@rathnasgala2/schemas 3.14.0 → 3.14.1

package/THIRD_PARTY_LICENSES.json

@@ -1,6 +1,6 @@
 {
   "schemaVersion": 1,
-  "package": "@rathnasgala2/schemas@3.14.0",
+  "package": "@rathnasgala2/schemas@3.14.1",
   "source": "package-lock.json",
   "dependencies": [
     {

package/docs/catalogs/app-routes.json

@@ -3078,7 +3078,11 @@
       "pathTemplate": "/v1/sites/{organizationId}/{publicationId}/handover",
       "screenId": "v1.sites.by-organization-id.by-publication-id.handover.screen",
       "authenticationClass": "SESSION_REQUIRED",
-      "capabilityKeys": ["publication.handover.manage", "publication.view"],
+      "capabilityKeys": [
+        "publication.handover.manage",
+        "publication.handover.view",
+        "publication.view"
+      ],
       "apiOperationIds": [
         "getOrganizationsByOrganizationIdPublicationsByPublicationId",
         "getOrganizationsByOrganizationIdPublicationsByPublicationIdHandover",
@@ -3509,5 +3513,5 @@
       ]
     }
   ],
-  "digest": "sha256:0fd51346c8a71a2bb126155a48ce0c5efb587c03f623d83a22898d28b604ef43"
+  "digest": "sha256:87b217dc928674d1c29b7ac17a882e2e70c4fb80cede51db4fd67001996915e3"
 }

package/docs/catalogs/schema-inventory.json

@@ -219,9 +219,9 @@
       "version": "2.0.0",
       "path": "openapi/openapi.yaml",
       "materialized": true,
-      "sourceDigest": "sha256:959b73a1b935fb36e9d0b1372f572b0daf459d45512ab74bd57e0e1ddf940d1f",
+      "sourceDigest": "sha256:52ee6b8f76bd4677837614ccba3b895f38667c23a7d36e0d2201a45fd71ae7e9",
       "typescriptRootType": null
     }
   ],
-  "digest": "sha256:3d9dbfde730f7ae3c04fb955e1f94122a8fd0ee66be6da38cb870c3d21b5aae4"
+  "digest": "sha256:e3b7fd723c9c588d284411dd0c5244b641456e664fa1e831b67ebc3b064e0a75"
 }

package/openapi/http-catalog.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": "2.0.0",
   "sourceDesignRevision": "a53052955ceb6c1aa10c886289dc832eedfe6de0a00004df07d353ac19c4403a",
-  "openApiDigest": "sha256:959b73a1b935fb36e9d0b1372f572b0daf459d45512ab74bd57e0e1ddf940d1f",
+  "openApiDigest": "sha256:52ee6b8f76bd4677837614ccba3b895f38667c23a7d36e0d2201a45fd71ae7e9",
   "operations": [
     {
       "operationId": "getInternalHealth",
@@ -1068,10 +1068,10 @@
       "method": "GET",
       "path": "/v2/organizations/{organizationId}/publications/{publicationId}/handover",
       "purpose": "read publication handover",
-      "capabilityKey": "publication.handover.manage",
+      "capabilityKey": "publication.handover.view",
       "conditionalCapabilityKeys": [],
       "activationGate": "MVP",
-      "assuranceClass": "RECENT_AUTHENTICATION",
+      "assuranceClass": "SESSION",
       "actionGrant": "none",
       "apiKeyScope": null,
       "sourceFragment": "organizations"
@@ -2634,5 +2634,5 @@
       "sourceFragment": "workloads"
     }
   ],
-  "digest": "sha256:a3c16fc542f5cbd935862cbce2bc0dea9ba7db3a0f3387526dbba0f521b88613"
+  "digest": "sha256:b9653b8233ca2573186efe14bc3d5d4dd4709ef0814c1e3f843d8c45a8e9d32f"
 }

package/openapi/openapi.yaml

@@ -20359,7 +20359,7 @@ paths:
   /v2/claims/{token}/description-code:
     post:
       description: |
-        Needs a signed-in session. Issues a one-time code to put in the YouTube channel description, valid 24 hours; a new request replaces an unexpired code issued to the same person. `404 CLAIM_NOT_FOUND`, `410 CLAIM_EXPIRED`, `409 CLAIM_ALREADY_CLAIMED`, and `409 CLAIM_CODE_PENDING` when a description code issued to another person for this claim is still pending: it expires at the time in the problem detail, so verify with Google instead, or try again after it expires. A `LINK_ONLY` claim has no channel to prove, so this answers `400 VALIDATION_FAILED` for one. Rate limited (`429 RATE_LIMITED`).
+        Needs a signed-in session. Issues a one-time code to put in the YouTube channel description, valid 24 hours; a new request replaces an unexpired code issued to the same person. `404 CLAIM_NOT_FOUND`, `410 CLAIM_EXPIRED`, `409 CLAIM_ALREADY_CLAIMED`, and `409 CLAIM_CODE_PENDING` when a description code issued to another person for this claim is still pending: it expires at the time in the problem detail, so verify with Google instead, or try again after it expires. A `LINK_ONLY` claim has no channel to prove, so this answers `400 VALIDATION_FAILED` for one. Rate limited (`429 RATE_LIMITED`). The first person to complete acceptance owns the site. Until a claim is `CLAIMED`, anyone who proves the channel may verify it, and a later proof replaces an earlier one.
       operationId: postClaimsByTokenDescriptionCode
       parameters:
         - $ref: "#/components/parameters/XCorrelationId"
@@ -20630,7 +20630,7 @@ paths:
   /v2/claims/{token}/description-code:check:
     post:
       description: |
-        Needs a signed-in session. Reads the channel description through the YouTube Data API and, when it contains the issued code, marks the claim verified for this person and spends the code. A code that is not there yet is `200` with `verified: false` and a `reason`, not a problem. `503 DEPENDENCY_UNAVAILABLE` when YouTube cannot be reached. A `LINK_ONLY` claim has no channel to prove, so this answers `400 VALIDATION_FAILED` for one. Rate limited (`429 RATE_LIMITED`).
+        Needs a signed-in session. Reads the channel description through the YouTube Data API and, when it contains the issued code, marks the claim verified for this person and spends the code. A code that is not there yet is `200` with `verified: false` and a `reason`, not a problem. `503 DEPENDENCY_UNAVAILABLE` when YouTube cannot be reached. A `LINK_ONLY` claim has no channel to prove, so this answers `400 VALIDATION_FAILED` for one. Rate limited (`429 RATE_LIMITED`). The first person to complete acceptance owns the site. Until a claim is `CLAIMED`, anyone who proves the channel may verify it, and a later proof replaces an earlier one.
       operationId: postClaimsByTokenDescriptionCodeCheck
       parameters:
         - $ref: "#/components/parameters/XCorrelationId"
@@ -20914,7 +20914,7 @@ paths:
   /v2/claims/{token}/google:start:
     post:
       description: |
-        Needs a signed-in session. Returns the Google authorize URL for one single-use, PKCE-protected transaction bound to this session; the callback is `GET /v2/callbacks/google/claim`. `404 CLAIM_NOT_FOUND`, `410 CLAIM_EXPIRED`, `409 CLAIM_ALREADY_CLAIMED` when the site was taken. A `LINK_ONLY` claim has no channel to prove, so this answers `400 VALIDATION_FAILED` for one. Rate limited (`429 RATE_LIMITED`).
+        Needs a signed-in session. Returns the Google authorize URL for one single-use, PKCE-protected transaction bound to this session; the callback is `GET /v2/callbacks/google/claim`. `404 CLAIM_NOT_FOUND`, `410 CLAIM_EXPIRED`, `409 CLAIM_ALREADY_CLAIMED` when the site was taken. A `LINK_ONLY` claim has no channel to prove, so this answers `400 VALIDATION_FAILED` for one. Rate limited (`429 RATE_LIMITED`). The first person to complete acceptance owns the site. Until a claim is `CLAIMED`, anyone who proves the channel may verify it, and a later proof replaces an earlier one.
       operationId: postClaimsByTokenGoogleStart
       parameters:
         - $ref: "#/components/parameters/XCorrelationId"
@@ -21169,7 +21169,7 @@ paths:
   /v2/claims/{token}:accept:
     post:
       description: |
-        Needs recent authentication. For a `YOUTUBE_CHANNEL` claim it requires the claim to be verified by this same person (`409 CLAIM_NOT_VERIFIED` otherwise); a `LINK_ONLY` claim has nothing to verify and is accepted from `OPEN`. Then it makes the caller the owner of the site's organisation, which hands the site over. Repeating the call after success returns the same organisation. `409 INVALID_SOURCE_STATE` when the caller is the person who issued the claim or already owns the site: nobody can claim their own site. `409 CLAIM_ALREADY_CLAIMED` when another person claimed it; `410 CLAIM_EXPIRED`. An API key is always refused.
+        Needs recent authentication. For a `YOUTUBE_CHANNEL` claim it requires the claim to be verified by this same person (`409 CLAIM_NOT_VERIFIED` otherwise); a `LINK_ONLY` claim has nothing to verify and is accepted from `OPEN`. Then it makes the caller the owner of the site's organisation, which hands the site over. Repeating the call after success returns the same organisation. `409 INVALID_SOURCE_STATE` when the caller is the person who issued the claim or already owns the site: nobody can claim their own site. `409 CLAIM_ALREADY_CLAIMED` when another person claimed it; `410 CLAIM_EXPIRED`. An API key is always refused. The first person to complete acceptance owns the site. Until a claim is `CLAIMED`, anyone who proves the channel may verify it, and a later proof replaces an earlier one.
       operationId: postClaimsByTokenAccept
       parameters:
         - $ref: "#/components/parameters/XCorrelationId"
@@ -38560,7 +38560,7 @@ paths:
   /v2/organizations/{organizationId}/publications/{publicationId}/handover:
     get:
       description: |
-        The organisation owner, with recent authentication; an API key is always refused. Reports the handover of a demo site into the creator's own GitHub account: its state, the target, whether the Galascribe App is installed on the target, each step and the address the site will have. `200` with `state: NOT_STARTED` (empty `steps`, `version` 0, no `target`, `appInstalledOnTarget` or `siteUrlAfter`) for a demo publication (one with a demo-site record) that has no handover yet; `200` with the latest handover otherwise, including `DONE`, `FAILED` and `CANCELLED`; `404 RESOURCE_NOT_FOUND` only for a publication that is not a demo publication.
+        The organisation owner, signed in (a read needs no fresh sign-in); an API key is always refused. Reports the handover of a demo site into the creator's own GitHub account: its state, the target, whether the Galascribe App is installed on the target, each step and the address the site will have. `200` with `state: NOT_STARTED` (empty `steps`, `version` 0, no `target`, `appInstalledOnTarget` or `siteUrlAfter`) for a demo publication (one with a demo-site record) that has no handover yet; `200` with the latest handover otherwise, including `DONE`, `FAILED` and `CANCELLED`; `404 RESOURCE_NOT_FOUND` only for a publication that is not a demo publication.
       operationId: getOrganizationsByOrganizationIdPublicationsByPublicationIdHandover
       parameters:
         - $ref: "#/components/parameters/XCorrelationId"
@@ -38664,22 +38664,9 @@ paths:
                     status: 401
                     title: AUTHENTICATION_REQUIRED
                     type: urn:gala:problem:authentication-required
-                REAUTH_REQUIRED:
-                  summary: REAUTH_REQUIRED
-                  value:
-                    code: REAUTH_REQUIRED
-                    correlationId: 018f0000-0000-7000-8000-000000000001
-                    detail: See the operation contract.
-                    errors: []
-                    retryable: false
-                    schemaId: urn:gala:schema:problem:2.0.0
-                    schemaVersion: 2.0.0
-                    status: 401
-                    title: REAUTH_REQUIRED
-                    type: urn:gala:problem:reauth-required
               schema:
                 $ref: "#/components/schemas/Problem"
-          description: AUTHENTICATION_REQUIRED, REAUTH_REQUIRED
+          description: AUTHENTICATION_REQUIRED
           headers:
             Cache-Control:
               $ref: "#/components/headers/CacheControlNoStore"
@@ -38687,7 +38674,6 @@ paths:
               $ref: "#/components/headers/XCorrelationId"
           x-gala-problem-codes:
             - AUTHENTICATION_REQUIRED
-            - REAUTH_REQUIRED
         "403":
           content:
             application/problem+json:
@@ -38751,8 +38737,8 @@ paths:
       x-gala-activation-gate: MVP
       x-gala-activation-guards:
         - NONE
-      x-gala-assurance-class: RECENT_AUTHENTICATION
-      x-gala-capability-key: publication.handover.manage
+      x-gala-assurance-class: SESSION
+      x-gala-capability-key: publication.handover.view
       x-gala-concurrency: none
       x-gala-conditional-capabilities: []
       x-gala-example-profile: NOMINAL_SUCCESS_AND_EACH_REACHABLE_PROBLEM
@@ -38761,7 +38747,6 @@ paths:
       x-gala-reachable-problems:
         - AUTHENTICATION_REQUIRED
         - AUTHORIZATION_DENIED
-        - REAUTH_REQUIRED
         - RESOURCE_NOT_FOUND
         - VALIDATION_FAILED
       x-gala-replay-identity: safe-query

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rathnasgala2/schemas",
-  "version": "3.14.0",
+  "version": "3.14.1",
   "description": "Executable JSON Schema and OpenAPI contracts for Galascribe",
   "type": "module",
   "license": "Apache-2.0",

package/sbom.cdx.json

@@ -97,8 +97,8 @@
       "type": "library",
       "name": "schemas",
       "group": "@rathnasgala2",
-      "version": "3.14.0",
-      "bom-ref": "@rathnasgala2/schemas@3.14.0",
+      "version": "3.14.1",
+      "bom-ref": "@rathnasgala2/schemas@3.14.1",
       "description": "Executable JSON Schema and OpenAPI contracts for Galascribe",
       "licenses": [
         {
@@ -108,7 +108,7 @@
           }
         }
       ],
-      "purl": "pkg:npm/%40rathnasgala2/schemas@3.14.0?vcs_url=git%2Bhttps%3A%2F%2Fgithub.com%2Frathnasgala2%2Fschema.git",
+      "purl": "pkg:npm/%40rathnasgala2/schemas@3.14.1?vcs_url=git%2Bhttps%3A%2F%2Fgithub.com%2Frathnasgala2%2Fschema.git",
       "externalReferences": [
         {
           "url": "https://github.com/rathnasgala2/schema/issues",
@@ -153,7 +153,7 @@
       "type": "library",
       "name": "ajv-formats",
       "version": "3.0.1",
-      "bom-ref": "@rathnasgala2/schemas@3.14.0|ajv-formats@3.0.1",
+      "bom-ref": "@rathnasgala2/schemas@3.14.1|ajv-formats@3.0.1",
       "licenses": [
         {
           "license": {
@@ -187,7 +187,7 @@
       "type": "library",
       "name": "ajv",
       "version": "8.20.0",
-      "bom-ref": "@rathnasgala2/schemas@3.14.0|ajv@8.20.0",
+      "bom-ref": "@rathnasgala2/schemas@3.14.1|ajv@8.20.0",
       "licenses": [
         {
           "license": {
@@ -221,7 +221,7 @@
       "type": "library",
       "name": "fast-deep-equal",
       "version": "3.1.3",
-      "bom-ref": "@rathnasgala2/schemas@3.14.0|fast-deep-equal@3.1.3",
+      "bom-ref": "@rathnasgala2/schemas@3.14.1|fast-deep-equal@3.1.3",
       "licenses": [
         {
           "license": {
@@ -255,7 +255,7 @@
       "type": "library",
       "name": "fast-uri",
       "version": "3.1.8",
-      "bom-ref": "@rathnasgala2/schemas@3.14.0|fast-uri@3.1.8",
+      "bom-ref": "@rathnasgala2/schemas@3.14.1|fast-uri@3.1.8",
       "licenses": [
         {
           "license": {
@@ -289,7 +289,7 @@
       "type": "library",
       "name": "json-schema-traverse",
       "version": "1.0.0",
-      "bom-ref": "@rathnasgala2/schemas@3.14.0|json-schema-traverse@1.0.0",
+      "bom-ref": "@rathnasgala2/schemas@3.14.1|json-schema-traverse@1.0.0",
       "licenses": [
         {
           "license": {
@@ -323,7 +323,7 @@
       "type": "library",
       "name": "require-from-string",
       "version": "2.0.2",
-      "bom-ref": "@rathnasgala2/schemas@3.14.0|require-from-string@2.0.2",
+      "bom-ref": "@rathnasgala2/schemas@3.14.1|require-from-string@2.0.2",
       "licenses": [
         {
           "license": {
@@ -1064,10 +1064,10 @@
   ],
   "dependencies": [
     {
-      "ref": "@rathnasgala2/schemas@3.14.0",
+      "ref": "@rathnasgala2/schemas@3.14.1",
       "dependsOn": [
-        "@rathnasgala2/schemas@3.14.0|ajv-formats@3.0.1",
-        "@rathnasgala2/schemas@3.14.0|ajv@8.20.0",
+        "@rathnasgala2/schemas@3.14.1|ajv-formats@3.0.1",
+        "@rathnasgala2/schemas@3.14.1|ajv@8.20.0",
         "pkg:npm/semver@7.8.5",
         "urn:gala:source-data:iana-ipv4-special-registry",
         "urn:gala:source-data:iana-ipv6-special-registry",
@@ -1089,31 +1089,31 @@
       ]
     },
     {
-      "ref": "@rathnasgala2/schemas@3.14.0|ajv-formats@3.0.1",
+      "ref": "@rathnasgala2/schemas@3.14.1|ajv-formats@3.0.1",
       "dependsOn": [
-        "@rathnasgala2/schemas@3.14.0|ajv@8.20.0"
+        "@rathnasgala2/schemas@3.14.1|ajv@8.20.0"
       ]
     },
     {
-      "ref": "@rathnasgala2/schemas@3.14.0|ajv@8.20.0",
+      "ref": "@rathnasgala2/schemas@3.14.1|ajv@8.20.0",
       "dependsOn": [
-        "@rathnasgala2/schemas@3.14.0|fast-deep-equal@3.1.3",
-        "@rathnasgala2/schemas@3.14.0|fast-uri@3.1.8",
-        "@rathnasgala2/schemas@3.14.0|json-schema-traverse@1.0.0",
-        "@rathnasgala2/schemas@3.14.0|require-from-string@2.0.2"
+        "@rathnasgala2/schemas@3.14.1|fast-deep-equal@3.1.3",
+        "@rathnasgala2/schemas@3.14.1|fast-uri@3.1.8",
+        "@rathnasgala2/schemas@3.14.1|json-schema-traverse@1.0.0",
+        "@rathnasgala2/schemas@3.14.1|require-from-string@2.0.2"
       ]
     },
     {
-      "ref": "@rathnasgala2/schemas@3.14.0|fast-deep-equal@3.1.3"
+      "ref": "@rathnasgala2/schemas@3.14.1|fast-deep-equal@3.1.3"
     },
     {
-      "ref": "@rathnasgala2/schemas@3.14.0|fast-uri@3.1.8"
+      "ref": "@rathnasgala2/schemas@3.14.1|fast-uri@3.1.8"
     },
     {
-      "ref": "@rathnasgala2/schemas@3.14.0|json-schema-traverse@1.0.0"
+      "ref": "@rathnasgala2/schemas@3.14.1|json-schema-traverse@1.0.0"
     },
     {
-      "ref": "@rathnasgala2/schemas@3.14.0|require-from-string@2.0.2"
+      "ref": "@rathnasgala2/schemas@3.14.1|require-from-string@2.0.2"
     },
     {
       "ref": "pkg:npm/semver@7.8.5"