@rathnasgala2/schemas 2.20.2 → 2.21.0

package/README.md

@@ -59,10 +59,11 @@ removed it as unconsumed -- see "Package layout"). The schema inventory adds the
 separately owned OpenAPI contract as the twenty-first identity and carries
 DEC-091's domain-separated `sourceDesignRevision`. S0-T07 materializes the
 reviewed OpenAPI 3.1 source fragments, deterministic bundle, and digest-bound
-HTTP catalog for exactly 85 MVP operations plus `/internal/health` (86 catalog
+HTTP catalog for exactly 87 MVP operations plus `/internal/health` (88 catalog
 rows; 71 at S0-T07, plus the two SCHEMA-2.8.0 reads, the two SCHEMA-2.10.0
 publication-destination reads/writes, the SCHEMA-2.13.0 repository create, and
-the nine SCHEMA-2.14.0 write/preview/publish operations). The bundle includes
+the nine SCHEMA-2.14.0 write/preview/publish operations, and the SCHEMA-2.20.3
+review event stream, and the SCHEMA-2.21.0 appearance read). The bundle includes
 the accepted DEC-097 receipt-exchange and deployment-receipt amendments and
 serializes the fixed OpenAPI Generator 7.25.0 option sets. Every operation also
 declares its tenant scope, lifecycle and activation guards, maps every reachable
@@ -683,7 +684,7 @@ remediation, and documentation URL fields without including authored values.
   fragments grouped by the first literal resource token. A build input, not part
   of the npm payload (SCH-H7: `!openapi/source/` in `package.json`'s `files`) --
   a consumer reads the materialized `openapi/openapi.yaml` instead.
-- `openapi/openapi.yaml` — deterministic OpenAPI 3.1 bundle for the exact 85 MVP
+- `openapi/openapi.yaml` — deterministic OpenAPI 3.1 bundle for the exact 87 MVP
   operations plus health.
 - `openapi/http-catalog.json` — generated digest-bound method/path/purpose and
   capability inventory, including `conditionalCapabilityKeys` (SCHEMA-2.7.1) and

package/THIRD_PARTY_LICENSES.json

@@ -1,6 +1,6 @@
 {
   "schemaVersion": 1,
-  "package": "@rathnasgala2/schemas@2.20.2",
+  "package": "@rathnasgala2/schemas@2.21.0",
   "source": "package-lock.json",
   "dependencies": [
     {
@@ -743,21 +743,21 @@
     },
     {
       "name": "brace-expansion",
-      "version": "2.1.4",
+      "version": "2.1.7",
       "license": "MIT",
       "development": true,
       "optional": true,
       "peer": false,
-      "integrity": "sha512-hGfVzPxthbf3+2yjg/RBs60cB0FhqBS/zvdV/4wn4/BmN0bNMMHPc4V/BbFieqf1TKAGGAHnY4eSjajCl0f2Xg=="
+      "integrity": "sha512-uZbew1NqdmPDTMJ8ah1y+b+9QEJrfkXFk3RcTQw3X0jW/xRUvFKsg1CfQdSYGdTbXZWExtU3J3ccxtnfw1Fi0g=="
     },
     {
       "name": "brace-expansion",
-      "version": "5.0.9",
+      "version": "5.0.12",
       "license": "MIT",
       "development": true,
       "optional": false,
       "peer": false,
-      "integrity": "sha512-ScQ4IuvIEF1TMlP7Zt+vjJ//9zlPb2SDcxWxM3bk8s6t6GGdJ7KO1dCcTidOPJKePW30LE/2cT7wCyPho9/Wxg=="
+      "integrity": "sha512-YovQ3rzhaLMIrDjNDMkNS01tea93qhEhG5xy8f6+R0l+dw3Ki+5sCoIoI942iuLZTHWogWktgwVDhU09iNEimQ=="
     },
     {
       "name": "buffer",
@@ -1238,12 +1238,12 @@
     },
     {
       "name": "fast-uri",
-      "version": "3.1.7",
+      "version": "3.1.8",
       "license": "BSD-3-Clause",
       "development": false,
       "optional": false,
       "peer": false,
-      "integrity": "sha512-dOvZVzjdZdz7phd9v6jCbwxrBW3fK6n8Rc0CtdmM4bumzMnxywBYhuph6J819RRw/ku+rLbelwfMunktuzVVHg=="
+      "integrity": "sha512-GZMtZUTNRpOVIECoXwLNZS5xUGE+mVNbTB8h/7Rwh2TFWcBQiPzTgyZi05BF9UMZKkLJv8XBRJTlU7zg8+ZfMg=="
     },
     {
       "name": "fdir",
@@ -1463,12 +1463,12 @@
     },
     {
       "name": "http-cache-semantics",
-      "version": "4.2.0",
+      "version": "4.3.0",
       "license": "BSD-2-Clause",
       "development": true,
       "optional": true,
       "peer": false,
-      "integrity": "sha512-dTxcvPXqPvXBQpq5dUr6mEMJX4oIEFv6bwom3FDwKRDsuIjjJGANqhBuoAn9c1RQJIdAKav33ED65E2ys+87QQ=="
+      "integrity": "sha512-M5t5LlJpS1UHMjvwRQVdFHvPISGeLAxNcrWuJkeGh0KxsqCHZ1O3NXZU/8x7cD0BDcGW8kapxMKTvwlqrNkHkA=="
     },
     {
       "name": "http-proxy-agent",
@@ -1571,12 +1571,12 @@
     },
     {
       "name": "ip-address",
-      "version": "10.7.0",
+      "version": "10.7.3",
       "license": "MIT",
       "development": true,
       "optional": true,
       "peer": false,
-      "integrity": "sha512-BGFsyJd5mpXp3rK6jIdADLNgpJUK1jnjzvYF8lK+VyDab9JAmqN0YOKDdP17HlgKb2+ehPgDc8EtnRLbGCAMhA=="
+      "integrity": "sha512-A1kdq/tSb5QjvKvAMgIoEvDBIgL7qaqVP/jkvSwYYRZ9iEzvPpopxp2wQfu3SuZRHtpHNxMn8Fs0bS+gf5Xmwg=="
     },
     {
       "name": "is-core-module",

package/docs/catalogs/app-components.json

@@ -2762,7 +2762,7 @@
     },
     {
       "contentKey": "organizations.by-organization-id.publications.by-publication-id.reviews.screen.ready.summary",
-      "defaultMessage": "Open the exact GitHub pull request for a proposed change, use GitHub for discussion and review, then verify its exact merge before publishing.",
+      "defaultMessage": "Open the exact GitHub pull request for a proposed change, use GitHub for discussion and review, then Galascribe observes its exact merge automatically before publishing.",
       "description": "Summary for the organizations.by-organization-id.publications.by-publication-id.reviews screen, copied verbatim from document 14's Screen/job cell.",
       "placeholders": {},
       "sensitivity": "AUTHENTICATED"
@@ -3168,7 +3168,7 @@
     },
     {
       "contentKey": "organizations.by-organization-id.publications.by-publication-id.settings.screen.ready.summary",
-      "defaultMessage": "Update this publication's name and details, choose its deployment destination, or retire it. Changing its modules, appearance, and membership, and transferring it, are not available yet.",
+      "defaultMessage": "Update this publication's name and details, choose its deployment destination, or retire it. Change its theme under Appearance. Changing its modules and membership, and transferring it, are not available yet.",
       "description": "Summary for the organizations.by-organization-id.publications.by-publication-id.settings screen, copied verbatim from document 14's Screen/job cell.",
       "placeholders": {},
       "sensitivity": "AUTHENTICATED"
@@ -4707,5 +4707,5 @@
       "sensitivity": "PUBLIC"
     }
   ],
-  "digest": "sha256:19224c64ecee26f8f00ae1cd2fa8fb767311e21ab5b139e799f66b0bbec5936a"
+  "digest": "sha256:fc5992979b53a352d31c570c836e4a67728faacae3c0c6d15196b22912424fcd"
 }

package/docs/catalogs/app-routes.json

@@ -979,6 +979,7 @@
       "apiOperationIds": [
         "getOrganizationsByOrganizationIdOperationsByOperationId",
         "getOrganizationsByOrganizationIdPublicationsByPublicationId",
+        "getOrganizationsByOrganizationIdPublicationsByPublicationIdAppearance",
         "getOrganizationsByOrganizationIdPublicationsByPublicationIdContent",
         "getOrganizationsByOrganizationIdPublicationsByPublicationIdContentAssets",
         "getOrganizationsByOrganizationIdPublicationsByPublicationIdContentDocuments",
@@ -1172,6 +1173,7 @@
         "getOrganizationsByOrganizationIdPublicationsByPublicationIdRepositoryChangesByChangeId",
         "getOrganizationsByOrganizationIdPublicationsByPublicationIdReviews",
         "getOrganizationsByOrganizationIdPublicationsByPublicationIdReviewsByReviewId",
+        "getOrganizationsByOrganizationIdPublicationsByPublicationIdReviewsEvents",
         "postOrganizationsByOrganizationIdPublicationsByPublicationIdRepositoryChangesByChangeIdConfirm",
         "postOrganizationsByOrganizationIdPublicationsByPublicationIdReviews",
         "postOrganizationsByOrganizationIdPublicationsByPublicationIdReviewsByReviewIdDecide"
@@ -1257,6 +1259,7 @@
       ],
       "apiOperationIds": [
         "deleteOrganizationsByOrganizationIdPublicationsByPublicationId",
+        "getOrganizationsByOrganizationIdPublicationsByPublicationIdAppearance",
         "getOrganizationsByOrganizationIdPublicationsByPublicationIdDestination",
         "patchOrganizationsByOrganizationIdPublicationsByPublicationId",
         "postOrganizationsByOrganizationIdPublicationsByPublicationIdConfigurationChangesPlan",
@@ -1628,5 +1631,5 @@
       ]
     }
   ],
-  "digest": "sha256:d642c9a2b300245d8f9fac1218786a63e114a3ec2863ef1605085d57ca015bde"
+  "digest": "sha256:d4ca7b609db70b47de4d0d5651de66da8f45e0e08faeaf03407239da912164bd"
 }

package/docs/catalogs/schema-inventory.json

@@ -209,9 +209,9 @@
       "version": "2.0.0",
       "path": "openapi/openapi.yaml",
       "materialized": true,
-      "sourceDigest": "sha256:d2f0fca368b85337ab0960bea3ac7519e99bc5d201e8b73a9c26ba18a796e198",
+      "sourceDigest": "sha256:e56f061a458515cd7d3b492d6f3397d4aed31a355a1a4820afdfb79558f42a16",
       "typescriptRootType": null
     }
   ],
-  "digest": "sha256:6dbafbec52e2caedfc3efd5f2ea56b27976aa4661f85d5424d3d24e3854c3bc5"
+  "digest": "sha256:26808268fe33dfb5c04f375391193620deac1b91f6346c78749dbbf8d81bac06"
 }

package/openapi/http-catalog.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": "2.0.0",
   "sourceDesignRevision": "a53052955ceb6c1aa10c886289dc832eedfe6de0a00004df07d353ac19c4403a",
-  "openApiDigest": "sha256:d2f0fca368b85337ab0960bea3ac7519e99bc5d201e8b73a9c26ba18a796e198",
+  "openApiDigest": "sha256:e56f061a458515cd7d3b492d6f3397d4aed31a355a1a4820afdfb79558f42a16",
   "operations": [
     {
       "operationId": "getInternalHealth",
@@ -461,6 +461,18 @@
       "actionGrant": "none",
       "sourceFragment": "organizations"
     },
+    {
+      "operationId": "getOrganizationsByOrganizationIdPublicationsByPublicationIdAppearance",
+      "method": "GET",
+      "path": "/v2/organizations/{organizationId}/publications/{publicationId}/appearance",
+      "purpose": "read this publication's theme selection at the main branch head",
+      "capabilityKey": "publication.view",
+      "conditionalCapabilityKeys": [],
+      "activationGate": "MVP",
+      "assuranceClass": "SESSION",
+      "actionGrant": "none",
+      "sourceFragment": "organizations"
+    },
     {
       "operationId": "postOrganizationsByOrganizationIdPublicationsByPublicationIdConfigurationChangesPlan",
       "method": "POST",
@@ -808,6 +820,20 @@
       "actionGrant": "none",
       "sourceFragment": "organizations"
     },
+    {
+      "operationId": "getOrganizationsByOrganizationIdPublicationsByPublicationIdReviewsEvents",
+      "method": "GET",
+      "path": "/v2/organizations/{organizationId}/publications/{publicationId}/reviews/events",
+      "purpose": "stream review state-change notifications",
+      "capabilityKey": "publication.review",
+      "conditionalCapabilityKeys": [
+        "publication.view"
+      ],
+      "activationGate": "MVP",
+      "assuranceClass": "SESSION",
+      "actionGrant": "none",
+      "sourceFragment": "organizations"
+    },
     {
       "operationId": "getOrganizationsByOrganizationIdRoles",
       "method": "GET",
@@ -1049,5 +1075,5 @@
       "sourceFragment": "workloads"
     }
   ],
-  "digest": "sha256:efee512ea3eeef5c1ff9be78e6a037e2d174f88bdedb7255cda3d7444d7a0509"
+  "digest": "sha256:15b597ba9cb227bd300ce9b51e65f8e6faf43b36a4c8047b3de85a8bd0b3289a"
 }

package/openapi/openapi.yaml

@@ -234,6 +234,24 @@ components:
         - activationDetectionPlanDigest
         - activationDetectionObservation
       type: object
+    AppearanceColorMode:
+      enum:
+        - light
+        - dark
+        - system
+      type: string
+    AppearanceThemeId:
+      description: |
+        The closed catalog of themes the server can select. `default` names
+        `@rathnasgala2/theme-default`, `amaze` names
+        `@rathnasgala2/theme-amaze`, and so on.
+      enum:
+        - default
+        - amaze
+        - flashy
+        - minimal
+        - zebra
+      type: string
     AuthenticatorState:
       enum:
         - ACTIVE
@@ -291,6 +309,20 @@ components:
         - kind
         - label
       type: object
+    ContentChangeAppearanceEntry:
+      additionalProperties: false
+      description: |
+        The theme selection inside a batch `content-changes:plan` request.
+        Both members are required.
+      properties:
+        colorModeDefault:
+          $ref: "#/components/schemas/AppearanceColorMode"
+        themeId:
+          $ref: "#/components/schemas/AppearanceThemeId"
+      required:
+        - themeId
+        - colorModeDefault
+      type: object
     ContentChangeAssetEntry:
       additionalProperties: false
       allOf:
@@ -1109,6 +1141,40 @@ components:
         - state
         - operationId
       type: object
+    GetOrganizationsByOrganizationIdPublicationsByPublicationIdAppearanceResponse:
+      additionalProperties: false
+      properties:
+        built:
+          oneOf:
+            - $ref: "#/components/schemas/PublicationAppearanceBuilt"
+            - type: "null"
+        catalog:
+          items:
+            $ref: "#/components/schemas/PublicationAppearanceCatalogEntry"
+          maxItems: 5
+          type: array
+        consistent:
+          type: boolean
+        head:
+          pattern: ^(?:sha1:[0-9a-f]{40}|sha256:[0-9a-f]{64})$
+          type: string
+        openChange:
+          oneOf:
+            - $ref: "#/components/schemas/PublicationAppearanceOpenChange"
+            - type: "null"
+        selected:
+          $ref: "#/components/schemas/PublicationAppearanceSelected"
+        setUp:
+          type: boolean
+      required:
+        - head
+        - setUp
+        - selected
+        - built
+        - consistent
+        - catalog
+        - openChange
+      type: object
     GetOrganizationsByOrganizationIdPublicationsByPublicationIdContentDocumentsResponse:
       additionalProperties: false
       properties:
@@ -1598,6 +1664,9 @@ components:
     GetOrganizationsByOrganizationIdPublicationsByPublicationIdReviewsByReviewIdResponse:
       allOf:
         - $ref: "#/components/schemas/ReviewSummary"
+    GetOrganizationsByOrganizationIdPublicationsByPublicationIdReviewsEventsResponse:
+      description: Server-sent review state-change notifications.
+      type: string
     GetOrganizationsByOrganizationIdPublicationsByPublicationIdReviewsResponse:
       additionalProperties: false
       allOf:
@@ -9847,12 +9916,20 @@ components:
         Two request shapes, both accepted. The 2.13.0 single-document shape
         (`path`, `contentDigest`, `expectedHead`) plans one document write
         against the exact expected head. The additive batch shape
-        (`baseRevision` and at least one of `documents`/`assets`) plans up
-        to 20 documents and 40 assets -- each `PUT` with its own text or
-        bytes and digest, each `DELETE` naming only its path -- in one
-        change, against the exact expected main-branch head asserted as
-        `baseRevision`. A request mixing the two shapes, or a batch request
-        naming neither `documents` nor `assets`, is `422 VALIDATION_FAILED`.
+        (`baseRevision` and at least one of `documents`/`assets`/`appearance`)
+        plans up to 20 documents and 40 assets -- each `PUT` with its own
+        text or bytes and digest, each `DELETE` naming only its path -- and
+        optionally one theme selection in one change, against the exact
+        expected main-branch head asserted as `baseRevision`. A request
+        mixing the two shapes, or a batch request naming none of
+        `documents`, `assets` and `appearance`, is `422 VALIDATION_FAILED`.
+        `appearance` names a catalog theme and a default colour mode; the
+        server writes `gala/appearance.json` (only `theme` and
+        `colorMode.default` change, every other member is preserved) and the
+        `gala.lock.json` `theme` block from its closed theme catalog, both
+        in the same change. An `appearance` equal to the current selection
+        is `422 VALIDATION_FAILED` pointed at `/appearance`. Document paths
+        under `gala/` and `gala.lock.json` remain forbidden.
         The change's total serialized size must not exceed 100 MiB;
         `assets[].bytesBase64` is base64 over raw bytes, so what counts
         against the per-asset and 100 MiB per-change bounds is the decoded
@@ -9860,6 +9937,8 @@ components:
         category: image 5 MiB, sound 20 MiB, video 50 MiB (documents are
         unchanged since 2.14.0: 20 documents, 1 MiB text each).
       properties:
+        appearance:
+          $ref: "#/components/schemas/ContentChangeAppearanceEntry"
         assets:
           items:
             $ref: "#/components/schemas/ContentChangeAssetEntry"
@@ -10917,6 +10996,88 @@ components:
       type: object
     Problem:
       $ref: "#/components/schemas/PortableProblemDocument"
+    PublicationAppearanceBuilt:
+      additionalProperties: false
+      description: |
+        From the `theme` block of `gala.lock.json`, the sole authority for the
+        theme a build uses. `themeId` is `null` when the locked package is not
+        in the catalog.
+      properties:
+        themeId:
+          oneOf:
+            - $ref: "#/components/schemas/AppearanceThemeId"
+            - type: "null"
+        themePackage:
+          maxLength: 214
+          minLength: 1
+          type: string
+        version:
+          maxLength: 256
+          minLength: 1
+          type: string
+      required:
+        - themeId
+        - themePackage
+        - version
+      type: object
+    PublicationAppearanceCatalogEntry:
+      additionalProperties: false
+      properties:
+        description:
+          maxLength: 280
+          minLength: 1
+          type: string
+        displayName:
+          maxLength: 80
+          minLength: 1
+          type: string
+        package:
+          maxLength: 214
+          minLength: 1
+          type: string
+        themeId:
+          $ref: "#/components/schemas/AppearanceThemeId"
+        version:
+          maxLength: 256
+          minLength: 1
+          type: string
+      required:
+        - themeId
+        - package
+        - version
+        - displayName
+        - description
+      type: object
+    PublicationAppearanceOpenChange:
+      additionalProperties: false
+      properties:
+        changeId:
+          format: uuid
+          pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$
+          type: string
+      required:
+        - changeId
+      type: object
+    PublicationAppearanceSelected:
+      additionalProperties: false
+      description: |
+        From `gala/appearance.json`. `themeId` is `null` ("Custom theme") when
+        `themePackage` is not in the catalog. `themePackage` is the file's
+        `theme` value, a package with its version range.
+      properties:
+        colorModeDefault:
+          $ref: "#/components/schemas/AppearanceColorMode"
+        themeId:
+          oneOf:
+            - $ref: "#/components/schemas/AppearanceThemeId"
+            - type: "null"
+        themePackage:
+          $ref: "#/components/schemas/PortableAppearancePackageRange"
+      required:
+        - themeId
+        - themePackage
+        - colorModeDefault
+      type: object
     PublicationState:
       enum:
         - PROVISIONING
@@ -19831,6 +19992,280 @@ paths:
         - Publication:RETIRING|RETIRED -> PROVISIONING
       x-gala-success-category: update
       x-gala-tenant-scope: ORGANIZATION_AND_PUBLICATION_PATH
+  /v2/organizations/{organizationId}/publications/{publicationId}/appearance:
+    get:
+      description: |
+        Reads this publication's theme selection at the linked repository's
+        current main branch head: `selected` from `gala/appearance.json`
+        (`theme`, `colorMode.default`), `built` from the `theme` block of
+        `gala.lock.json`, and the closed five-theme `catalog` the server can
+        write. `selected.themeId` and `built.themeId` are `null` when that
+        file names a package outside the catalog ("Custom theme").
+        `consistent` is true when `selected` and `built` name the same
+        package. `setUp` matches `GET .../repository/setup`'s `state`.
+        `openChange` names an existing not-yet-published repository change
+        of this publication that touches appearance, or is `null`, so a
+        client links to it instead of planning a second one. The browser
+        never reads or edits `gala/appearance.json` or `gala.lock.json` as
+        text; `GET .../content/documents` still refuses both paths.
+      operationId: getOrganizationsByOrganizationIdPublicationsByPublicationIdAppearance
+      parameters:
+        - $ref: "#/components/parameters/XCorrelationId"
+        - example: 018f0000-0000-7000-8000-000000000001
+          in: path
+          name: organizationId
+          required: true
+          schema:
+            format: uuid
+            pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$
+            type: string
+        - example: 018f0000-0000-7000-8000-000000000001
+          in: path
+          name: publicationId
+          required: true
+          schema:
+            format: uuid
+            pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$
+            type: string
+      responses:
+        "200":
+          content:
+            application/json:
+              examples:
+                nominal:
+                  summary: Nominal successful response
+                  value:
+                    built:
+                      themeId: default
+                      themePackage: "@rathnasgala2/theme-default"
+                      version: 2.0.0
+                    catalog:
+                      - description: The calm default look.
+                        displayName: Default
+                        package: "@rathnasgala2/theme-default"
+                        themeId: default
+                        version: 2.0.0
+                    consistent: true
+                    head: sha1:0000000000000000000000000000000000000000
+                    openChange: null
+                    selected:
+                      colorModeDefault: system
+                      themeId: default
+                      themePackage: "@rathnasgala2/theme-default@^2.0.0"
+                    setUp: true
+              schema:
+                $ref: "#/components/schemas/GetOrganizationsByOrganizationIdPublicationsByPublicationIdAppearanceResponse"
+          description: read this publication's theme selection at the main branch head succeeded
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+        "400":
+          content:
+            application/problem+json:
+              examples:
+                VALIDATION_FAILED:
+                  summary: VALIDATION_FAILED
+                  value:
+                    code: VALIDATION_FAILED
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 400
+                    title: VALIDATION_FAILED
+                    type: urn:gala:problem:validation-failed
+              schema:
+                $ref: "#/components/schemas/Problem"
+          description: VALIDATION_FAILED
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+          x-gala-problem-codes:
+            - VALIDATION_FAILED
+        "401":
+          content:
+            application/problem+json:
+              examples:
+                AUTHENTICATION_REQUIRED:
+                  summary: AUTHENTICATION_REQUIRED
+                  value:
+                    code: AUTHENTICATION_REQUIRED
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 401
+                    title: AUTHENTICATION_REQUIRED
+                    type: urn:gala:problem:authentication-required
+              schema:
+                $ref: "#/components/schemas/Problem"
+          description: AUTHENTICATION_REQUIRED
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+          x-gala-problem-codes:
+            - AUTHENTICATION_REQUIRED
+        "403":
+          content:
+            application/problem+json:
+              examples:
+                AUTHORIZATION_DENIED:
+                  summary: AUTHORIZATION_DENIED
+                  value:
+                    code: AUTHORIZATION_DENIED
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 403
+                    title: AUTHORIZATION_DENIED
+                    type: urn:gala:problem:authorization-denied
+              schema:
+                $ref: "#/components/schemas/Problem"
+          description: AUTHORIZATION_DENIED
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+          x-gala-problem-codes:
+            - AUTHORIZATION_DENIED
+        "404":
+          content:
+            application/problem+json:
+              examples:
+                RESOURCE_NOT_FOUND:
+                  summary: RESOURCE_NOT_FOUND
+                  value:
+                    code: RESOURCE_NOT_FOUND
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 404
+                    title: RESOURCE_NOT_FOUND
+                    type: urn:gala:problem:resource-not-found
+              schema:
+                $ref: "#/components/schemas/Problem"
+          description: RESOURCE_NOT_FOUND
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+          x-gala-problem-codes:
+            - RESOURCE_NOT_FOUND
+        "429":
+          content:
+            application/problem+json:
+              examples:
+                RATE_LIMITED:
+                  summary: RATE_LIMITED
+                  value:
+                    code: RATE_LIMITED
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: true
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 429
+                    title: RATE_LIMITED
+                    type: urn:gala:problem:rate-limited
+              schema:
+                $ref: "#/components/schemas/Problem"
+          description: RATE_LIMITED
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            Retry-After:
+              $ref: "#/components/headers/RetryAfter"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+          x-gala-problem-codes:
+            - RATE_LIMITED
+        "503":
+          content:
+            application/problem+json:
+              examples:
+                CAPABILITY_UNAVAILABLE:
+                  summary: CAPABILITY_UNAVAILABLE
+                  value:
+                    code: CAPABILITY_UNAVAILABLE
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 503
+                    title: CAPABILITY_UNAVAILABLE
+                    type: urn:gala:problem:capability-unavailable
+                DEPENDENCY_UNAVAILABLE:
+                  summary: DEPENDENCY_UNAVAILABLE
+                  value:
+                    code: DEPENDENCY_UNAVAILABLE
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: true
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 503
+                    title: DEPENDENCY_UNAVAILABLE
+                    type: urn:gala:problem:dependency-unavailable
+              schema:
+                $ref: "#/components/schemas/Problem"
+          description: CAPABILITY_UNAVAILABLE, DEPENDENCY_UNAVAILABLE
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+          x-gala-problem-codes:
+            - CAPABILITY_UNAVAILABLE
+            - DEPENDENCY_UNAVAILABLE
+      security:
+        - browserSession: []
+      summary: read this publication's theme selection at the main branch head
+      tags:
+        - organizations
+      x-gala-activation-gate: MVP
+      x-gala-activation-guards:
+        - Active repository binding and configured GitHub App identity capability
+      x-gala-capability-key: publication.view
+      x-gala-concurrency: binding-epoch
+      x-gala-conditional-capabilities: []
+      x-gala-example-profile: NOMINAL_SUCCESS_AND_EACH_REACHABLE_PROBLEM
+      x-gala-nullability: required-and-nullable-are-explicit
+      x-gala-purpose: read this publication's theme selection at the main branch head
+      x-gala-reachable-problems:
+        - AUTHENTICATION_REQUIRED
+        - AUTHORIZATION_DENIED
+        - CAPABILITY_UNAVAILABLE
+        - DEPENDENCY_UNAVAILABLE
+        - RATE_LIMITED
+        - RESOURCE_NOT_FOUND
+        - VALIDATION_FAILED
+      x-gala-replay-identity: safe-query
+      x-gala-state-guards:
+        - NONE
+      x-gala-success-category: query
+      x-gala-tenant-scope: ORGANIZATION_AND_PUBLICATION_PATH
   /v2/organizations/{organizationId}/publications/{publicationId}/configuration-changes:plan:
     post:
       operationId: postOrganizationsByOrganizationIdPublicationsByPublicationIdConfigurationChangesPlan
@@ -27124,6 +27559,161 @@ paths:
         - Review:REQUESTED
       x-gala-success-category: async
       x-gala-tenant-scope: ORGANIZATION_AND_PUBLICATION_PATH
+  /v2/organizations/{organizationId}/publications/{publicationId}/reviews/events:
+    get:
+      description: |
+        Authenticated server-sent notification stream for review state changes.
+        Events carry no authority or canonical state; a client re-reads the
+        ordinary review and repository-change resources after each signal.
+      operationId: getOrganizationsByOrganizationIdPublicationsByPublicationIdReviewsEvents
+      parameters:
+        - $ref: "#/components/parameters/XCorrelationId"
+        - example: 018f0000-0000-7000-8000-000000000001
+          in: path
+          name: organizationId
+          required: true
+          schema:
+            format: uuid
+            pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$
+            type: string
+        - example: 018f0000-0000-7000-8000-000000000001
+          in: path
+          name: publicationId
+          required: true
+          schema:
+            format: uuid
+            pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$
+            type: string
+      responses:
+        "200":
+          content:
+            text/event-stream:
+              examples:
+                nominal:
+                  summary: Stream opened
+                  value: |-
+                    event: ready
+                    data: ready
+              schema:
+                $ref: "#/components/schemas/GetOrganizationsByOrganizationIdPublicationsByPublicationIdReviewsEventsResponse"
+          description: review event stream opened
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+        "400":
+          $ref: "#/components/responses/ValidationFailed"
+        "401":
+          content:
+            application/problem+json:
+              examples:
+                AUTHENTICATION_REQUIRED:
+                  summary: AUTHENTICATION_REQUIRED
+                  value:
+                    code: AUTHENTICATION_REQUIRED
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 401
+                    title: AUTHENTICATION_REQUIRED
+                    type: urn:gala:problem:authentication-required
+              schema:
+                $ref: "#/components/schemas/Problem"
+          description: AUTHENTICATION_REQUIRED
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+          x-gala-problem-codes:
+            - AUTHENTICATION_REQUIRED
+        "403":
+          content:
+            application/problem+json:
+              examples:
+                AUTHORIZATION_DENIED:
+                  summary: AUTHORIZATION_DENIED
+                  value:
+                    code: AUTHORIZATION_DENIED
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 403
+                    title: AUTHORIZATION_DENIED
+                    type: urn:gala:problem:authorization-denied
+              schema:
+                $ref: "#/components/schemas/Problem"
+          description: AUTHORIZATION_DENIED
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+          x-gala-problem-codes:
+            - AUTHORIZATION_DENIED
+        "404":
+          content:
+            application/problem+json:
+              examples:
+                RESOURCE_NOT_FOUND:
+                  summary: RESOURCE_NOT_FOUND
+                  value:
+                    code: RESOURCE_NOT_FOUND
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 404
+                    title: RESOURCE_NOT_FOUND
+                    type: urn:gala:problem:resource-not-found
+              schema:
+                $ref: "#/components/schemas/Problem"
+          description: RESOURCE_NOT_FOUND
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+          x-gala-problem-codes:
+            - RESOURCE_NOT_FOUND
+      security:
+        - browserSession: []
+      summary: stream review state-change notifications
+      tags:
+        - organizations
+      x-gala-action-grant: none
+      x-gala-activation-gate: MVP
+      x-gala-activation-guards:
+        - NONE
+      x-gala-assurance-class: SESSION
+      x-gala-capability-key: publication.review
+      x-gala-concurrency: none
+      x-gala-conditional-capabilities: []
+      x-gala-conditional-capability-keys:
+        - capabilityKey: publication.view
+          condition: read-only
+      x-gala-example-profile: NOMINAL_SUCCESS_AND_EACH_REACHABLE_PROBLEM
+      x-gala-nullability: required-and-nullable-are-explicit
+      x-gala-purpose: stream review state-change notifications
+      x-gala-reachable-problems:
+        - AUTHENTICATION_REQUIRED
+        - AUTHORIZATION_DENIED
+        - RESOURCE_NOT_FOUND
+        - VALIDATION_FAILED
+      x-gala-replay-identity: safe-query
+      x-gala-state-guards:
+        - NONE
+      x-gala-success-category: query
+      x-gala-tenant-scope: ORGANIZATION_AND_PUBLICATION_PATH
   /v2/organizations/{organizationId}/publications/{publicationId}/reviews/{reviewId}:
     get:
       operationId: getOrganizationsByOrganizationIdPublicationsByPublicationIdReviewsByReviewId

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rathnasgala2/schemas",
-  "version": "2.20.2",
+  "version": "2.21.0",
   "description": "Executable JSON Schema and OpenAPI contracts for Galascribe",
   "type": "module",
   "license": "Apache-2.0",

package/sbom.cdx.json

@@ -97,8 +97,8 @@
       "type": "library",
       "name": "schemas",
       "group": "@rathnasgala2",
-      "version": "2.20.2",
-      "bom-ref": "@rathnasgala2/schemas@2.20.2",
+      "version": "2.21.0",
+      "bom-ref": "@rathnasgala2/schemas@2.21.0",
       "description": "Executable JSON Schema and OpenAPI contracts for Galascribe",
       "licenses": [
         {
@@ -108,7 +108,7 @@
           }
         }
       ],
-      "purl": "pkg:npm/%40rathnasgala2/schemas@2.20.2?vcs_url=git%2Bhttps%3A%2F%2Fgithub.com%2Frathnasgala2%2Fschema.git",
+      "purl": "pkg:npm/%40rathnasgala2/schemas@2.21.0?vcs_url=git%2Bhttps%3A%2F%2Fgithub.com%2Frathnasgala2%2Fschema.git",
       "externalReferences": [
         {
           "url": "https://github.com/rathnasgala2/schema/issues",
@@ -153,7 +153,7 @@
       "type": "library",
       "name": "ajv-formats",
       "version": "3.0.1",
-      "bom-ref": "@rathnasgala2/schemas@2.20.2|ajv-formats@3.0.1",
+      "bom-ref": "@rathnasgala2/schemas@2.21.0|ajv-formats@3.0.1",
       "licenses": [
         {
           "license": {
@@ -187,7 +187,7 @@
       "type": "library",
       "name": "ajv",
       "version": "8.20.0",
-      "bom-ref": "@rathnasgala2/schemas@2.20.2|ajv@8.20.0",
+      "bom-ref": "@rathnasgala2/schemas@2.21.0|ajv@8.20.0",
       "licenses": [
         {
           "license": {
@@ -221,7 +221,7 @@
       "type": "library",
       "name": "fast-deep-equal",
       "version": "3.1.3",
-      "bom-ref": "@rathnasgala2/schemas@2.20.2|fast-deep-equal@3.1.3",
+      "bom-ref": "@rathnasgala2/schemas@2.21.0|fast-deep-equal@3.1.3",
       "licenses": [
         {
           "license": {
@@ -254,8 +254,8 @@
     {
       "type": "library",
       "name": "fast-uri",
-      "version": "3.1.7",
-      "bom-ref": "@rathnasgala2/schemas@2.20.2|fast-uri@3.1.7",
+      "version": "3.1.8",
+      "bom-ref": "@rathnasgala2/schemas@2.21.0|fast-uri@3.1.8",
       "licenses": [
         {
           "license": {
@@ -264,15 +264,15 @@
           }
         }
       ],
-      "purl": "pkg:npm/fast-uri@3.1.7",
+      "purl": "pkg:npm/fast-uri@3.1.8",
       "externalReferences": [
         {
-          "url": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.7.tgz",
+          "url": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.8.tgz",
           "type": "distribution",
           "hashes": [
             {
               "alg": "SHA-512",
-              "content": "74ebd95738dd65dcfba6177dbfa8c26f0c6b056ddf2ba9fc45cd02b5d98ce1bba6ccc9f1cb005886ea61e89f35f51470fe4bbeacb6de9707ccba792dbb35551e"
+              "content": "19932d6544cd4693952040a85f02cd652e7150613e99535b4c1f21ffb4708764c559c05088fcd3832662d39045f543192a42c9bfc5c14494e553bce0f3e65f32"
             }
           ],
           "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
@@ -289,7 +289,7 @@
       "type": "library",
       "name": "json-schema-traverse",
       "version": "1.0.0",
-      "bom-ref": "@rathnasgala2/schemas@2.20.2|json-schema-traverse@1.0.0",
+      "bom-ref": "@rathnasgala2/schemas@2.21.0|json-schema-traverse@1.0.0",
       "licenses": [
         {
           "license": {
@@ -323,7 +323,7 @@
       "type": "library",
       "name": "require-from-string",
       "version": "2.0.2",
-      "bom-ref": "@rathnasgala2/schemas@2.20.2|require-from-string@2.0.2",
+      "bom-ref": "@rathnasgala2/schemas@2.21.0|require-from-string@2.0.2",
       "licenses": [
         {
           "license": {
@@ -1064,10 +1064,10 @@
   ],
   "dependencies": [
     {
-      "ref": "@rathnasgala2/schemas@2.20.2",
+      "ref": "@rathnasgala2/schemas@2.21.0",
       "dependsOn": [
-        "@rathnasgala2/schemas@2.20.2|ajv-formats@3.0.1",
-        "@rathnasgala2/schemas@2.20.2|ajv@8.20.0",
+        "@rathnasgala2/schemas@2.21.0|ajv-formats@3.0.1",
+        "@rathnasgala2/schemas@2.21.0|ajv@8.20.0",
         "pkg:npm/semver@7.8.5",
         "urn:gala:source-data:iana-ipv4-special-registry",
         "urn:gala:source-data:iana-ipv6-special-registry",
@@ -1089,31 +1089,31 @@
       ]
     },
     {
-      "ref": "@rathnasgala2/schemas@2.20.2|ajv-formats@3.0.1",
+      "ref": "@rathnasgala2/schemas@2.21.0|ajv-formats@3.0.1",
       "dependsOn": [
-        "@rathnasgala2/schemas@2.20.2|ajv@8.20.0"
+        "@rathnasgala2/schemas@2.21.0|ajv@8.20.0"
       ]
     },
     {
-      "ref": "@rathnasgala2/schemas@2.20.2|ajv@8.20.0",
+      "ref": "@rathnasgala2/schemas@2.21.0|ajv@8.20.0",
       "dependsOn": [
-        "@rathnasgala2/schemas@2.20.2|fast-deep-equal@3.1.3",
-        "@rathnasgala2/schemas@2.20.2|fast-uri@3.1.7",
-        "@rathnasgala2/schemas@2.20.2|json-schema-traverse@1.0.0",
-        "@rathnasgala2/schemas@2.20.2|require-from-string@2.0.2"
+        "@rathnasgala2/schemas@2.21.0|fast-deep-equal@3.1.3",
+        "@rathnasgala2/schemas@2.21.0|fast-uri@3.1.8",
+        "@rathnasgala2/schemas@2.21.0|json-schema-traverse@1.0.0",
+        "@rathnasgala2/schemas@2.21.0|require-from-string@2.0.2"
       ]
     },
     {
-      "ref": "@rathnasgala2/schemas@2.20.2|fast-deep-equal@3.1.3"
+      "ref": "@rathnasgala2/schemas@2.21.0|fast-deep-equal@3.1.3"
     },
     {
-      "ref": "@rathnasgala2/schemas@2.20.2|fast-uri@3.1.7"
+      "ref": "@rathnasgala2/schemas@2.21.0|fast-uri@3.1.8"
     },
     {
-      "ref": "@rathnasgala2/schemas@2.20.2|json-schema-traverse@1.0.0"
+      "ref": "@rathnasgala2/schemas@2.21.0|json-schema-traverse@1.0.0"
     },
     {
-      "ref": "@rathnasgala2/schemas@2.20.2|require-from-string@2.0.2"
+      "ref": "@rathnasgala2/schemas@2.21.0|require-from-string@2.0.2"
     },
     {
       "ref": "pkg:npm/semver@7.8.5"