["name", "version", "digest"],
       "properties": {
@@ -353,7 +354,7 @@
         "bodyMediaType": { "const": "text/html" },
         "body": { "type": "string", "minLength": 0, "maxLength": 2000000 },
         "bodyDigest": { "$ref": "#/$defs/digest" },
-        "renderPolicy": { "$ref": "#/$defs/renderPolicyIdentity" }
+        "renderPolicy": { "$ref": "#/$defs/manifestRenderPolicyIdentity" }
       },
       "additionalProperties": false
     },
@@ -667,7 +668,9 @@
             "required": ["default"]
           },
           "then": {
-            "properties": { "allowed": { "contains": { "const": "light" } } }
+            "properties": {
+              "allowed": { "contains": { "const": "light" }, "type": "array" }
+            }
           }
         },
         {
@@ -676,7 +679,9 @@
             "required": ["default"]
           },
           "then": {
-            "properties": { "allowed": { "contains": { "const": "dark" } } }
+            "properties": {
+              "allowed": { "contains": { "const": "dark" }, "type": "array" }
+            }
           }
         },
         {
@@ -685,11 +690,13 @@
             "required": ["default"]
           },
           "then": {
-            "properties": { "allowed": { "contains": { "const": "system" } } }
+            "properties": {
+              "allowed": { "contains": { "const": "system" }, "type": "array" }
+            }
           }
         }
       ],
-      "$comment": "The semantic validator also enforces canonical set ordering for allowed."
+      "$comment": "The semantic validator requires default to be a member of allowed, and enforces canonical set ordering for allowed."
     },
     "semanticTokens": {
       "type": "object",
@@ -697,7 +704,7 @@
       "properties": {},
       "additionalProperties": false,
       "maxProperties": 0,
-      "$comment": "Fail closed: only the documented empty object is accepted until the author semantic-token catalog is accepted."
+      "$comment": "Fail closed: only the documented empty object is accepted until the semantic-token catalog is accepted."
     },
     "appearanceNormalized": {
       "type": "object",
@@ -819,7 +826,7 @@
         "body": { "type": "string", "minLength": 0, "maxLength": 2000000 },
         "bodyMediaType": { "const": "text/html" },
         "bodyDigest": { "$ref": "#/$defs/digest" },
-        "renderPolicy": { "$ref": "#/$defs/renderPolicyIdentity" },
+        "renderPolicy": { "$ref": "#/$defs/manifestRenderPolicyIdentity" },
         "sourcePath": { "$ref": "#/$defs/repoRelativePath" },
         "sourceRevision": { "$ref": "#/$defs/gitObjectId" },
         "sourceDigest": { "$ref": "#/$defs/digest" },
@@ -839,7 +846,7 @@
       "additionalProperties": false,
       "maxProperties": 0
     },
-    "adapterIdentity": {
+    "authoredAdapterIdentity": {
       "type": "object",
       "required": ["adapterId", "adapterVersion", "adapterDigest"],
       "properties": {
@@ -855,7 +862,7 @@
       "type": "object",
       "required": ["adapter", "baseUrl", "capabilityDigest"],
       "properties": {
-        "adapter": { "$ref": "#/$defs/adapterIdentity" },
+        "adapter": { "$ref": "#/$defs/authoredAdapterIdentity" },
         "baseUrl": { "$ref": "#/$defs/urlHttps" },
         "capabilityDigest": { "$ref": "#/$defs/digest" }
       },

package/schemas/build-provenance.schema.json

@@ -136,7 +136,7 @@
         { "properties": { "purpose": { "const": "unfrozen-output" } } }
       ]
     },
-    "rebuildRecord": { "$ref": "#/$defs/reproducibleBuildRecord" },
+    "rebuildRecord": { "$ref": "#/$defs/manifestReproducibleBuildRecord" },
     "lockDigest": { "$ref": "#/$defs/digest" },
     "packageReleaseCatalogDigest": { "$ref": "#/$defs/digest" },
     "buildInputDigest": { "$ref": "#/$defs/digest" },
@@ -158,7 +158,7 @@
     "buildPolicyDecisionDigest": { "$ref": "#/$defs/digest" },
     "capabilityDecisionDigest": { "$ref": "#/$defs/digest" },
     "stylingContractDigest": { "$ref": "#/$defs/digest" },
-    "renderPolicy": { "$ref": "#/$defs/renderPolicyIdentity" },
+    "renderPolicy": { "$ref": "#/$defs/manifestRenderPolicyIdentity" },
     "sandbox": { "$ref": "#/$defs/buildSandboxEvidence" },
     "secretInputs": { "const": [] }
   },
@@ -303,9 +303,11 @@
     },
     "positiveInt64": {
       "type": "string",
+      "minLength": 1,
+      "maxLength": 19,
       "pattern": "^[1-9][0-9]*$",
-      "format": "gala-int64",
-      "description": "Canonical positive signed-64-bit decimal string; range is checked by the semantic validator."
+      "format": "gala-positive-int64",
+      "x-gala-maximum": "9223372036854775807"
     },
     "spdxExpression": {
       "type": "string",
@@ -320,23 +322,18 @@
       "minLength": 1,
       "maxLength": 20,
       "pattern": "^[1-9][0-9]{0,19}$",
-      "format": "gala-github-positive-uint64"
-    },
-    "githubActionsArtifactId": {
-      "type": "string",
-      "minLength": 1,
-      "maxLength": 20,
-      "pattern": "^[1-9][0-9]{0,19}$",
-      "format": "gala-github-positive-uint64"
+      "format": "gala-github-positive-uint64",
+      "x-gala-maximum": "18446744073709551615"
     },
+    "githubActionsArtifactId": { "$ref": "#/$defs/githubPositiveDecimal" },
     "githubRepositoryCoordinate": {
       "type": "string",
       "minLength": 3,
       "maxLength": 140,
-      "pattern": "^[A-Za-z0-9](?:[A-Za-z0-9-]{0,37}[A-Za-z0-9])?/[A-Za-z0-9._-]{1,100}$",
-      "not": { "pattern": "^[^/]+/\\.{1,2}$" },
+      "pattern": "^[A-Za-z0-9](?:[A-Za-z0-9-]{0,37}[A-Za-z0-9])?/(?!\\.{1,2}$)[A-Za-z0-9._-]{1,100}$",
       "format": "gala-github-repository-coordinate",
-      "x-gala-utf8ByteLength": { "minimum": 3, "maximum": 140 }
+      "x-gala-asciiByteLength": { "minimum": 3, "maximum": 140 },
+      "description": "Exact GitHub owner/repository spelling; the repository component cannot be dot or dot-dot."
     },
     "githubActorLogin": {
       "type": "string",
@@ -679,7 +676,7 @@
       },
       "additionalProperties": false
     },
-    "renderPolicyIdentity": {
+    "manifestRenderPolicyIdentity": {
       "type": "object",
       "required": ["name", "version", "digest"],
       "properties": {
@@ -810,7 +807,7 @@
         }
       ]
     },
-    "reproducibleBuildRecord": {
+    "manifestReproducibleBuildRecord": {
       "type": "object",
       "required": [
         "repositoryId",
@@ -895,7 +892,7 @@
         "policyReleaseId": { "$ref": "#/$defs/stableId" },
         "buildPolicyDecisionDigest": { "$ref": "#/$defs/digest" },
         "stylingContractDigest": { "$ref": "#/$defs/digest" },
-        "renderPolicy": { "$ref": "#/$defs/renderPolicyIdentity" },
+        "renderPolicy": { "$ref": "#/$defs/manifestRenderPolicyIdentity" },
         "workflowIdentity": { "$ref": "#/$defs/digest" }
       },
       "additionalProperties": false

package/schemas/deployment-intent.schema.json

@@ -91,7 +91,7 @@
     "effectiveArtifactExpiresAt": { "$ref": "#/$defs/rfc3339" },
     "maximumReportRequestByteCount": { "$ref": "#/$defs/positiveInt64" },
     "lockDigest": { "$ref": "#/$defs/digest" },
-    "rebuildRecord": { "$ref": "#/$defs/reproducibleBuildRecord" },
+    "rebuildRecord": { "$ref": "#/$defs/recordReproducibleBuildRecord" },
     "publisher": {
       "allOf": [
         { "$ref": "#/$defs/packageIdentity" },
@@ -300,24 +300,29 @@
       "type": "string",
       "pattern": "^(?:0|-?[1-9][0-9]*)$",
       "format": "gala-int64",
-      "description": "Canonical signed 64-bit base-10 JSON string."
+      "description": "Canonical signed 64-bit decimal string; range is checked by the semantic validator."
     },
     "nonNegativeInt64": {
       "type": "string",
       "pattern": "^(?:0|[1-9][0-9]*)$",
-      "format": "gala-int64"
+      "format": "gala-int64",
+      "description": "Canonical non-negative signed-64-bit decimal string; range is checked by the semantic validator."
     },
     "positiveInt64": {
       "type": "string",
+      "minLength": 1,
+      "maxLength": 19,
       "pattern": "^[1-9][0-9]*$",
-      "format": "gala-int64"
+      "format": "gala-positive-int64",
+      "x-gala-maximum": "9223372036854775807"
     },
     "githubPositiveDecimal": {
       "type": "string",
       "minLength": 1,
       "maxLength": 20,
       "pattern": "^[1-9][0-9]{0,19}$",
-      "format": "gala-github-positive-uint64"
+      "format": "gala-github-positive-uint64",
+      "x-gala-maximum": "18446744073709551615"
     },
     "githubActionsArtifactId": { "$ref": "#/$defs/githubPositiveDecimal" },
     "lowerHex40": { "type": "string", "pattern": "^[0-9a-f]{40}$" },
@@ -473,7 +478,7 @@
       "pattern": "^[a-z]{3}[1-9][0-9]?$",
       "x-gala-asciiByteLength": { "minimum": 4, "maximum": 5 }
     },
-    "renderPolicyIdentity": {
+    "recordRenderPolicyIdentity": {
       "type": "object",
       "required": ["name", "version", "digest"],
       "properties": {
@@ -1555,7 +1560,7 @@
       "pattern": "^(?:gala:expect-nothing-served|[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12})$",
       "description": "Activation fence: a generation identity, or the explicit expect-nothing-served sentinel. Never null, and never absent as a way of saying \"no expectation\" (LOCAL-47). This is the write-side expectation a caller states before it mutates a destination, and it is deliberately asymmetric with the observation-side fields (`observedGenerationId`), which are simply absent -- and are modelled as nullable by the in-process adapter protocol -- when nothing is served (LOCAL-52). It is deliberately one string schema with one combined pattern rather than a two-member `oneOf` of two string schemas: the admitted value set is identical, and OpenAPI Generator 7.25 turns such a union into an empty marker interface that a caller cannot carry a value in."
     },
-    "reproducibleBuildRecord": {
+    "recordReproducibleBuildRecord": {
       "type": "object",
       "required": [
         "repositoryId",
@@ -1640,7 +1645,7 @@
         "policyReleaseId": { "$ref": "#/$defs/stableId" },
         "buildPolicyDecisionDigest": { "$ref": "#/$defs/digest" },
         "stylingContractDigest": { "$ref": "#/$defs/digest" },
-        "renderPolicy": { "$ref": "#/$defs/renderPolicyIdentity" },
+        "renderPolicy": { "$ref": "#/$defs/recordRenderPolicyIdentity" },
         "workflowIdentity": { "$ref": "#/$defs/digest" }
       },
       "additionalProperties": false

package/schemas/deployment-observation.schema.json

@@ -206,24 +206,29 @@
       "type": "string",
       "pattern": "^(?:0|-?[1-9][0-9]*)$",
       "format": "gala-int64",
-      "description": "Canonical signed 64-bit base-10 JSON string."
+      "description": "Canonical signed 64-bit decimal string; range is checked by the semantic validator."
     },
     "nonNegativeInt64": {
       "type": "string",
       "pattern": "^(?:0|[1-9][0-9]*)$",
-      "format": "gala-int64"
+      "format": "gala-int64",
+      "description": "Canonical non-negative signed-64-bit decimal string; range is checked by the semantic validator."
     },
     "positiveInt64": {
       "type": "string",
+      "minLength": 1,
+      "maxLength": 19,
       "pattern": "^[1-9][0-9]*$",
-      "format": "gala-int64"
+      "format": "gala-positive-int64",
+      "x-gala-maximum": "9223372036854775807"
     },
     "githubPositiveDecimal": {
       "type": "string",
       "minLength": 1,
       "maxLength": 20,
       "pattern": "^[1-9][0-9]{0,19}$",
-      "format": "gala-github-positive-uint64"
+      "format": "gala-github-positive-uint64",
+      "x-gala-maximum": "18446744073709551615"
     },
     "githubActionsArtifactId": { "$ref": "#/$defs/githubPositiveDecimal" },
     "lowerHex40": { "type": "string", "pattern": "^[0-9a-f]{40}$" },
@@ -379,7 +384,7 @@
       "pattern": "^[a-z]{3}[1-9][0-9]?$",
       "x-gala-asciiByteLength": { "minimum": 4, "maximum": 5 }
     },
-    "renderPolicyIdentity": {
+    "recordRenderPolicyIdentity": {
       "type": "object",
       "required": ["name", "version", "digest"],
       "properties": {