@rathnasgala2/schemas 3.15.0 → 3.17.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rathnasgala2/schemas",
-  "version": "3.15.0",
+  "version": "3.17.0",
   "description": "Executable JSON Schema and OpenAPI contracts for Galascribe",
   "type": "module",
   "license": "Apache-2.0",
@@ -25,6 +25,7 @@
       "types": "./types/digest-profiles.d.ts",
       "import": "./src/digest-profiles.js"
     },
+    "./site-policy-defaults": "./site-policy-defaults.json",
     "./frozen-envelope": {
       "types": "./types/frozen-envelope.d.ts",
       "import": "./src/frozen-envelope.js"
@@ -34,6 +35,7 @@
       "import": "./src/palette.js"
     },
     "./schemas/adapter-capability.schema.json": "./schemas/adapter-capability.schema.json",
+    "./schemas/analytics-config.schema.json": "./schemas/analytics-config.schema.json",
     "./schemas/appearance.schema.json": "./schemas/appearance.schema.json",
     "./schemas/artifact-manifest.schema.json": "./schemas/artifact-manifest.schema.json",
     "./schemas/author.schema.json": "./schemas/author.schema.json",
@@ -77,6 +79,7 @@
   "files": [
     "src/",
     "schemas/",
+    "site-policy-defaults.json",
     "diagnostics/diagnostic-map.json",
     "diagnostics/diagnostic-map.public-runtime-origins.json",
     "types/",

package/sbom.cdx.json

@@ -97,8 +97,8 @@
       "type": "library",
       "name": "schemas",
       "group": "@rathnasgala2",
-      "version": "3.15.0",
-      "bom-ref": "@rathnasgala2/schemas@3.15.0",
+      "version": "3.17.0",
+      "bom-ref": "@rathnasgala2/schemas@3.17.0",
       "description": "Executable JSON Schema and OpenAPI contracts for Galascribe",
       "licenses": [
         {
@@ -108,7 +108,7 @@
           }
         }
       ],
-      "purl": "pkg:npm/%40rathnasgala2/schemas@3.15.0?vcs_url=git%2Bhttps%3A%2F%2Fgithub.com%2Frathnasgala2%2Fschema.git",
+      "purl": "pkg:npm/%40rathnasgala2/schemas@3.17.0?vcs_url=git%2Bhttps%3A%2F%2Fgithub.com%2Frathnasgala2%2Fschema.git",
       "externalReferences": [
         {
           "url": "https://github.com/rathnasgala2/schema/issues",
@@ -153,7 +153,7 @@
       "type": "library",
       "name": "ajv-formats",
       "version": "3.0.1",
-      "bom-ref": "@rathnasgala2/schemas@3.15.0|ajv-formats@3.0.1",
+      "bom-ref": "@rathnasgala2/schemas@3.17.0|ajv-formats@3.0.1",
       "licenses": [
         {
           "license": {
@@ -187,7 +187,7 @@
       "type": "library",
       "name": "ajv",
       "version": "8.20.0",
-      "bom-ref": "@rathnasgala2/schemas@3.15.0|ajv@8.20.0",
+      "bom-ref": "@rathnasgala2/schemas@3.17.0|ajv@8.20.0",
       "licenses": [
         {
           "license": {
@@ -221,7 +221,7 @@
       "type": "library",
       "name": "fast-deep-equal",
       "version": "3.1.3",
-      "bom-ref": "@rathnasgala2/schemas@3.15.0|fast-deep-equal@3.1.3",
+      "bom-ref": "@rathnasgala2/schemas@3.17.0|fast-deep-equal@3.1.3",
       "licenses": [
         {
           "license": {
@@ -255,7 +255,7 @@
       "type": "library",
       "name": "fast-uri",
       "version": "3.1.8",
-      "bom-ref": "@rathnasgala2/schemas@3.15.0|fast-uri@3.1.8",
+      "bom-ref": "@rathnasgala2/schemas@3.17.0|fast-uri@3.1.8",
       "licenses": [
         {
           "license": {
@@ -289,7 +289,7 @@
       "type": "library",
       "name": "json-schema-traverse",
       "version": "1.0.0",
-      "bom-ref": "@rathnasgala2/schemas@3.15.0|json-schema-traverse@1.0.0",
+      "bom-ref": "@rathnasgala2/schemas@3.17.0|json-schema-traverse@1.0.0",
       "licenses": [
         {
           "license": {
@@ -323,7 +323,7 @@
       "type": "library",
       "name": "require-from-string",
       "version": "2.0.2",
-      "bom-ref": "@rathnasgala2/schemas@3.15.0|require-from-string@2.0.2",
+      "bom-ref": "@rathnasgala2/schemas@3.17.0|require-from-string@2.0.2",
       "licenses": [
         {
           "license": {
@@ -1064,10 +1064,10 @@
   ],
   "dependencies": [
     {
-      "ref": "@rathnasgala2/schemas@3.15.0",
+      "ref": "@rathnasgala2/schemas@3.17.0",
       "dependsOn": [
-        "@rathnasgala2/schemas@3.15.0|ajv-formats@3.0.1",
-        "@rathnasgala2/schemas@3.15.0|ajv@8.20.0",
+        "@rathnasgala2/schemas@3.17.0|ajv-formats@3.0.1",
+        "@rathnasgala2/schemas@3.17.0|ajv@8.20.0",
         "pkg:npm/semver@7.8.5",
         "urn:gala:source-data:iana-ipv4-special-registry",
         "urn:gala:source-data:iana-ipv6-special-registry",
@@ -1089,31 +1089,31 @@
       ]
     },
     {
-      "ref": "@rathnasgala2/schemas@3.15.0|ajv-formats@3.0.1",
+      "ref": "@rathnasgala2/schemas@3.17.0|ajv-formats@3.0.1",
       "dependsOn": [
-        "@rathnasgala2/schemas@3.15.0|ajv@8.20.0"
+        "@rathnasgala2/schemas@3.17.0|ajv@8.20.0"
       ]
     },
     {
-      "ref": "@rathnasgala2/schemas@3.15.0|ajv@8.20.0",
+      "ref": "@rathnasgala2/schemas@3.17.0|ajv@8.20.0",
       "dependsOn": [
-        "@rathnasgala2/schemas@3.15.0|fast-deep-equal@3.1.3",
-        "@rathnasgala2/schemas@3.15.0|fast-uri@3.1.8",
-        "@rathnasgala2/schemas@3.15.0|json-schema-traverse@1.0.0",
-        "@rathnasgala2/schemas@3.15.0|require-from-string@2.0.2"
+        "@rathnasgala2/schemas@3.17.0|fast-deep-equal@3.1.3",
+        "@rathnasgala2/schemas@3.17.0|fast-uri@3.1.8",
+        "@rathnasgala2/schemas@3.17.0|json-schema-traverse@1.0.0",
+        "@rathnasgala2/schemas@3.17.0|require-from-string@2.0.2"
       ]
     },
     {
-      "ref": "@rathnasgala2/schemas@3.15.0|fast-deep-equal@3.1.3"
+      "ref": "@rathnasgala2/schemas@3.17.0|fast-deep-equal@3.1.3"
     },
     {
-      "ref": "@rathnasgala2/schemas@3.15.0|fast-uri@3.1.8"
+      "ref": "@rathnasgala2/schemas@3.17.0|fast-uri@3.1.8"
     },
     {
-      "ref": "@rathnasgala2/schemas@3.15.0|json-schema-traverse@1.0.0"
+      "ref": "@rathnasgala2/schemas@3.17.0|json-schema-traverse@1.0.0"
     },
     {
-      "ref": "@rathnasgala2/schemas@3.15.0|require-from-string@2.0.2"
+      "ref": "@rathnasgala2/schemas@3.17.0|require-from-string@2.0.2"
     },
     {
       "ref": "pkg:npm/semver@7.8.5"

package/schemas/adapter-capability.schema.json

@@ -276,6 +276,13 @@
           "maxLength": 2048,
           "x-gala-utf8ByteLength": { "maximum": 2048 }
         },
+        "verificationBaseUrl": {
+          "allOf": [{ "$ref": "#/$defs/urlHttps" }],
+          "maxLength": 2048,
+          "pattern": "^https://[a-z0-9](?:[a-z0-9.-]{0,251}[a-z0-9])?(?:/[^?#\\s]*)?$",
+          "x-gala-utf8ByteLength": { "maximum": 2048 },
+          "description": "SCHEMA-3.17.0, optional: the address the deploy is verified at when that differs from `baseUrl`, the build base. It is the origin and path that answer over HTTPS right now (the github.io project address before a custom domain is set, the custom base once it serves): a lowercase exact host with no userinfo, port, query or fragment; a path is allowed. Absent means `baseUrl` is both the build base and the verification address, exactly as before 3.17.0. When present it is a member of `destination` like `baseUrl`, so it is inside the capability decision record that `decisionDigest` covers (RFC 8785 canonical member order); a record without it digests exactly as it did before."
+        },
         "providerBinding": { "$ref": "#/$defs/destinationProviderCoordinates" }
       },
       "additionalProperties": false,

package/schemas/analytics-config.schema.json

@@ -0,0 +1,161 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "urn:gala:schema:analytics-config:2.0.0",
+  "title": "Gala analytics-config contract",
+  "type": "object",
+  "required": ["schemaId", "schemaVersion", "provider", "consent"],
+  "properties": {
+    "schemaId": { "const": "urn:gala:schema:analytics-config:2.0.0" },
+    "schemaVersion": { "const": "2.0.0" },
+    "provider": {
+      "type": "object",
+      "required": ["kind", "measurementId"],
+      "properties": {
+        "kind": {
+          "enum": ["google-analytics-4"],
+          "description": "Which analytics provider the site uses. Closed list; a new provider is added as a new kind."
+        },
+        "measurementId": {
+          "type": "string",
+          "pattern": "^G-[A-Z0-9]{4,12}$",
+          "description": "The Google Analytics 4 measurement ID, for example G-ABC123XYZ."
+        }
+      },
+      "additionalProperties": false,
+      "description": "The analytics provider. The site's template loads this provider's script only after the reader consents, and extends the page Content-Security-Policy for that provider's origins."
+    },
+    "consent": {
+      "type": "object",
+      "required": ["policy"],
+      "properties": {
+        "policy": {
+          "enum": ["opt-in"],
+          "description": "opt-in: readers are asked before any analytics loads, and nothing loads until they accept."
+        }
+      },
+      "additionalProperties": false,
+      "description": "How readers are asked. The choice is stored in the reader’s browser and can be changed from the site footer."
+    }
+  },
+  "additionalProperties": false,
+  "$defs": {
+    "stableId": {
+      "type": "string",
+      "pattern": "^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$",
+      "description": "Lowercase canonical UUIDv7. Once published, it is immutable; its time ordering conveys neither chronology nor authority."
+    },
+    "slug": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 80,
+      "pattern": "^[a-z0-9]+(?:-[a-z0-9]+)*$"
+    },
+    "repoRelativePath": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 512,
+      "pattern": "^(?!/)(?!.*\\\\)(?!.*\\u0000).+$",
+      "format": "gala-repository-relative-path",
+      "x-gala-utf8ByteLength": { "maximum": 512 },
+      "description": "NFC UTF-8 repository-relative path using slash separators, with no leading slash, dot segment, NUL, backslash, or percent-decoded traversal."
+    },
+    "canonicalRoute": {
+      "type": "string",
+      "minLength": 1,
+      "pattern": "^/(?!/)(?!.*//)(?!.*[?#]).*$",
+      "format": "gala-canonical-route",
+      "description": "Absolute normalized route with no query, fragment, dot segment, double slash, or non-normalized percent encoding."
+    },
+    "gitObjectId": {
+      "type": "string",
+      "pattern": "^(?:sha1:[0-9a-f]{40}|sha256:[0-9a-f]{64})$"
+    },
+    "digest": { "type": "string", "pattern": "^sha256:[0-9a-f]{64}$" },
+    "urlHttps": {
+      "type": "string",
+      "format": "uri",
+      "pattern": "^https://(?![^/?#]*@)",
+      "description": "Absolute HTTPS URL without embedded credentials."
+    },
+    "bcp47": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 255,
+      "pattern": "^[A-Za-z0-9-]+$",
+      "format": "gala-bcp47",
+      "x-gala-utf8ByteLength": { "minimum": 1, "maximum": 255 },
+      "description": "Structurally valid canonical BCP-47 language tag."
+    },
+    "isoCountry": {
+      "type": "string",
+      "pattern": "^[A-Z]{2}$",
+      "format": "gala-iso-country",
+      "description": "ISO 3166-1 alpha-2 country code; admission remains subject to the active policy profile."
+    },
+    "plainLabel": {
+      "type": "string",
+      "format": "gala-plain-label",
+      "x-gala-graphemeLength": { "minimum": 1, "maximum": 80 },
+      "description": "Normalized Unicode plain text without markup, controls, or bidi overrides."
+    },
+    "plainText": {
+      "type": "string",
+      "format": "gala-plain-text",
+      "description": "NFC Unicode text without disallowed C0/C1 controls or bidi override/isolate controls."
+    },
+    "rfc3339": {
+      "type": "string",
+      "format": "date-time",
+      "pattern": "^[0-9]{4}-(?:0[1-9]|1[0-2])-(?:0[1-9]|[12][0-9]|3[01])T(?:[01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]\\.[0-9]{3}Z$",
+      "description": "Canonical Gala UTC millisecond subset of RFC 3339."
+    },
+    "semver": {
+      "type": "string",
+      "pattern": "^(?:0|[1-9]\\d*)\\.(?:0|[1-9]\\d*)\\.(?:0|[1-9]\\d*)(?:-(?:0|[1-9]\\d*|\\d*[A-Za-z-][0-9A-Za-z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[A-Za-z-][0-9A-Za-z-]*))*)?$",
+      "description": "Canonical SemVer 2.0.0 without build metadata."
+    },
+    "semverRange": {
+      "type": "string",
+      "minLength": 1,
+      "pattern": "^(?:\\S+|\\S+ \\S+)$",
+      "format": "gala-semver-range",
+      "description": "Whitespace-free npm-compatible exact, caret, or bounded comparator-set range; tags and URLs are invalid."
+    },
+    "packageRange": {
+      "type": "string",
+      "minLength": 3,
+      "pattern": "^(?:@[a-z0-9](?:[a-z0-9._-]*[a-z0-9])?/[a-z0-9](?:[a-z0-9._-]*[a-z0-9])?|[a-z0-9](?:[a-z0-9._-]*[a-z0-9])?)@(?:\\S+|\\S+ \\S+)$",
+      "format": "gala-package-range",
+      "description": "Lowercase npm package identity and admitted semver range; Git, file, URL, and alias sources are invalid."
+    },
+    "packageExact": {
+      "type": "string",
+      "minLength": 3,
+      "pattern": "^(?:@[a-z0-9](?:[a-z0-9._-]*[a-z0-9])?/[a-z0-9](?:[a-z0-9._-]*[a-z0-9])?|[a-z0-9](?:[a-z0-9._-]*[a-z0-9])?)@\\S+$",
+      "format": "gala-package-exact",
+      "description": "Lowercase npm package identity and exact canonical semantic version; aliases are invalid."
+    },
+    "urn": {
+      "type": "string",
+      "minLength": 10,
+      "maxLength": 255,
+      "format": "uri",
+      "pattern": "^urn:gala:[\\x21-\\x7E]+$",
+      "description": "Absolute ASCII URN in the schema-declared Gala namespace."
+    },
+    "glob": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 256,
+      "format": "gala-repository-glob",
+      "x-gala-utf8ByteLength": { "maximum": 256 },
+      "description": "Repository-relative POSIX glob using only star, globstar, and question-mark operators; braces, extglobs, negation, absolute paths, and parent traversal are invalid."
+    },
+    "passiveVisualToken": false,
+    "extensionKey": {
+      "type": "string",
+      "format": "gala-extension-key",
+      "description": "Reverse-DNS extension namespace that cannot shadow a core key."
+    }
+  }
+}

package/schemas/build-input.schema.json

@@ -46,6 +46,7 @@
     "navigation": { "$ref": "#/$defs/navigationNormalized" },
     "appearance": { "$ref": "#/$defs/appearanceNormalized" },
     "modules": { "$ref": "#/$defs/moduleBuildSelection" },
+    "policies": { "$ref": "#/$defs/policiesNormalized" },
     "buildEpoch": { "$ref": "#/$defs/rfc3339" },
     "baseUrl": { "$ref": "#/$defs/urlHttps" },
     "basePath": { "$ref": "#/$defs/canonicalRoute" },
@@ -531,6 +532,27 @@
       },
       "additionalProperties": false
     },
+    "policyPageNormalized": {
+      "type": "object",
+      "required": ["title", "body"],
+      "properties": {
+        "title": {
+          "$ref": "#/$defs/plainText",
+          "x-gala-graphemeLength": { "minimum": 1, "maximum": 80 }
+        },
+        "body": { "$ref": "#/$defs/renderableBody" }
+      },
+      "additionalProperties": false
+    },
+    "policiesNormalized": {
+      "type": "object",
+      "required": ["terms", "privacy"],
+      "properties": {
+        "terms": { "$ref": "#/$defs/policyPageNormalized" },
+        "privacy": { "$ref": "#/$defs/policyPageNormalized" }
+      },
+      "additionalProperties": false
+    },
     "authorNormalized": {
       "type": "object",
       "required": [
@@ -1030,6 +1052,12 @@
       "type": "object",
       "required": [],
       "properties": {
+        "analytics": {
+          "type": "object",
+          "required": ["config"],
+          "properties": { "config": { "$ref": "#/$defs/analyticsConfig" } },
+          "additionalProperties": false
+        },
         "interactions": {
           "type": "object",
           "required": ["config", "apiOrigin", "appOrigin"],
@@ -1142,6 +1170,44 @@
       },
       "additionalProperties": false
     },
+    "analyticsConfig": {
+      "type": "object",
+      "required": ["schemaId", "schemaVersion", "provider", "consent"],
+      "properties": {
+        "schemaId": { "const": "urn:gala:schema:analytics-config:2.0.0" },
+        "schemaVersion": { "const": "2.0.0" },
+        "provider": {
+          "type": "object",
+          "required": ["kind", "measurementId"],
+          "properties": {
+            "kind": {
+              "enum": ["google-analytics-4"],
+              "description": "Which analytics provider the site uses. Closed list; a new provider is added as a new kind."
+            },
+            "measurementId": {
+              "type": "string",
+              "pattern": "^G-[A-Z0-9]{4,12}$",
+              "description": "The Google Analytics 4 measurement ID, for example G-ABC123XYZ."
+            }
+          },
+          "additionalProperties": false,
+          "description": "The analytics provider. The site's template loads this provider's script only after the reader consents, and extends the page Content-Security-Policy for that provider's origins."
+        },
+        "consent": {
+          "type": "object",
+          "required": ["policy"],
+          "properties": {
+            "policy": {
+              "enum": ["opt-in"],
+              "description": "opt-in: readers are asked before any analytics loads, and nothing loads until they accept."
+            }
+          },
+          "additionalProperties": false,
+          "description": "How readers are asked. The choice is stored in the reader’s browser and can be changed from the site footer."
+        }
+      },
+      "additionalProperties": false
+    },
     "interactionsServiceOrigin": {
       "type": "string",
       "maxLength": 255,

package/schemas/deployment-intent.schema.json

@@ -370,6 +370,13 @@
           "maxLength": 2048,
           "x-gala-utf8ByteLength": { "maximum": 2048 }
         },
+        "verificationBaseUrl": {
+          "allOf": [{ "$ref": "#/$defs/urlHttps" }],
+          "maxLength": 2048,
+          "pattern": "^https://[a-z0-9](?:[a-z0-9.-]{0,251}[a-z0-9])?(?:/[^?#\\s]*)?$",
+          "x-gala-utf8ByteLength": { "maximum": 2048 },
+          "description": "SCHEMA-3.17.0, optional: the address the deploy is verified at when that differs from `baseUrl`, the build base. It is the origin and path that answer over HTTPS right now (the github.io project address before a custom domain is set, the custom base once it serves): a lowercase exact host with no userinfo, port, query or fragment; a path is allowed. Absent means `baseUrl` is both the build base and the verification address, exactly as before 3.17.0. When present it is a member of `destination` like `baseUrl`, so it is inside the capability decision record that `decisionDigest` covers (RFC 8785 canonical member order); a record without it digests exactly as it did before."
+        },
         "providerBinding": { "$ref": "#/$defs/destinationProviderCoordinates" }
       },
       "additionalProperties": false,

package/schemas/deployment-observation.schema.json

@@ -276,6 +276,13 @@
           "maxLength": 2048,
           "x-gala-utf8ByteLength": { "maximum": 2048 }
         },
+        "verificationBaseUrl": {
+          "allOf": [{ "$ref": "#/$defs/urlHttps" }],
+          "maxLength": 2048,
+          "pattern": "^https://[a-z0-9](?:[a-z0-9.-]{0,251}[a-z0-9])?(?:/[^?#\\s]*)?$",
+          "x-gala-utf8ByteLength": { "maximum": 2048 },
+          "description": "SCHEMA-3.17.0, optional: the address the deploy is verified at when that differs from `baseUrl`, the build base. It is the origin and path that answer over HTTPS right now (the github.io project address before a custom domain is set, the custom base once it serves): a lowercase exact host with no userinfo, port, query or fragment; a path is allowed. Absent means `baseUrl` is both the build base and the verification address, exactly as before 3.17.0. When present it is a member of `destination` like `baseUrl`, so it is inside the capability decision record that `decisionDigest` covers (RFC 8785 canonical member order); a record without it digests exactly as it did before."
+        },
         "providerBinding": { "$ref": "#/$defs/destinationProviderCoordinates" }
       },
       "additionalProperties": false,

package/schemas/deployment-receipt.schema.json

@@ -358,6 +358,13 @@
           "maxLength": 2048,
           "x-gala-utf8ByteLength": { "maximum": 2048 }
         },
+        "verificationBaseUrl": {
+          "allOf": [{ "$ref": "#/$defs/urlHttps" }],
+          "maxLength": 2048,
+          "pattern": "^https://[a-z0-9](?:[a-z0-9.-]{0,251}[a-z0-9])?(?:/[^?#\\s]*)?$",
+          "x-gala-utf8ByteLength": { "maximum": 2048 },
+          "description": "SCHEMA-3.17.0, optional: the address the deploy is verified at when that differs from `baseUrl`, the build base. It is the origin and path that answer over HTTPS right now (the github.io project address before a custom domain is set, the custom base once it serves): a lowercase exact host with no userinfo, port, query or fragment; a path is allowed. Absent means `baseUrl` is both the build base and the verification address, exactly as before 3.17.0. When present it is a member of `destination` like `baseUrl`, so it is inside the capability decision record that `decisionDigest` covers (RFC 8785 canonical member order); a record without it digests exactly as it did before."
+        },
         "providerBinding": { "$ref": "#/$defs/destinationProviderCoordinates" }
       },
       "additionalProperties": false,

package/schemas/problem.schema.json

@@ -38,6 +38,27 @@
       "items": { "$ref": "#/$defs/fieldError" },
       "minItems": 0,
       "maxItems": 100
+    },
+    "expectedBase": {
+      "allOf": [{ "$ref": "#/$defs/urlHttps" }],
+      "maxLength": 2048,
+      "description": "SCHEMA-3.17.0, optional, carried by a CANONICAL_BASE_MISMATCH problem and absent from every other: the address the site is served from right now and so the canonical base its publication profile must carry (the active custom domain once the domain redirects the project path, otherwise the github.io address)."
+    },
+    "profileBase": {
+      "type": "string",
+      "maxLength": 2048,
+      "description": "SCHEMA-3.17.0, optional, carried by a CANONICAL_BASE_MISMATCH problem and absent from every other: the canonical base the publication profile (`gala/publication.json`) carries now, as written. A string rather than an https URL because the mismatch can be a value that is not one (for example an http address)."
+    },
+    "domainState": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 80,
+      "description": "SCHEMA-3.17.0, optional, carried by a CANONICAL_BASE_MISMATCH problem and absent from every other: the state of the site's custom-domain binding that decided `expectedBase` (a `DomainBindingState` value such as `CERTIFICATE_PENDING` or `ACTIVE`), absent when the site has no custom domain. A client shows a value it does not know as is."
+    },
+    "remedy": {
+      "$ref": "#/$defs/plainText",
+      "description": "SCHEMA-3.17.0, optional, carried by a CANONICAL_BASE_MISMATCH problem and absent from every other: one sentence, written for the author, saying what resolves the mismatch. A client may render it verbatim.",
+      "x-gala-graphemeLength": { "minimum": 1, "maximum": 500 }
     }
   },
   "additionalProperties": false,

package/schemas/publication.schema.json

@@ -46,6 +46,7 @@
     },
     "defaultImageRef": { "$ref": "#/$defs/repoRelativePath" },
     "profile": { "$ref": "#/$defs/publicationProfile" },
+    "policies": { "$ref": "#/$defs/publicationPolicies" },
     "footerCard": { "$ref": "#/$defs/footerCard" },
     "newsletter": { "$ref": "#/$defs/newsletter" },
     "crawlers": { "$ref": "#/$defs/crawlers" },
@@ -220,6 +221,27 @@
       },
       "additionalProperties": false
     },
+    "policyPage": {
+      "type": "object",
+      "required": ["title", "body"],
+      "properties": {
+        "title": {
+          "$ref": "#/$defs/plainText",
+          "x-gala-graphemeLength": { "minimum": 1, "maximum": 80 }
+        },
+        "body": { "$ref": "#/$defs/repoRelativePath", "pattern": "^.+\\.md$" }
+      },
+      "additionalProperties": false
+    },
+    "publicationPolicies": {
+      "type": "object",
+      "required": ["terms", "privacy"],
+      "properties": {
+        "terms": { "$ref": "#/$defs/policyPage" },
+        "privacy": { "$ref": "#/$defs/policyPage" }
+      },
+      "additionalProperties": false
+    },
     "footerCard": {
       "type": "object",
       "required": ["enabled", "heading", "body", "authorIds"],

package/schemas/theme-contract.schema.json

@@ -2305,11 +2305,13 @@
     },
     {
       "if": {
-        "properties": { "contractVersion": { "const": "4.0.0" } },
+        "properties": { "contractVersion": { "enum": ["4.0.0", "4.1.0"] } },
         "required": ["contractVersion"]
       },
       "then": {
-        "properties": { "templateRange": { "enum": ["^4.0.0", "^4.1.0"] } },
+        "properties": {
+          "templateRange": { "enum": ["^4.0.0", "^4.1.0", "^4.4.0"] }
+        },
         "required": ["composition"],
         "allOf": [
           {
@@ -2395,6 +2397,24 @@
                 }
               }
             }
+          },
+          {
+            "if": {
+              "properties": { "contractVersion": { "const": "4.0.0" } },
+              "required": ["contractVersion"]
+            },
+            "then": {
+              "properties": {
+                "templateRange": { "enum": ["^4.0.0", "^4.1.0"] }
+              }
+            }
+          },
+          {
+            "if": {
+              "properties": { "contractVersion": { "const": "4.1.0" } },
+              "required": ["contractVersion"]
+            },
+            "then": { "properties": { "templateRange": { "const": "^4.4.0" } } }
           }
         ]
       },
@@ -2405,7 +2425,9 @@
         "properties": { "themeId": { "const": "editorial" } },
         "required": ["themeId"]
       },
-      "then": { "properties": { "contractVersion": { "const": "4.0.0" } } }
+      "then": {
+        "properties": { "contractVersion": { "enum": ["4.0.0", "4.1.0"] } }
+      }
     }
   ],
   "$comment": "The semantic validator enforces package/theme identity, slot/fixture catalogs, non-color palette equality, CSS/package admission, evidence, budgets, and every self-excluding digest."

package/site-policy-defaults.json

@@ -0,0 +1,10 @@
+{
+  "terms": {
+    "title": "Terms",
+    "markdown": "## About this site\n\nThis site is a publication run by its author. These terms explain how you may use it. By using the site you agree to them.\n\n## Who owns the content\n\nThe articles, images and other material on this site belong to its author or to the people the author credits. You may read the site and quote short passages with a link back to the original. You may not copy, republish or sell the content without the author's written permission, unless a licence stated on the site says you can.\n\n## Using the site as it is\n\nThe site is provided as it is. The author works to keep it accurate and available, but does not promise that it is free of errors, always online, or right for any particular purpose. Nothing on the site is professional, legal, medical or financial advice. To the extent the law allows, the author is not liable for any loss that results from using the site or relying on its content. Nothing in these terms limits a liability that the law does not allow to be limited.\n\n## Comments and other contributions\n\nIf the site lets you react or comment, please be civil. Do not post anything unlawful, abusive, harassing, misleading or spam, or anything that infringes someone else's rights. You are responsible for what you post. The author may remove any contribution, or stop accepting them, at any time and without notice.\n\n## Links to other sites\n\nThe site may link to other websites. The author does not control them and is not responsible for their content or practices.\n\n## Changes to these terms\n\nThe author may update these terms from time to time. The version on this page is the one that applies when you use the site, so please check back now and then.\n\n## Contact\n\nQuestions about the site or these terms go to the author. Use the contact details on the site, such as the About page or the author's profile.\n"
+  },
+  "privacy": {
+    "title": "Privacy",
+    "markdown": "## What this page covers\n\nThis page explains what the site itself collects when you read it. What is collected by reactions, comments or analytics, who handles it, and what choices you have are described in the section at the end of this page, for the features the site has switched on.\n\n## Server logs\n\nThe site is delivered by a hosting provider. Like almost every web host, it keeps ordinary request logs: your IP address, the time of the request, the page you asked for and basic details about your browser. These logs are used to run and protect the service and are kept for the provider's own retention period. The author does not use them to identify individual readers.\n\n## Browser storage\n\nThe site stores a few small settings in your browser: your colour mode (light, dark or system) and any posts you have saved to read later. This information stays on your device. The site itself keeps no reader accounts and does not track you across other websites.\n\n## Your rights\n\nDepending on where you live, you may have the right to ask what personal information is held about you, to have it corrected or deleted, or to object to how it is used. To use these rights, or with any privacy question, contact the author using the contact details on the site.\n\n## Changes to this page\n\nThe author may update this page from time to time. The version shown here is the current one.\n"
+  }
+}

package/src/internal/schema-validator.js

@@ -1,5 +1,6 @@
 import diagnosticMap from '../../diagnostics/diagnostic-map.json' with { type: 'json' };
 import adapterCapabilitySchema from '../../schemas/adapter-capability.schema.json' with { type: 'json' };
+import analyticsConfigSchema from '../../schemas/analytics-config.schema.json' with { type: 'json' };
 import appearanceSchema from '../../schemas/appearance.schema.json' with { type: 'json' };
 import artifactManifestSchema from '../../schemas/artifact-manifest.schema.json' with { type: 'json' };
 import authorSchema from '../../schemas/author.schema.json' with { type: 'json' };
@@ -26,6 +27,7 @@ import { createValidatorSuite } from './validator-core.js';
 /** Statically imported schema documents, in CONTRACTS order. */
 const SCHEMAS_BY_CONTRACT = Object.freeze({
   'adapter-capability': adapterCapabilitySchema,
+  'analytics-config': analyticsConfigSchema,
   appearance: appearanceSchema,
   'artifact-manifest': artifactManifestSchema,
   author: authorSchema,
@@ -50,6 +52,7 @@ const SCHEMAS_BY_CONTRACT = Object.freeze({
 
 const CONTRACTS = Object.freeze([
   'adapter-capability',
+  'analytics-config',
   'appearance',
   'artifact-manifest',
   'author',