@rathnasgala2/schemas 2.21.0 → 3.0.0

package/README.md

@@ -59,38 +59,39 @@ removed it as unconsumed -- see "Package layout"). The schema inventory adds the
 separately owned OpenAPI contract as the twenty-first identity and carries
 DEC-091's domain-separated `sourceDesignRevision`. S0-T07 materializes the
 reviewed OpenAPI 3.1 source fragments, deterministic bundle, and digest-bound
-HTTP catalog for exactly 87 MVP operations plus `/internal/health` (88 catalog
+HTTP catalog for exactly 90 MVP operations plus `/internal/health` (91 catalog
 rows; 71 at S0-T07, plus the two SCHEMA-2.8.0 reads, the two SCHEMA-2.10.0
 publication-destination reads/writes, the SCHEMA-2.13.0 repository create, and
 the nine SCHEMA-2.14.0 write/preview/publish operations, and the SCHEMA-2.20.3
-review event stream, and the SCHEMA-2.21.0 appearance read). The bundle includes
-the accepted DEC-097 receipt-exchange and deployment-receipt amendments and
-serializes the fixed OpenAPI Generator 7.25.0 option sets. Every operation also
-declares its tenant scope, lifecycle and activation guards, maps every reachable
-problem, and carries schema-validated nominal and problem examples. S0-T08
-projects the exact 19 admitted transition families into 77 independently
-identified event actions (SCHEMA-2.11.0 adds the `github_installation` family so
-the worker-only compare-and-set writer can retire into the sole aggregate
-gateway). Each action binds its aggregate and organization or publication scope,
-exact predecessor/target states, the closed DEC-101 payload, the transactional
-outbox producer, and a non-empty registered consumer set. S5-T00 materializes
-document 07's closed 15-component App semantic catalog and document 14's
-20-entry MVP App route registry (S5 brief section 4) as
-`docs/catalogs/app-components.json` and `docs/catalogs/app-routes.json`, with
-every `apiOperationIds` entry validated against `openapi/openapi.yaml`, every
-`componentIds`/`contentKeyIds` entry validated against the component catalog,
-and `capabilityKeys` projected from `openapi/http-catalog.json`. S4-T01 adds the
-separately generated `fixtures/s4/` deployment/certification consumer-fixture
-family (deployment-intent, deployment-observation, deployment-receipt,
-public-generation-marker, and adapter-capability rows for `local-directory`,
-`github-pages`, and `do-spaces`) alongside the existing `fixtures/s2/` family,
-each with its own manifest. LOCAL-21 admits a 21st App route,
-`/invitations/accept` (`routeId` `invitations.accept`), an ordinary
-`SESSION_REQUIRED` `APP` route (not `TRANSACTIONAL_LINK`: it is served by the
-App origin after sign-in, unlike the deferred `/t/**` template family) that
-calls `postMembershipInvitationsByTokenAccept`; its non-enumerating failure
-states collapse onto that operation's single declared `INVALID_SOURCE_STATE`
-problem, which covers an expired, already-used or unknown token alike.
+review event stream, the SCHEMA-2.21.0 appearance read, and the SCHEMA-2.22.0
+site, history and batch-publish contracts). The bundle includes the accepted
+DEC-097 receipt-exchange and deployment-receipt amendments and serializes the
+fixed OpenAPI Generator 7.25.0 option sets. Every operation also declares its
+tenant scope, lifecycle and activation guards, maps every reachable problem, and
+carries schema-validated nominal and problem examples. S0-T08 projects the exact
+19 admitted transition families into 77 independently identified event actions
+(SCHEMA-2.11.0 adds the `github_installation` family so the worker-only
+compare-and-set writer can retire into the sole aggregate gateway). Each action
+binds its aggregate and organization or publication scope, exact
+predecessor/target states, the closed DEC-101 payload, the transactional outbox
+producer, and a non-empty registered consumer set. S5-T00 materializes document
+07's closed 15-component App semantic catalog and document 14's 20-entry MVP App
+route registry (S5 brief section 4) as `docs/catalogs/app-components.json` and
+`docs/catalogs/app-routes.json`, with every `apiOperationIds` entry validated
+against `openapi/openapi.yaml`, every `componentIds`/`contentKeyIds` entry
+validated against the component catalog, and `capabilityKeys` projected from
+`openapi/http-catalog.json`. S4-T01 adds the separately generated `fixtures/s4/`
+deployment/certification consumer-fixture family (deployment-intent,
+deployment-observation, deployment-receipt, public-generation-marker, and
+adapter-capability rows for `local-directory`, `github-pages`, and `do-spaces`)
+alongside the existing `fixtures/s2/` family, each with its own manifest.
+LOCAL-21 admits a 21st App route, `/invitations/accept` (`routeId`
+`invitations.accept`), an ordinary `SESSION_REQUIRED` `APP` route (not
+`TRANSACTIONAL_LINK`: it is served by the App origin after sign-in, unlike the
+deferred `/t/**` template family) that calls
+`postMembershipInvitationsByTokenAccept`; its non-enumerating failure states
+collapse onto that operation's single declared `INVALID_SOURCE_STATE` problem,
+which covers an expired, already-used or unknown token alike.
 
 SCHEMA-2.17.0 (design `scrap/20260928_write-preview-publish.md` section 9) is
 media in articles: a cover image, and images, sound and video referenced from an
@@ -684,7 +685,7 @@ remediation, and documentation URL fields without including authored values.
   fragments grouped by the first literal resource token. A build input, not part
   of the npm payload (SCH-H7: `!openapi/source/` in `package.json`'s `files`) --
   a consumer reads the materialized `openapi/openapi.yaml` instead.
-- `openapi/openapi.yaml` — deterministic OpenAPI 3.1 bundle for the exact 87 MVP
+- `openapi/openapi.yaml` — deterministic OpenAPI 3.1 bundle for the exact 90 MVP
   operations plus health.
 - `openapi/http-catalog.json` — generated digest-bound method/path/purpose and
   capability inventory, including `conditionalCapabilityKeys` (SCHEMA-2.7.1) and

package/THIRD_PARTY_LICENSES.json

@@ -1,6 +1,6 @@
 {
   "schemaVersion": 1,
-  "package": "@rathnasgala2/schemas@2.21.0",
+  "package": "@rathnasgala2/schemas@3.0.0",
   "source": "package-lock.json",
   "dependencies": [
     {
@@ -2624,12 +2624,12 @@
     },
     {
       "name": "source-map-js",
-      "version": "1.2.1",
+      "version": "1.2.2",
       "license": "BSD-3-Clause",
       "development": true,
       "optional": false,
       "peer": false,
-      "integrity": "sha512-UXWMKhLOwVKb728IUtQPXxfYU+usdybtUrK/8uGE8CQMvrhOpwvzDBwj0QhSL7MQc7vIsISBG8VQ8+IDQxpfQA=="
+      "integrity": "sha512-KGj/8Y43x35aZVDtt+J4mK1hoLGHULMYfSkODJNQjNDC3oW1PqPoxMwo0pLUsWM/UEGzON/NxeHywEfNXNP3Vw=="
     },
     {
       "name": "spdx-correct",