@rathnasgala2/schemas 2.16.0 → 2.17.0

package/generated/typescript/contracts/artifact-manifest.d.ts

@@ -113,9 +113,16 @@ export type ArtifactManifestManifestAsset = Readonly<{
     | 'image/jpeg'
     | 'image/webp'
     | 'image/avif'
+    | 'image/gif'
     | 'image/svg+xml'
     | 'font/woff2'
-    | 'application/octet-stream';
+    | 'application/octet-stream'
+    | 'audio/mpeg'
+    | 'audio/mp4'
+    | 'audio/ogg'
+    | 'audio/wav'
+    | 'video/mp4'
+    | 'video/webm';
   readonly path: ArtifactManifestRepoRelativePath;
   readonly sha256: ArtifactManifestDigest;
 }>;
@@ -258,9 +265,16 @@ export type ArtifactManifestManifestRoute = Readonly<{
     | 'image/jpeg'
     | 'image/webp'
     | 'image/avif'
+    | 'image/gif'
     | 'image/svg+xml'
     | 'font/woff2'
-    | 'application/octet-stream';
+    | 'application/octet-stream'
+    | 'audio/mpeg'
+    | 'audio/mp4'
+    | 'audio/ogg'
+    | 'audio/wav'
+    | 'video/mp4'
+    | 'video/webm';
   readonly path: ArtifactManifestRepoRelativePath;
   readonly routeClass: 'html' | 'feed' | 'sitemap' | 'asset' | 'error';
   readonly sha256: ArtifactManifestDigest;

package/generated/typescript/contracts/build-input.d.ts

@@ -84,11 +84,31 @@ export type BuildInputColorMode = Readonly<{
 }> &
   unknown;
 
+export type BuildInputContentBuildMediaFile = Readonly<{
+  readonly byteLength: number;
+  readonly mediaType:
+    | 'image/png'
+    | 'image/jpeg'
+    | 'image/webp'
+    | 'image/avif'
+    | 'image/gif'
+    | 'audio/mpeg'
+    | 'audio/mp4'
+    | 'audio/ogg'
+    | 'audio/wav'
+    | 'video/mp4'
+    | 'video/webm';
+  readonly path: BuildInputRepoRelativePath;
+  readonly sourceDigest: BuildInputDigest;
+}> &
+  unknown;
+
 export type BuildInputContentBuildRecord = Readonly<{
   readonly body: string;
   readonly bodyDigest: BuildInputDigest;
   readonly bodyMediaType: 'text/html';
   readonly frontmatter: BuildInputContentFrontmatterNormalized;
+  readonly media?: ReadonlyArray<BuildInputContentBuildMediaFile>;
   readonly renderPolicy: BuildInputManifestRenderPolicyIdentity;
   readonly resolvedAuthorIds: ReadonlyArray<BuildInputStableId>;
   readonly sourceDigest: BuildInputDigest;

package/generated/typescript/contracts/build-provenance.d.ts

@@ -113,9 +113,16 @@ export type BuildProvenanceManifestAsset = Readonly<{
     | 'image/jpeg'
     | 'image/webp'
     | 'image/avif'
+    | 'image/gif'
     | 'image/svg+xml'
     | 'font/woff2'
-    | 'application/octet-stream';
+    | 'application/octet-stream'
+    | 'audio/mpeg'
+    | 'audio/mp4'
+    | 'audio/ogg'
+    | 'audio/wav'
+    | 'video/mp4'
+    | 'video/webm';
   readonly path: BuildProvenanceRepoRelativePath;
   readonly sha256: BuildProvenanceDigest;
 }>;
@@ -258,9 +265,16 @@ export type BuildProvenanceManifestRoute = Readonly<{
     | 'image/jpeg'
     | 'image/webp'
     | 'image/avif'
+    | 'image/gif'
     | 'image/svg+xml'
     | 'font/woff2'
-    | 'application/octet-stream';
+    | 'application/octet-stream'
+    | 'audio/mpeg'
+    | 'audio/mp4'
+    | 'audio/ogg'
+    | 'audio/wav'
+    | 'video/mp4'
+    | 'video/webm';
   readonly path: BuildProvenanceRepoRelativePath;
   readonly routeClass: 'html' | 'feed' | 'sitemap' | 'asset' | 'error';
   readonly sha256: BuildProvenanceDigest;

package/openapi/http-catalog.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": "2.0.0",
   "sourceDesignRevision": "a53052955ceb6c1aa10c886289dc832eedfe6de0a00004df07d353ac19c4403a",
-  "openApiDigest": "sha256:c4ee38c241c9207f7778e7d142ea7f1e2d5435162cbf3220cfba5441ab4637a1",
+  "openApiDigest": "sha256:4fc11abc34a1de9a64eb669ed414ca4d508e5672aad79ecb6e1a88454627617b",
   "operations": [
     {
       "operationId": "getInternalHealth",
@@ -1049,5 +1049,5 @@
       "sourceFragment": "workloads"
     }
   ],
-  "digest": "sha256:c7191c307118e240ea21d6f2ea967748c5a32324b6637cb5076e5566bf04072a"
+  "digest": "sha256:05dda5074e9fd6b5ca7b3f0675eaec96d0d99e8a43ba4b7636663ce20c9bb2a7"
 }

package/openapi/openapi.yaml

@@ -1,5 +1,12 @@
 components:
   headers:
+    AcceptRanges:
+      description: Advertises byte-range support (SCHEMA-2.17.0), so a sound or video player can seek without downloading the whole file first.
+      required: true
+      schema:
+        pattern: ^bytes$
+        type: string
+        x-gala-const: bytes
     CacheControlNoStore:
       required: true
       schema:
@@ -12,6 +19,12 @@ components:
         pattern: ^inline$
         type: string
         x-gala-const: inline
+    ContentRange:
+      description: RFC 9110 `Content-Range`. `bytes <start>-<end>/<total>` on `206`; `bytes */<total>` on `416`, naming the asset's real total length so the caller can retry with a satisfiable range.
+      required: true
+      schema:
+        pattern: ^bytes (?:[0-9]+-[0-9]+|\*)/[0-9]+$
+        type: string
     ETag:
       required: true
       schema:
@@ -95,6 +108,15 @@ components:
         maximum: 100
         minimum: 1
         type: integer
+    Range:
+      description: RFC 9110 single-range `Range` request header (SCHEMA-2.17.0), honoured for sound and video so a player can seek. Absent means the whole asset. A multi-range request is not supported and is treated as absent.
+      example: bytes=0-1023
+      in: header
+      name: Range
+      required: false
+      schema:
+        pattern: ^bytes=[0-9]+-[0-9]*$
+        type: string
     XCorrelationId:
       example: 018f0000-0000-7000-8000-000000000001
       in: header
@@ -294,14 +316,60 @@ components:
               - bytesBase64
               - contentType
               - contentDigest
+        - if:
+            properties:
+              contentType:
+                enum:
+                  - image/png
+                  - image/jpeg
+                  - image/webp
+                  - image/gif
+                  - image/avif
+            required:
+              - contentType
+          then:
+            properties:
+              bytesBase64:
+                maxLength: 6990512
+        - if:
+            properties:
+              contentType:
+                enum:
+                  - audio/mpeg
+                  - audio/mp4
+                  - audio/ogg
+                  - audio/wav
+            required:
+              - contentType
+          then:
+            properties:
+              bytesBase64:
+                maxLength: 27962032
+        - if:
+            properties:
+              contentType:
+                enum:
+                  - video/mp4
+                  - video/webm
+            required:
+              - contentType
+          then:
+            properties:
+              bytesBase64:
+                maxLength: 69905072
       description: |
         One asset write or delete inside a batch `content-changes:plan`
-        request. `bytesBase64` is base64 over the raw asset bytes; the 5 MiB
-        per-asset bound is measured on the decoded byte length, not this
-        field's text length. `contentType` is the closed vocabulary the
-        asset read declares; `image/svg+xml` is deliberately absent (an SVG
-        can carry script). `DELETE` names only the path it removes and
-        carries none of the write-only members.
+        request -- an article's cover image, or an image, sound or video
+        file referenced from its body (pass-through: copied unchanged into
+        the built site, no resizing and no derived formats for in-text
+        media). `bytesBase64` is base64 over the raw asset bytes; the
+        per-category bound (image 5 MiB, sound 20 MiB, video 50 MiB) is
+        measured on the decoded byte length, not this field's text length,
+        and `bytesBase64`'s own `maxLength` is the base64 ceiling for that
+        same decoded bound. `contentType` is the closed vocabulary the asset
+        read declares; `image/svg+xml` is deliberately absent everywhere in
+        this contract (an SVG can carry script). `DELETE` names only the
+        path it removes and carries none of the write-only members.
       properties:
         action:
           enum:
@@ -309,7 +377,7 @@ components:
             - DELETE
           type: string
         bytesBase64:
-          maxLength: 6990512
+          maxLength: 69905072
           pattern: ^[A-Za-z0-9+/]+={0,2}$
           type: string
         contentDigest:
@@ -322,6 +390,12 @@ components:
             - image/webp
             - image/gif
             - image/avif
+            - audio/mpeg
+            - audio/mp4
+            - audio/ogg
+            - audio/wav
+            - video/mp4
+            - video/webm
           type: string
         path:
           maxLength: 512
@@ -9715,20 +9789,22 @@ components:
         (`path`, `contentDigest`, `expectedHead`) plans one document write
         against the exact expected head. The additive batch shape
         (`baseRevision` and at least one of `documents`/`assets`) plans up
-        to 20 documents and 20 assets -- each `PUT` with its own text or
+        to 20 documents and 40 assets -- each `PUT` with its own text or
         bytes and digest, each `DELETE` naming only its path -- in one
         change, against the exact expected main-branch head asserted as
         `baseRevision`. A request mixing the two shapes, or a batch request
         naming neither `documents` nor `assets`, is `422 VALIDATION_FAILED`.
-        The change's total serialized size must not exceed 20 MiB;
+        The change's total serialized size must not exceed 100 MiB;
         `assets[].bytesBase64` is base64 over raw bytes, so what counts
-        against the 5 MiB per-asset and 20 MiB per-change bounds is the
-        decoded byte length, not this field's text length.
+        against the per-asset and 100 MiB per-change bounds is the decoded
+        byte length, not this field's text length. Per-asset, by media
+        category: image 5 MiB, sound 20 MiB, video 50 MiB (documents are
+        unchanged since 2.14.0: 20 documents, 1 MiB text each).
       properties:
         assets:
           items:
             $ref: "#/components/schemas/ContentChangeAssetEntry"
-          maxItems: 20
+          maxItems: 40
           type: array
         baseRevision:
           pattern: ^(?:sha1:[0-9a-f]{40}|sha256:[0-9a-f]{64})$
@@ -20601,12 +20677,29 @@ paths:
   /v2/organizations/{organizationId}/publications/{publicationId}/content/assets:
     get:
       description: |
-        Bytes of one image under a declared asset root, with the same
-        `revision` rule as the document read. `Content-Type` is exactly one of
-        the six closed values below, sniffed from the asset's own bytes rather
-        than trusted from what was written at plan time, with
-        `X-Content-Type-Options: nosniff` and `Content-Disposition: inline` so
-        a browser renders it and never executes it. An asset over 5 MiB is
+        Bytes of one image, sound or video file under a declared asset root
+        (an article's cover image, or a file referenced from its body,
+        copied through unchanged: no resizing, no derived formats), with the
+        same `revision` rule as the document read. `Content-Type` is
+        sniffed from the asset's own bytes rather than trusted from what was
+        written at plan time, with `X-Content-Type-Options: nosniff` and
+        `Content-Disposition: inline` so a browser renders it and never
+        executes it. This operation serves eleven types. `image/svg+xml`
+        remains in the `200` response's declared content-type list only
+        because it was published there since SCHEMA-2.14.0, and removing it
+        would not be additive; no server version has ever answered with it.
+        A stored SVG is refused with the declared `422` on read exactly as
+        on write (`content-changes:plan`'s `ContentChangeAssetEntry` never
+        accepts it either): an SVG can carry script, and this operation
+        answers `Content-Disposition: inline` from the application's own
+        origin, so serving one would let a file in a repository run script
+        in a signed-in person's session. Every response declares
+        `Accept-Ranges: bytes` and honours a single-range `Range` request
+        header for sound and video, so a player can seek: a satisfiable
+        range is `206` with `Content-Range`; an unsatisfiable one is `416`
+        with `Content-Range: bytes */<total>`. An asset over its
+        per-category bound (image 5 MiB, sound 20 MiB, video 50 MiB), or
+        whose sniffed type is not one of the eleven served types, is
         `422 VALIDATION_FAILED` pointed at `/path`.
       operationId: getOrganizationsByOrganizationIdPublicationsByPublicationIdContentAssets
       parameters:
@@ -20643,9 +20736,26 @@ paths:
           schema:
             pattern: ^(?:sha1:[0-9a-f]{40}|sha256:[0-9a-f]{64})$
             type: string
+        - $ref: "#/components/parameters/Range"
       responses:
         "200":
           content:
+            audio/mp4:
+              schema:
+                format: binary
+                type: string
+            audio/mpeg:
+              schema:
+                format: binary
+                type: string
+            audio/ogg:
+              schema:
+                format: binary
+                type: string
+            audio/wav:
+              schema:
+                format: binary
+                type: string
             image/avif:
               schema:
                 format: binary
@@ -20670,12 +20780,82 @@ paths:
               schema:
                 format: binary
                 type: string
+            video/mp4:
+              schema:
+                format: binary
+                type: string
+            video/webm:
+              schema:
+                format: binary
+                type: string
           description: read one content asset succeeded
           headers:
+            Accept-Ranges:
+              $ref: "#/components/headers/AcceptRanges"
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            Content-Disposition:
+              $ref: "#/components/headers/ContentDispositionInline"
+            X-Content-Type-Options:
+              $ref: "#/components/headers/XContentTypeOptionsNosniff"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+        "206":
+          content:
+            audio/mp4:
+              schema:
+                format: binary
+                type: string
+            audio/mpeg:
+              schema:
+                format: binary
+                type: string
+            audio/ogg:
+              schema:
+                format: binary
+                type: string
+            audio/wav:
+              schema:
+                format: binary
+                type: string
+            image/avif:
+              schema:
+                format: binary
+                type: string
+            image/gif:
+              schema:
+                format: binary
+                type: string
+            image/jpeg:
+              schema:
+                format: binary
+                type: string
+            image/png:
+              schema:
+                format: binary
+                type: string
+            image/webp:
+              schema:
+                format: binary
+                type: string
+            video/mp4:
+              schema:
+                format: binary
+                type: string
+            video/webm:
+              schema:
+                format: binary
+                type: string
+          description: read a satisfiable byte range of one content asset succeeded
+          headers:
+            Accept-Ranges:
+              $ref: "#/components/headers/AcceptRanges"
             Cache-Control:
               $ref: "#/components/headers/CacheControlNoStore"
             Content-Disposition:
               $ref: "#/components/headers/ContentDispositionInline"
+            Content-Range:
+              $ref: "#/components/headers/ContentRange"
             X-Content-Type-Options:
               $ref: "#/components/headers/XContentTypeOptionsNosniff"
             X-Correlation-Id:
@@ -20788,6 +20968,37 @@ paths:
               $ref: "#/components/headers/XCorrelationId"
           x-gala-problem-codes:
             - RESOURCE_NOT_FOUND
+        "416":
+          content:
+            application/problem+json:
+              examples:
+                VALIDATION_FAILED:
+                  summary: VALIDATION_FAILED
+                  value:
+                    code: VALIDATION_FAILED
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: The requested Range is not satisfiable against this asset's real length, named on Content-Range. See the operation contract.
+                    errors:
+                      - code: VALIDATION_FAILED
+                        pointer: /
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 416
+                    title: VALIDATION_FAILED
+                    type: urn:gala:problem:validation-failed
+              schema:
+                $ref: "#/components/schemas/Problem"
+          description: VALIDATION_FAILED
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            Content-Range:
+              $ref: "#/components/headers/ContentRange"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+          x-gala-problem-codes:
+            - VALIDATION_FAILED
         "422":
           content:
             application/problem+json:
@@ -20797,7 +21008,7 @@ paths:
                   value:
                     code: VALIDATION_FAILED
                     correlationId: 018f0000-0000-7000-8000-000000000001
-                    detail: The asset exceeds the 5 MiB read bound, or its content type is not one of the six accepted image types. See the operation contract.
+                    detail: The asset exceeds its per-category read bound (image 5 MiB, sound 20 MiB, video 50 MiB), its sniffed content type is not one of the eleven served types, or it is image/svg+xml (never served, script risk). See the operation contract.
                     errors:
                       - code: VALIDATION_FAILED
                         pointer: /path

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rathnasgala2/schemas",
-  "version": "2.16.0",
+  "version": "2.17.0",
   "description": "Executable JSON Schema and OpenAPI contracts for Galascribe",
   "type": "module",
   "license": "Apache-2.0",

package/sbom.cdx.json

@@ -97,8 +97,8 @@
       "type": "library",
       "name": "schemas",
       "group": "@rathnasgala2",
-      "version": "2.16.0",
-      "bom-ref": "@rathnasgala2/schemas@2.16.0",
+      "version": "2.17.0",
+      "bom-ref": "@rathnasgala2/schemas@2.17.0",
       "description": "Executable JSON Schema and OpenAPI contracts for Galascribe",
       "licenses": [
         {
@@ -108,7 +108,7 @@
           }
         }
       ],
-      "purl": "pkg:npm/%40rathnasgala2/schemas@2.16.0?vcs_url=git%2Bhttps%3A%2F%2Fgithub.com%2Frathnasgala2%2Fschema.git",
+      "purl": "pkg:npm/%40rathnasgala2/schemas@2.17.0?vcs_url=git%2Bhttps%3A%2F%2Fgithub.com%2Frathnasgala2%2Fschema.git",
       "externalReferences": [
         {
           "url": "https://github.com/rathnasgala2/schema/issues",
@@ -153,7 +153,7 @@
       "type": "library",
       "name": "ajv-formats",
       "version": "3.0.1",
-      "bom-ref": "@rathnasgala2/schemas@2.16.0|ajv-formats@3.0.1",
+      "bom-ref": "@rathnasgala2/schemas@2.17.0|ajv-formats@3.0.1",
       "licenses": [
         {
           "license": {
@@ -187,7 +187,7 @@
       "type": "library",
       "name": "ajv",
       "version": "8.20.0",
-      "bom-ref": "@rathnasgala2/schemas@2.16.0|ajv@8.20.0",
+      "bom-ref": "@rathnasgala2/schemas@2.17.0|ajv@8.20.0",
       "licenses": [
         {
           "license": {
@@ -221,7 +221,7 @@
       "type": "library",
       "name": "fast-deep-equal",
       "version": "3.1.3",
-      "bom-ref": "@rathnasgala2/schemas@2.16.0|fast-deep-equal@3.1.3",
+      "bom-ref": "@rathnasgala2/schemas@2.17.0|fast-deep-equal@3.1.3",
       "licenses": [
         {
           "license": {
@@ -255,7 +255,7 @@
       "type": "library",
       "name": "fast-uri",
       "version": "3.1.7",
-      "bom-ref": "@rathnasgala2/schemas@2.16.0|fast-uri@3.1.7",
+      "bom-ref": "@rathnasgala2/schemas@2.17.0|fast-uri@3.1.7",
       "licenses": [
         {
           "license": {
@@ -289,7 +289,7 @@
       "type": "library",
       "name": "json-schema-traverse",
       "version": "1.0.0",
-      "bom-ref": "@rathnasgala2/schemas@2.16.0|json-schema-traverse@1.0.0",
+      "bom-ref": "@rathnasgala2/schemas@2.17.0|json-schema-traverse@1.0.0",
       "licenses": [
         {
           "license": {
@@ -323,7 +323,7 @@
       "type": "library",
       "name": "require-from-string",
       "version": "2.0.2",
-      "bom-ref": "@rathnasgala2/schemas@2.16.0|require-from-string@2.0.2",
+      "bom-ref": "@rathnasgala2/schemas@2.17.0|require-from-string@2.0.2",
       "licenses": [
         {
           "license": {
@@ -1064,10 +1064,10 @@
   ],
   "dependencies": [
     {
-      "ref": "@rathnasgala2/schemas@2.16.0",
+      "ref": "@rathnasgala2/schemas@2.17.0",
       "dependsOn": [
-        "@rathnasgala2/schemas@2.16.0|ajv-formats@3.0.1",
-        "@rathnasgala2/schemas@2.16.0|ajv@8.20.0",
+        "@rathnasgala2/schemas@2.17.0|ajv-formats@3.0.1",
+        "@rathnasgala2/schemas@2.17.0|ajv@8.20.0",
         "pkg:npm/semver@7.8.5",
         "urn:gala:source-data:iana-ipv4-special-registry",
         "urn:gala:source-data:iana-ipv6-special-registry",
@@ -1089,31 +1089,31 @@
       ]
     },
     {
-      "ref": "@rathnasgala2/schemas@2.16.0|ajv-formats@3.0.1",
+      "ref": "@rathnasgala2/schemas@2.17.0|ajv-formats@3.0.1",
       "dependsOn": [
-        "@rathnasgala2/schemas@2.16.0|ajv@8.20.0"
+        "@rathnasgala2/schemas@2.17.0|ajv@8.20.0"
       ]
     },
     {
-      "ref": "@rathnasgala2/schemas@2.16.0|ajv@8.20.0",
+      "ref": "@rathnasgala2/schemas@2.17.0|ajv@8.20.0",
       "dependsOn": [
-        "@rathnasgala2/schemas@2.16.0|fast-deep-equal@3.1.3",
-        "@rathnasgala2/schemas@2.16.0|fast-uri@3.1.7",
-        "@rathnasgala2/schemas@2.16.0|json-schema-traverse@1.0.0",
-        "@rathnasgala2/schemas@2.16.0|require-from-string@2.0.2"
+        "@rathnasgala2/schemas@2.17.0|fast-deep-equal@3.1.3",
+        "@rathnasgala2/schemas@2.17.0|fast-uri@3.1.7",
+        "@rathnasgala2/schemas@2.17.0|json-schema-traverse@1.0.0",
+        "@rathnasgala2/schemas@2.17.0|require-from-string@2.0.2"
       ]
     },
     {
-      "ref": "@rathnasgala2/schemas@2.16.0|fast-deep-equal@3.1.3"
+      "ref": "@rathnasgala2/schemas@2.17.0|fast-deep-equal@3.1.3"
     },
     {
-      "ref": "@rathnasgala2/schemas@2.16.0|fast-uri@3.1.7"
+      "ref": "@rathnasgala2/schemas@2.17.0|fast-uri@3.1.7"
     },
     {
-      "ref": "@rathnasgala2/schemas@2.16.0|json-schema-traverse@1.0.0"
+      "ref": "@rathnasgala2/schemas@2.17.0|json-schema-traverse@1.0.0"
     },
     {
-      "ref": "@rathnasgala2/schemas@2.16.0|require-from-string@2.0.2"
+      "ref": "@rathnasgala2/schemas@2.17.0|require-from-string@2.0.2"
     },
     {
       "ref": "pkg:npm/semver@7.8.5"

package/schemas/artifact-manifest.schema.json

@@ -570,9 +570,16 @@
             "image/jpeg",
             "image/webp",
             "image/avif",
+            "image/gif",
             "image/svg+xml",
             "font/woff2",
-            "application/octet-stream"
+            "application/octet-stream",
+            "audio/mpeg",
+            "audio/mp4",
+            "audio/ogg",
+            "audio/wav",
+            "video/mp4",
+            "video/webm"
           ]
         },
         "byteLength": { "$ref": "#/$defs/nonNegativeInt64" },
@@ -604,9 +611,16 @@
             "image/jpeg",
             "image/webp",
             "image/avif",
+            "image/gif",
             "image/svg+xml",
             "font/woff2",
-            "application/octet-stream"
+            "application/octet-stream",
+            "audio/mpeg",
+            "audio/mp4",
+            "audio/ogg",
+            "audio/wav",
+            "video/mp4",
+            "video/webm"
           ]
         },
         "byteLength": { "$ref": "#/$defs/nonNegativeInt64" },