@rathnasgala2/schemas 3.32.0 → 3.32.2

package/THIRD_PARTY_LICENSES.json

@@ -1,6 +1,6 @@
 {
   "schemaVersion": 1,
-  "package": "@rathnasgala2/schemas@3.32.0",
+  "package": "@rathnasgala2/schemas@3.32.2",
   "source": "package-lock.json",
   "dependencies": [
     {

package/docs/catalogs/schema-inventory.json

@@ -229,9 +229,9 @@
       "version": "2.0.0",
       "path": "openapi/openapi.yaml",
       "materialized": true,
-      "sourceDigest": "sha256:27d37fa955aa758d38c89dabbe084332bffc023c018c619ca9acce64d17ee999",
+      "sourceDigest": "sha256:f2775ebfd119c9db3a6af2227d8d9b0f4ddc7df718754edec92be78b3ccf9556",
       "typescriptRootType": null
     }
   ],
-  "digest": "sha256:ca2fd41ffae54d9eb300a36d0421a335638924b08e68d9d80479091a77147959"
+  "digest": "sha256:6f928c23e796394069e028cb20fac12a8c99798d7e0db8c41e19535c170dd834"
 }

package/openapi/http-catalog.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": "2.0.0",
   "sourceDesignRevision": "a53052955ceb6c1aa10c886289dc832eedfe6de0a00004df07d353ac19c4403a",
-  "openApiDigest": "sha256:27d37fa955aa758d38c89dabbe084332bffc023c018c619ca9acce64d17ee999",
+  "openApiDigest": "sha256:f2775ebfd119c9db3a6af2227d8d9b0f4ddc7df718754edec92be78b3ccf9556",
   "operations": [
     {
       "operationId": "getInternalHealth",
@@ -3531,5 +3531,5 @@
       "sourceFragment": "workloads"
     }
   ],
-  "digest": "sha256:6757c4f6ab4e8270463b3d9a57d601afe824fb724e8b7c8646846291235592de"
+  "digest": "sha256:db5faf7a8f4b82ede5af252edaba0d00080a9769f4fa80fba1638d727e3c83c9"
 }

package/openapi/openapi.yaml

@@ -1439,8 +1439,9 @@ components:
         5 MiB bound is measured on the decoded byte length, not this
         field's text length, and `bytesBase64`'s own `maxLength` is the
         base64 ceiling for that same decoded bound. `contentType` is closed
-        to PNG, JPEG, WebP, GIF and AVIF (SCHEMA-3.3.0 drops the sound and
-        video types the server never accepted); `image/svg+xml` is
+        to PNG, JPEG, WebP, GIF, AVIF and PDF (SCHEMA-3.3.0 drops the sound
+        and video types the server never accepted; SCHEMA-3.32.2 adds
+        `application/pdf` for file downloads); `image/svg+xml` is
         deliberately absent everywhere in this contract (an SVG can carry
         script). `DELETE` names only the path it removes and carries none
         of the write-only members.
@@ -1464,6 +1465,7 @@ components:
             - image/webp
             - image/gif
             - image/avif
+            - application/pdf
           type: string
         path:
           maxLength: 512
@@ -4556,6 +4558,13 @@ components:
           maxItems: 200
           type: array
           uniqueItems: true
+        createdAt:
+          description: |-
+            SCHEMA-3.32.1: when the publication was created. Optional so a server that has not recorded it, and every 3.32.0 response, still validates; a client treats absent as unknown.
+
+            Canonical Gala instant: the UTC millisecond subset of RFC 3339, exactly `YYYY-MM-DDThh:mm:ss.sssZ`. Stated here rather than as a `pattern` because a generated `OffsetDateTime` cannot carry one (LOCAL-56).
+          format: date-time
+          type: string
         name:
           maxLength: 80
           minLength: 1
@@ -7566,12 +7575,20 @@ components:
               format: uuid
               pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$
               type: string
+            likeCount:
+              description: "SCHEMA-3.32.1: how many readers like the comment; absent counts as 0."
+              format: int64
+              minimum: 0
+              type: integer
             parentId:
               oneOf:
                 - format: uuid
                   pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$
                   type: string
                 - type: "null"
+            pinned:
+              description: "SCHEMA-3.32.1: true for the one root comment the site owner pinned to the top of the article; absent counts as false."
+              type: boolean
             state:
               $ref: "#/components/schemas/CommentInternalState"
           required:
@@ -17712,7 +17729,8 @@ components:
         `DELETE_DATE_NOT_AFTER_RELEASE` (SCHEMA-3.25.1), alongside the other
         reasons the API reports for cross-document rules; those reasons are
         not an enumerated schema member.
-        Assets are images only (PNG, JPEG, WebP, GIF, AVIF; SVG is refused):
+        Assets are images (PNG, JPEG, WebP, GIF, AVIF; SVG is refused) and,
+        since SCHEMA-3.32.2, PDF files (`application/pdf`):
         at most 20 per change, each at most 5 MiB and together at most
         20 MiB, measured on the decoded bytes -- `assets[].bytesBase64` is
         base64 over raw bytes, so what counts is the decoded byte length,
@@ -39730,7 +39748,8 @@ paths:
         sniffed from the asset's own bytes rather than trusted from what was
         written at plan time, with `X-Content-Type-Options: nosniff` and
         `Content-Disposition: inline` so a browser renders it and never
-        executes it. This operation serves eleven types. `image/svg+xml`
+        executes it. This operation serves twelve types (SCHEMA-3.32.2 adds
+        `application/pdf`). `image/svg+xml`
         remains in the `200` response's declared content-type list only
         because it was published there since SCHEMA-2.14.0, and removing it
         would not be additive; no server version has ever answered with it.
@@ -39746,7 +39765,7 @@ paths:
         with the unsatisfied-range `Content-Range` (`bytes`, an asterisk,
         then `/<total>`). An asset over its
         per-category bound (image 5 MiB, sound 20 MiB, video 50 MiB), or
-        whose sniffed type is not one of the eleven served types, is
+        whose sniffed type is not one of the twelve served types, is
         `422 VALIDATION_FAILED` pointed at `/path`.
       operationId: getOrganizationsByOrganizationIdPublicationsByPublicationIdContentAssets
       parameters:
@@ -39787,6 +39806,10 @@ paths:
       responses:
         "200":
           content:
+            application/pdf:
+              schema:
+                format: binary
+                type: string
             audio/mp4:
               schema:
                 format: binary
@@ -39849,6 +39872,10 @@ paths:
               $ref: "#/components/headers/XCorrelationId"
         "206":
           content:
+            application/pdf:
+              schema:
+                format: binary
+                type: string
             audio/mp4:
               schema:
                 format: binary
@@ -40055,7 +40082,7 @@ paths:
                   value:
                     code: VALIDATION_FAILED
                     correlationId: 018f0000-0000-7000-8000-000000000001
-                    detail: The asset exceeds its per-category read bound (image 5 MiB, sound 20 MiB, video 50 MiB), its sniffed content type is not one of the eleven served types, or it is image/svg+xml (never served, script risk). See the operation contract.
+                    detail: The asset exceeds its per-category read bound (image 5 MiB, sound 20 MiB, video 50 MiB), its sniffed content type is not one of the twelve served types, or it is image/svg+xml (never served, script risk). See the operation contract.
                     errors:
                       - code: VALIDATION_FAILED
                         pointer: /path
@@ -51036,7 +51063,7 @@ paths:
   /v2/organizations/{organizationId}/publications/{publicationId}/newsletter-subscribers:import:
     post:
       description: |
-        Needs `publication.audience.manage`. The body is the addresses the owner's file held, already parsed by the App (at most 5000 per call), with `attestation: true`: the owner states that every address agreed to hear from them. Each address that is new becomes a `pending` subscriber and is sent the same confirmation email a reader who signs up receives; nobody is subscribed until they confirm. An address that is already known (`pending`, `confirmed`, `unsubscribed` or `suppressed`) is skipped and counted in `skippedKnown`, so repeating a call is harmless. `invalid` counts entries that are not usable addresses and `overCapacity` those left out because the organization's subscriber allowance was reached. A call without `attestation: true` is `400 VALIDATION_FAILED`.
+        Needs `publication.audience.manage`. The body is the addresses the owner's file held, already parsed by the App (at most 5000 per call), with `attestation: true`: the owner states that every address agreed to hear from them. Each address that is new becomes a `pending` subscriber and is sent the same confirmation email a reader who signs up receives; nobody is subscribed until they confirm. An address that is already known (`pending`, `confirmed`, `unsubscribed` or `suppressed`) is skipped and counted in `skippedKnown`, so repeating a call is harmless. `invalid` counts entries that are not usable addresses and `overCapacity` those left out because the organization's subscriber allowance was reached. A call without `attestation: true` is `400 VALIDATION_FAILED`. `409 NEWSLETTER_UNAVAILABLE` when the site takes no subscribers (it is not in Galascribe newsletter mode).
       operationId: postOrganizationsByOrganizationIdPublicationsByPublicationIdNewsletterSubscribersImport
       parameters:
         - $ref: "#/components/parameters/XCorrelationId"
@@ -51162,6 +51189,33 @@ paths:
           $ref: "#/components/responses/AuthorizationDenied"
         "404":
           $ref: "#/components/responses/ResourceNotFound"
+        "409":
+          content:
+            application/problem+json:
+              examples:
+                NEWSLETTER_UNAVAILABLE:
+                  summary: NEWSLETTER_UNAVAILABLE
+                  value:
+                    code: NEWSLETTER_UNAVAILABLE
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 409
+                    title: NEWSLETTER_UNAVAILABLE
+                    type: urn:gala:problem:newsletter-unavailable
+              schema:
+                $ref: "#/components/schemas/Problem"
+          description: NEWSLETTER_UNAVAILABLE
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+          x-gala-problem-codes:
+            - NEWSLETTER_UNAVAILABLE
         "413":
           $ref: "#/components/responses/RequestTooLarge"
         "415":
@@ -51183,6 +51237,7 @@ paths:
       x-gala-reachable-problems:
         - AUTHENTICATION_REQUIRED
         - AUTHORIZATION_DENIED
+        - NEWSLETTER_UNAVAILABLE
         - REQUEST_FIELD_UNKNOWN
         - RESOURCE_NOT_FOUND
         - VALIDATION_FAILED

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rathnasgala2/schemas",
-  "version": "3.32.0",
+  "version": "3.32.2",
   "description": "Executable JSON Schema and OpenAPI contracts for Galascribe",
   "type": "module",
   "license": "Apache-2.0",

package/sbom.cdx.json

@@ -97,8 +97,8 @@
       "type": "library",
       "name": "schemas",
       "group": "@rathnasgala2",
-      "version": "3.32.0",
-      "bom-ref": "@rathnasgala2/schemas@3.32.0",
+      "version": "3.32.2",
+      "bom-ref": "@rathnasgala2/schemas@3.32.2",
       "description": "Executable JSON Schema and OpenAPI contracts for Galascribe",
       "licenses": [
         {
@@ -108,7 +108,7 @@
           }
         }
       ],
-      "purl": "pkg:npm/%40rathnasgala2/schemas@3.32.0?vcs_url=git%2Bhttps%3A%2F%2Fgithub.com%2Frathnasgala2%2Fschema.git",
+      "purl": "pkg:npm/%40rathnasgala2/schemas@3.32.2?vcs_url=git%2Bhttps%3A%2F%2Fgithub.com%2Frathnasgala2%2Fschema.git",
       "externalReferences": [
         {
           "url": "https://github.com/rathnasgala2/schema/issues",
@@ -153,7 +153,7 @@
       "type": "library",
       "name": "ajv-formats",
       "version": "3.0.1",
-      "bom-ref": "@rathnasgala2/schemas@3.32.0|ajv-formats@3.0.1",
+      "bom-ref": "@rathnasgala2/schemas@3.32.2|ajv-formats@3.0.1",
       "licenses": [
         {
           "license": {
@@ -187,7 +187,7 @@
       "type": "library",
       "name": "ajv",
       "version": "8.20.0",
-      "bom-ref": "@rathnasgala2/schemas@3.32.0|ajv@8.20.0",
+      "bom-ref": "@rathnasgala2/schemas@3.32.2|ajv@8.20.0",
       "licenses": [
         {
           "license": {
@@ -221,7 +221,7 @@
       "type": "library",
       "name": "fast-deep-equal",
       "version": "3.1.3",
-      "bom-ref": "@rathnasgala2/schemas@3.32.0|fast-deep-equal@3.1.3",
+      "bom-ref": "@rathnasgala2/schemas@3.32.2|fast-deep-equal@3.1.3",
       "licenses": [
         {
           "license": {
@@ -255,7 +255,7 @@
       "type": "library",
       "name": "fast-uri",
       "version": "3.1.8",
-      "bom-ref": "@rathnasgala2/schemas@3.32.0|fast-uri@3.1.8",
+      "bom-ref": "@rathnasgala2/schemas@3.32.2|fast-uri@3.1.8",
       "licenses": [
         {
           "license": {
@@ -289,7 +289,7 @@
       "type": "library",
       "name": "json-schema-traverse",
       "version": "1.0.0",
-      "bom-ref": "@rathnasgala2/schemas@3.32.0|json-schema-traverse@1.0.0",
+      "bom-ref": "@rathnasgala2/schemas@3.32.2|json-schema-traverse@1.0.0",
       "licenses": [
         {
           "license": {
@@ -323,7 +323,7 @@
       "type": "library",
       "name": "require-from-string",
       "version": "2.0.2",
-      "bom-ref": "@rathnasgala2/schemas@3.32.0|require-from-string@2.0.2",
+      "bom-ref": "@rathnasgala2/schemas@3.32.2|require-from-string@2.0.2",
       "licenses": [
         {
           "license": {
@@ -1064,10 +1064,10 @@
   ],
   "dependencies": [
     {
-      "ref": "@rathnasgala2/schemas@3.32.0",
+      "ref": "@rathnasgala2/schemas@3.32.2",
       "dependsOn": [
-        "@rathnasgala2/schemas@3.32.0|ajv-formats@3.0.1",
-        "@rathnasgala2/schemas@3.32.0|ajv@8.20.0",
+        "@rathnasgala2/schemas@3.32.2|ajv-formats@3.0.1",
+        "@rathnasgala2/schemas@3.32.2|ajv@8.20.0",
         "pkg:npm/semver@7.8.5",
         "urn:gala:source-data:iana-ipv4-special-registry",
         "urn:gala:source-data:iana-ipv6-special-registry",
@@ -1089,31 +1089,31 @@
       ]
     },
     {
-      "ref": "@rathnasgala2/schemas@3.32.0|ajv-formats@3.0.1",
+      "ref": "@rathnasgala2/schemas@3.32.2|ajv-formats@3.0.1",
       "dependsOn": [
-        "@rathnasgala2/schemas@3.32.0|ajv@8.20.0"
+        "@rathnasgala2/schemas@3.32.2|ajv@8.20.0"
       ]
     },
     {
-      "ref": "@rathnasgala2/schemas@3.32.0|ajv@8.20.0",
+      "ref": "@rathnasgala2/schemas@3.32.2|ajv@8.20.0",
       "dependsOn": [
-        "@rathnasgala2/schemas@3.32.0|fast-deep-equal@3.1.3",
-        "@rathnasgala2/schemas@3.32.0|fast-uri@3.1.8",
-        "@rathnasgala2/schemas@3.32.0|json-schema-traverse@1.0.0",
-        "@rathnasgala2/schemas@3.32.0|require-from-string@2.0.2"
+        "@rathnasgala2/schemas@3.32.2|fast-deep-equal@3.1.3",
+        "@rathnasgala2/schemas@3.32.2|fast-uri@3.1.8",
+        "@rathnasgala2/schemas@3.32.2|json-schema-traverse@1.0.0",
+        "@rathnasgala2/schemas@3.32.2|require-from-string@2.0.2"
       ]
     },
     {
-      "ref": "@rathnasgala2/schemas@3.32.0|fast-deep-equal@3.1.3"
+      "ref": "@rathnasgala2/schemas@3.32.2|fast-deep-equal@3.1.3"
     },
     {
-      "ref": "@rathnasgala2/schemas@3.32.0|fast-uri@3.1.8"
+      "ref": "@rathnasgala2/schemas@3.32.2|fast-uri@3.1.8"
     },
     {
-      "ref": "@rathnasgala2/schemas@3.32.0|json-schema-traverse@1.0.0"
+      "ref": "@rathnasgala2/schemas@3.32.2|json-schema-traverse@1.0.0"
     },
     {
-      "ref": "@rathnasgala2/schemas@3.32.0|require-from-string@2.0.2"
+      "ref": "@rathnasgala2/schemas@3.32.2|require-from-string@2.0.2"
     },
     {
       "ref": "pkg:npm/semver@7.8.5"