@rathnasgala2/schemas 2.20.3 → 2.22.0

package/README.md

@@ -59,38 +59,39 @@ removed it as unconsumed -- see "Package layout"). The schema inventory adds the
 separately owned OpenAPI contract as the twenty-first identity and carries
 DEC-091's domain-separated `sourceDesignRevision`. S0-T07 materializes the
 reviewed OpenAPI 3.1 source fragments, deterministic bundle, and digest-bound
-HTTP catalog for exactly 86 MVP operations plus `/internal/health` (87 catalog
+HTTP catalog for exactly 90 MVP operations plus `/internal/health` (91 catalog
 rows; 71 at S0-T07, plus the two SCHEMA-2.8.0 reads, the two SCHEMA-2.10.0
 publication-destination reads/writes, the SCHEMA-2.13.0 repository create, and
 the nine SCHEMA-2.14.0 write/preview/publish operations, and the SCHEMA-2.20.3
-review event stream). The bundle includes
-the accepted DEC-097 receipt-exchange and deployment-receipt amendments and
-serializes the fixed OpenAPI Generator 7.25.0 option sets. Every operation also
-declares its tenant scope, lifecycle and activation guards, maps every reachable
-problem, and carries schema-validated nominal and problem examples. S0-T08
-projects the exact 19 admitted transition families into 77 independently
-identified event actions (SCHEMA-2.11.0 adds the `github_installation` family so
-the worker-only compare-and-set writer can retire into the sole aggregate
-gateway). Each action binds its aggregate and organization or publication scope,
-exact predecessor/target states, the closed DEC-101 payload, the transactional
-outbox producer, and a non-empty registered consumer set. S5-T00 materializes
-document 07's closed 15-component App semantic catalog and document 14's
-20-entry MVP App route registry (S5 brief section 4) as
-`docs/catalogs/app-components.json` and `docs/catalogs/app-routes.json`, with
-every `apiOperationIds` entry validated against `openapi/openapi.yaml`, every
-`componentIds`/`contentKeyIds` entry validated against the component catalog,
-and `capabilityKeys` projected from `openapi/http-catalog.json`. S4-T01 adds the
-separately generated `fixtures/s4/` deployment/certification consumer-fixture
-family (deployment-intent, deployment-observation, deployment-receipt,
-public-generation-marker, and adapter-capability rows for `local-directory`,
-`github-pages`, and `do-spaces`) alongside the existing `fixtures/s2/` family,
-each with its own manifest. LOCAL-21 admits a 21st App route,
-`/invitations/accept` (`routeId` `invitations.accept`), an ordinary
-`SESSION_REQUIRED` `APP` route (not `TRANSACTIONAL_LINK`: it is served by the
-App origin after sign-in, unlike the deferred `/t/**` template family) that
-calls `postMembershipInvitationsByTokenAccept`; its non-enumerating failure
-states collapse onto that operation's single declared `INVALID_SOURCE_STATE`
-problem, which covers an expired, already-used or unknown token alike.
+review event stream, the SCHEMA-2.21.0 appearance read, and the SCHEMA-2.22.0
+site, history and batch-publish contracts). The bundle includes the accepted
+DEC-097 receipt-exchange and deployment-receipt amendments and serializes the
+fixed OpenAPI Generator 7.25.0 option sets. Every operation also declares its
+tenant scope, lifecycle and activation guards, maps every reachable problem, and
+carries schema-validated nominal and problem examples. S0-T08 projects the exact
+19 admitted transition families into 77 independently identified event actions
+(SCHEMA-2.11.0 adds the `github_installation` family so the worker-only
+compare-and-set writer can retire into the sole aggregate gateway). Each action
+binds its aggregate and organization or publication scope, exact
+predecessor/target states, the closed DEC-101 payload, the transactional outbox
+producer, and a non-empty registered consumer set. S5-T00 materializes document
+07's closed 15-component App semantic catalog and document 14's 20-entry MVP App
+route registry (S5 brief section 4) as `docs/catalogs/app-components.json` and
+`docs/catalogs/app-routes.json`, with every `apiOperationIds` entry validated
+against `openapi/openapi.yaml`, every `componentIds`/`contentKeyIds` entry
+validated against the component catalog, and `capabilityKeys` projected from
+`openapi/http-catalog.json`. S4-T01 adds the separately generated `fixtures/s4/`
+deployment/certification consumer-fixture family (deployment-intent,
+deployment-observation, deployment-receipt, public-generation-marker, and
+adapter-capability rows for `local-directory`, `github-pages`, and `do-spaces`)
+alongside the existing `fixtures/s2/` family, each with its own manifest.
+LOCAL-21 admits a 21st App route, `/invitations/accept` (`routeId`
+`invitations.accept`), an ordinary `SESSION_REQUIRED` `APP` route (not
+`TRANSACTIONAL_LINK`: it is served by the App origin after sign-in, unlike the
+deferred `/t/**` template family) that calls
+`postMembershipInvitationsByTokenAccept`; its non-enumerating failure states
+collapse onto that operation's single declared `INVALID_SOURCE_STATE` problem,
+which covers an expired, already-used or unknown token alike.
 
 SCHEMA-2.17.0 (design `scrap/20260928_write-preview-publish.md` section 9) is
 media in articles: a cover image, and images, sound and video referenced from an
@@ -684,7 +685,7 @@ remediation, and documentation URL fields without including authored values.
   fragments grouped by the first literal resource token. A build input, not part
   of the npm payload (SCH-H7: `!openapi/source/` in `package.json`'s `files`) --
   a consumer reads the materialized `openapi/openapi.yaml` instead.
-- `openapi/openapi.yaml` — deterministic OpenAPI 3.1 bundle for the exact 86 MVP
+- `openapi/openapi.yaml` — deterministic OpenAPI 3.1 bundle for the exact 90 MVP
   operations plus health.
 - `openapi/http-catalog.json` — generated digest-bound method/path/purpose and
   capability inventory, including `conditionalCapabilityKeys` (SCHEMA-2.7.1) and

package/THIRD_PARTY_LICENSES.json

@@ -1,6 +1,6 @@
 {
   "schemaVersion": 1,
-  "package": "@rathnasgala2/schemas@2.20.2",
+  "package": "@rathnasgala2/schemas@2.22.0",
   "source": "package-lock.json",
   "dependencies": [
     {
@@ -743,21 +743,21 @@
     },
     {
       "name": "brace-expansion",
-      "version": "2.1.4",
+      "version": "2.1.7",
       "license": "MIT",
       "development": true,
       "optional": true,
       "peer": false,
-      "integrity": "sha512-hGfVzPxthbf3+2yjg/RBs60cB0FhqBS/zvdV/4wn4/BmN0bNMMHPc4V/BbFieqf1TKAGGAHnY4eSjajCl0f2Xg=="
+      "integrity": "sha512-uZbew1NqdmPDTMJ8ah1y+b+9QEJrfkXFk3RcTQw3X0jW/xRUvFKsg1CfQdSYGdTbXZWExtU3J3ccxtnfw1Fi0g=="
     },
     {
       "name": "brace-expansion",
-      "version": "5.0.9",
+      "version": "5.0.12",
       "license": "MIT",
       "development": true,
       "optional": false,
       "peer": false,
-      "integrity": "sha512-ScQ4IuvIEF1TMlP7Zt+vjJ//9zlPb2SDcxWxM3bk8s6t6GGdJ7KO1dCcTidOPJKePW30LE/2cT7wCyPho9/Wxg=="
+      "integrity": "sha512-YovQ3rzhaLMIrDjNDMkNS01tea93qhEhG5xy8f6+R0l+dw3Ki+5sCoIoI942iuLZTHWogWktgwVDhU09iNEimQ=="
     },
     {
       "name": "buffer",
@@ -1238,12 +1238,12 @@
     },
     {
       "name": "fast-uri",
-      "version": "3.1.7",
+      "version": "3.1.8",
       "license": "BSD-3-Clause",
       "development": false,
       "optional": false,
       "peer": false,
-      "integrity": "sha512-dOvZVzjdZdz7phd9v6jCbwxrBW3fK6n8Rc0CtdmM4bumzMnxywBYhuph6J819RRw/ku+rLbelwfMunktuzVVHg=="
+      "integrity": "sha512-GZMtZUTNRpOVIECoXwLNZS5xUGE+mVNbTB8h/7Rwh2TFWcBQiPzTgyZi05BF9UMZKkLJv8XBRJTlU7zg8+ZfMg=="
     },
     {
       "name": "fdir",
@@ -1463,12 +1463,12 @@
     },
     {
       "name": "http-cache-semantics",
-      "version": "4.2.0",
+      "version": "4.3.0",
       "license": "BSD-2-Clause",
       "development": true,
       "optional": true,
       "peer": false,
-      "integrity": "sha512-dTxcvPXqPvXBQpq5dUr6mEMJX4oIEFv6bwom3FDwKRDsuIjjJGANqhBuoAn9c1RQJIdAKav33ED65E2ys+87QQ=="
+      "integrity": "sha512-M5t5LlJpS1UHMjvwRQVdFHvPISGeLAxNcrWuJkeGh0KxsqCHZ1O3NXZU/8x7cD0BDcGW8kapxMKTvwlqrNkHkA=="
     },
     {
       "name": "http-proxy-agent",
@@ -1571,12 +1571,12 @@
     },
     {
       "name": "ip-address",
-      "version": "10.7.0",
+      "version": "10.7.3",
       "license": "MIT",
       "development": true,
       "optional": true,
       "peer": false,
-      "integrity": "sha512-BGFsyJd5mpXp3rK6jIdADLNgpJUK1jnjzvYF8lK+VyDab9JAmqN0YOKDdP17HlgKb2+ehPgDc8EtnRLbGCAMhA=="
+      "integrity": "sha512-A1kdq/tSb5QjvKvAMgIoEvDBIgL7qaqVP/jkvSwYYRZ9iEzvPpopxp2wQfu3SuZRHtpHNxMn8Fs0bS+gf5Xmwg=="
     },
     {
       "name": "is-core-module",