@takuhon/core 0.25.0 → 1.1.0

package/dist/index.d.ts

@@ -1,5 +1,5 @@
 var $schema = "https://json-schema.org/draft/2020-12/schema";
-var $id = "https://takuhon.example/schemas/0.7.0/takuhon.schema.json";
+var $id = "https://takuhon.example/schemas/1.1.0/takuhon.schema.json";
 var title = "Takuhon Profile";
 var description = "Portable profile data format consumed by @takuhon/core. The canonical contract for profile content authored as takuhon.json.";
 var type = "object";
@@ -7,10 +7,6 @@ var additionalProperties = false;
 var required = [
 	"schemaVersion",
 	"profile",
-	"links",
-	"careers",
-	"projects",
-	"skills",
 	"contact",
 	"settings",
 	"meta"
@@ -197,9 +193,10 @@ var $defs = {
 		additionalProperties: {
 			type: "string",
 			minLength: 1,
-			maxLength: 200
+			maxLength: 200,
+			pattern: "\\S"
 		},
-		description: "Map of BCP-47 locale tag to short title-like string (max 200 chars per value)."
+		description: "Map of BCP-47 locale tag to short title-like string (max 200 chars per value). Each value must contain at least one non-whitespace character."
 	},
 	LocalizedBody: {
 		type: "object",
@@ -211,9 +208,10 @@ var $defs = {
 		additionalProperties: {
 			type: "string",
 			minLength: 1,
-			maxLength: 5000
+			maxLength: 5000,
+			pattern: "\\S"
 		},
-		description: "Map of BCP-47 locale tag to body-length string (max 5000 chars per value)."
+		description: "Map of BCP-47 locale tag to body-length string (max 5000 chars per value). Each value must contain at least one non-whitespace character."
 	},
 	LinkType: {
 		type: "string",
@@ -238,7 +236,7 @@ var $defs = {
 	},
 	Profile: {
 		type: "object",
-		additionalProperties: true,
+		additionalProperties: false,
 		required: [
 			"displayName"
 		],
@@ -262,7 +260,7 @@ var $defs = {
 	},
 	Avatar: {
 		type: "object",
-		additionalProperties: true,
+		additionalProperties: false,
 		required: [
 			"url"
 		],
@@ -280,7 +278,7 @@ var $defs = {
 	},
 	Address: {
 		type: "object",
-		additionalProperties: true,
+		additionalProperties: false,
 		properties: {
 			country: {
 				$ref: "#/$defs/Iso3166Alpha2"
@@ -359,7 +357,7 @@ var $defs = {
 	},
 	Career: {
 		type: "object",
-		additionalProperties: true,
+		additionalProperties: false,
 		required: [
 			"id",
 			"organization",
@@ -412,7 +410,7 @@ var $defs = {
 	},
 	Project: {
 		type: "object",
-		additionalProperties: true,
+		additionalProperties: false,
 		required: [
 			"id",
 			"title"
@@ -469,7 +467,7 @@ var $defs = {
 	},
 	Skill: {
 		type: "object",
-		additionalProperties: true,
+		additionalProperties: false,
 		required: [
 			"id",
 			"label"
@@ -500,7 +498,7 @@ var $defs = {
 	},
 	Contact: {
 		type: "object",
-		additionalProperties: true,
+		additionalProperties: false,
 		properties: {
 			email: {
 				$ref: "#/$defs/Email"
@@ -516,7 +514,7 @@ var $defs = {
 	},
 	Settings: {
 		type: "object",
-		additionalProperties: true,
+		additionalProperties: false,
 		required: [
 			"defaultLocale",
 			"availableLocales"
@@ -568,6 +566,39 @@ var $defs = {
 			},
 			publicVisibility: {
 				$ref: "#/$defs/PublicVisibility"
+			},
+			contact: {
+				$ref: "#/$defs/ContactSettings"
+			}
+		}
+	},
+	ContactSettings: {
+		type: "object",
+		additionalProperties: false,
+		description: "Opt-in contact form configuration (added in 1.1.0). Only public values live here; the Turnstile site key is safe to embed in the page. The Turnstile secret, the recipient address, and the From label are provisioned out of band as environment configuration and are never stored in takuhon.json. Adapters that support the form mount the widget and a POST endpoint when 'enabled' is true.",
+		properties: {
+			enabled: {
+				type: "boolean",
+				"default": false,
+				description: "Master switch. When false (the default), no contact form is mounted even if a site key is present."
+			},
+			turnstileSiteKey: {
+				type: "string",
+				minLength: 1,
+				maxLength: 128,
+				description: "Public Cloudflare Turnstile site key, safe to embed in the page. Without it the widget is not mounted."
+			},
+			endpoint: {
+				type: "string",
+				minLength: 1,
+				maxLength: 2048,
+				description: "Override the POST endpoint the widget submits to. Defaults to /api/contact on the same origin."
+			},
+			subjectPrefix: {
+				type: "string",
+				minLength: 1,
+				maxLength: 128,
+				description: "Subject prefix for the delivered email, e.g. '[example.com contact]'."
 			}
 		}
 	},
@@ -709,7 +740,7 @@ var $defs = {
 	},
 	Meta: {
 		type: "object",
-		additionalProperties: true,
+		additionalProperties: false,
 		required: [
 			"contentLicense"
 		],
@@ -774,7 +805,7 @@ var $defs = {
 	},
 	MetaPrivacy: {
 		type: "object",
-		additionalProperties: true,
+		additionalProperties: false,
 		description: "Opt-out flags that strip personally identifying fields from public API output (GET /api/profile, /api/jsonld, /takuhon.json). Admin endpoints (PUT /api/admin/*, GET /api/admin/export) ignore these flags. Privacy-by-default: omitting the object or individual flags is equivalent to true.",
 		properties: {
 			hideCredentialIds: {
@@ -791,7 +822,7 @@ var $defs = {
 	},
 	Certification: {
 		type: "object",
-		additionalProperties: true,
+		additionalProperties: false,
 		required: [
 			"id",
 			"title",
@@ -842,7 +873,7 @@ var $defs = {
 	},
 	Membership: {
 		type: "object",
-		additionalProperties: true,
+		additionalProperties: false,
 		required: [
 			"id",
 			"organization",
@@ -892,7 +923,7 @@ var $defs = {
 	},
 	Volunteering: {
 		type: "object",
-		additionalProperties: true,
+		additionalProperties: false,
 		required: [
 			"id",
 			"organization",
@@ -945,7 +976,7 @@ var $defs = {
 	},
 	Honor: {
 		type: "object",
-		additionalProperties: true,
+		additionalProperties: false,
 		required: [
 			"id",
 			"title",
@@ -982,7 +1013,7 @@ var $defs = {
 	},
 	Education: {
 		type: "object",
-		additionalProperties: true,
+		additionalProperties: false,
 		required: [
 			"id",
 			"institution",
@@ -1041,7 +1072,7 @@ var $defs = {
 	},
 	Publication: {
 		type: "object",
-		additionalProperties: true,
+		additionalProperties: false,
 		required: [
 			"id",
 			"title",
@@ -1093,7 +1124,7 @@ var $defs = {
 	},
 	Language: {
 		type: "object",
-		additionalProperties: true,
+		additionalProperties: false,
 		required: [
 			"id",
 			"language",
@@ -1131,7 +1162,7 @@ var $defs = {
 	},
 	Course: {
 		type: "object",
-		additionalProperties: true,
+		additionalProperties: false,
 		required: [
 			"id",
 			"title"
@@ -1175,7 +1206,7 @@ var $defs = {
 	},
 	Patent: {
 		type: "object",
-		additionalProperties: true,
+		additionalProperties: false,
 		required: [
 			"id",
 			"title",
@@ -1240,7 +1271,7 @@ var $defs = {
 	},
 	TestScore: {
 		type: "object",
-		additionalProperties: true,
+		additionalProperties: false,
 		required: [
 			"id",
 			"title",
@@ -1284,7 +1315,7 @@ var $defs = {
 	},
 	Recommendation: {
 		type: "object",
-		additionalProperties: true,
+		additionalProperties: false,
 		required: [
 			"id",
 			"body",
@@ -1326,7 +1357,7 @@ var $defs = {
 	},
 	RecommendationAuthor: {
 		type: "object",
-		additionalProperties: true,
+		additionalProperties: false,
 		required: [
 			"name"
 		],
@@ -1557,6 +1588,7 @@ declare const schema: {
                 type: string;
                 minLength: number;
                 maxLength: number;
+                pattern: string;
             };
             description: string;
         };
@@ -1571,6 +1603,7 @@ declare const schema: {
                 type: string;
                 minLength: number;
                 maxLength: number;
+                pattern: string;
             };
             description: string;
         };
@@ -1882,6 +1915,39 @@ declare const schema: {
                 publicVisibility: {
                     $ref: string;
                 };
+                contact: {
+                    $ref: string;
+                };
+            };
+        };
+        ContactSettings: {
+            type: string;
+            additionalProperties: boolean;
+            description: string;
+            properties: {
+                enabled: {
+                    type: string;
+                    default: boolean;
+                    description: string;
+                };
+                turnstileSiteKey: {
+                    type: string;
+                    minLength: number;
+                    maxLength: number;
+                    description: string;
+                };
+                endpoint: {
+                    type: string;
+                    minLength: number;
+                    maxLength: number;
+                    description: string;
+                };
+                subjectPrefix: {
+                    type: string;
+                    minLength: number;
+                    maxLength: number;
+                    description: string;
+                };
             };
         };
         PublicVisibility: {
@@ -2596,8 +2662,8 @@ type Schema = typeof schemaJson;
  *
  * These mirror the canonical contract defined in `takuhon.schema.json`. The
  * published shape is sanity-checked at commit 1 by `__tests__/schema.test.ts`
- * (top-level keys, `$defs`, required fields, hybrid `additionalProperties`
- * splits, Spec §6 invariants) and by `__tests__/example.test.ts` (the bundled
+ * (top-level keys, `$defs`, required fields, the closed `additionalProperties`
+ * contract, Spec §6 invariants) and by `__tests__/example.test.ts` (the bundled
  * fixture is assigned to `Takuhon` via a boundary cast, and per-Spec invariants
  * are asserted at runtime). Those tests catch the kind of drift that changes
  * the published shape, but they do not enforce field-by-field parity between
@@ -2607,27 +2673,31 @@ type Schema = typeof schemaJson;
  * When the schema changes, update these types accordingly and add a migration
  * entry under `src/migrations/` for the next minor version.
  *
- * Public surface scope (hybrid `additionalProperties` strategy):
+ * `additionalProperties` policy (schema 1.0.0 — precise contract):
  *
- * - **Closed** in the schema (no forward-compatible extras): the document
- *   root, `ContentLicense`, and every `Link` variant.
- * - **Open** in the schema (`additionalProperties: true`): `Profile`,
- *   `Settings`, `Meta`, `Career`, `Project`, `Skill`, `Contact`, `Avatar`,
- *   `Address`, and the locale-keyed map shapes `LocalizedTitle` /
- *   `LocalizedBody`.
+ * Every object in the contract is **closed** (`additionalProperties: false`):
+ * the document root, `ContentLicense`, every `Link` variant, `PublicVisibility`,
+ * `ActivitySettings`, and — reversing the pre-1.0 hybrid strategy — every
+ * content entity (`Profile`, `Career`, `Project`, `Skill`, `Education`, …)
+ * plus `Settings`, `Meta`, and `MetaPrivacy`. An undeclared property (a
+ * misspelled `tittle`) is therefore a validation error rather than silently
+ * dropped data. The only intentionally open shapes are the locale-keyed maps
+ * `LocalizedTitle` / `LocalizedBody`, whose keys are arbitrary BCP-47 tags
+ * constrained by `propertyNames` with the value schema bounding each entry.
  *
- * The public TypeScript surface intentionally omits an `[key: string]: unknown`
- * index signature on the open containers. Declared properties stay accurately
- * typed regardless of the choice — what such a signature would change is
- * access to *undeclared* keys: it would let consumers spell arbitrary property
- * names without an error and force `unknown` narrowing for those reads, and it
- * would dilute IDE autocomplete on every dotted access. Keeping the types
- * focused on the canonical members preserves that ergonomics. Consumers that
- * need to attach custom fields should extend the relevant interface locally:
+ * This is the canonical "precise contract" stance: the schema fully defines the
+ * accepted shape, so the JSON-LD and MCP surfaces that AI agents and search
+ * engines read are trustworthy. The closure is deliberate and, for the 1.x
+ * line, treated as irreversible-by-default — a future minor can re-open
+ * extension space *non-breakingly* via `patternProperties: { "^x-": {} }` (the
+ * OpenAPI `x-` convention) should adopter demand appear, without ever loosening
+ * the contract retroactively.
  *
- *     interface MyProfile extends Profile {
- *       customField: string;
- *     }
+ * The public TypeScript surface therefore omits any `[key: string]: unknown`
+ * index signature: declared properties stay accurately typed and IDE
+ * autocomplete is not diluted. Consumers that need to carry their own data
+ * alongside a profile should keep it in a sibling structure rather than
+ * smuggling undeclared keys into the contract — schema 1.0.0 now rejects them.
  */
 /** BCP-47 language tag, e.g. 'en', 'ja', 'zh-Hant', 'pt-BR'. */
 type LocaleTag = string;
@@ -2917,6 +2987,26 @@ interface Settings {
     activity?: ActivitySettings;
     /** Per-section public visibility (added in 0.6.0). Absent = all sections visible. */
     publicVisibility?: PublicVisibility;
+    /** Opt-in contact form (added in 1.1.0). Absent = no contact form. */
+    contact?: ContactSettings;
+}
+/**
+ * Owner-curated configuration for the opt-in contact form (added in 1.1.0).
+ * Only public values live here: the Turnstile **site key** is safe to embed in
+ * the page. The Turnstile secret, the recipient address, and the From label are
+ * provisioned out of band as environment configuration and are never stored in
+ * `takuhon.json`. Adapters that support the form mount the widget and a POST
+ * endpoint when {@link enabled} is true; adapters that do not simply ignore it.
+ */
+interface ContactSettings {
+    /** Master switch; no contact form is mounted when false (the default). */
+    enabled?: boolean;
+    /** Public Cloudflare Turnstile site key, safe to embed; required to mount the widget. */
+    turnstileSiteKey?: string;
+    /** Override the POST endpoint the widget submits to. Defaults to `/api/contact` (same origin). */
+    endpoint?: string;
+    /** Subject prefix for the delivered email, e.g. `"[example.com contact]"`. */
+    subjectPrefix?: string;
 }
 /**
  * Per-section public/private visibility (added in 0.6.0).
@@ -3322,7 +3412,7 @@ interface LocalizedTakuhon {
  * versions whose JSON Schema this package literally bundles, not the full
  * support window seen by end users.
  */
-declare const SUPPORTED_SCHEMA_VERSIONS: readonly ["0.1.0", "0.2.0", "0.3.0", "0.4.0", "0.5.0", "0.6.0", "0.7.0"];
+declare const SUPPORTED_SCHEMA_VERSIONS: readonly ["0.1.0", "0.2.0", "0.3.0", "0.4.0", "0.5.0", "0.6.0", "0.7.0", "1.0.0", "1.1.0"];
 /**
  * A single validation failure.
  *
@@ -4452,6 +4542,6 @@ declare function stripImageMetadata(bytes: Uint8Array, mime: AcceptedImageMime):
  * A takuhon profile document's `schemaVersion` field must be migrate-compatible
  * with this version. See operational-lifecycle docs for the migration policy.
  */
-declare const SCHEMA_VERSION = "0.7.0";
+declare const SCHEMA_VERSION = "1.1.0";
 
 export { ACCEPTED_IMAGE_MIME_TYPES, type AcceptedImageMime, type ActivitySettings, type ActivitySnapshot, type ActivityStorage, type Address, type AssetOptions, type AssetRecord, type Avatar, type Career, type Certification, type CodingTime, ConflictError, type Contact, type ContentLicense, type ContentLicenseAttribution, type ContributionCalendar, type ContributionDay, type Course, type CvDocument, type CvHeader, type CvSection, type CvSectionKind, DARK_PALETTE, type Education, type ExportOptions, type ExportedTakuhon, type GravatarOptions, type Honor, IMAGE_EXTENSIONS, type ImageInfo, ImportError, type Iso3166Alpha2, type IsoDateTime, LIGHT_PALETTE, type Language, type LanguageBreakdown, type LanguageProficiency, type Link, type LinkBuiltin, type LinkCustom, type LinkType, type LocaleTag, type LocalizedAddress, type LocalizedAvatar, type LocalizedBody, type LocalizedCareer, type LocalizedCertification, type LocalizedCourse, type LocalizedEducation, type LocalizedHonor, type LocalizedLanguage, type LocalizedLink, type LocalizedLinkBuiltin, type LocalizedLinkCustom, type LocalizedMembership, type LocalizedPatent, type LocalizedProfile, type LocalizedProject, type LocalizedPublication, type LocalizedRecommendation, type LocalizedRecommendationAuthor, type LocalizedTakuhon, type LocalizedTestScore, type LocalizedTitle, type LocalizedVolunteering, MAX_IMAGE_BYTES, MAX_IMAGE_DIMENSION, MAX_IMAGE_FRAMES, MCP_PROFILE_SECTIONS, MCP_RESOURCES, MCP_TOOLS, type McpInputSchema, type McpProfileSection, McpRequestError, type McpResourceDefinition, type McpResourceResult, type McpToolDefinition, type McpToolResult, type Membership, type Meta, type MetaPrivacy, type Migration, MigrationError, type NormalizedTakuhon, NotFoundError, type Palette, type Patent, type PatentStatus, type Profile, type Project, type PublicVisibility, type Publication, RANK_FULL_CODING_HOURS, RANK_FULL_CONTRIBUTIONS, RANK_TIER_THRESHOLDS, type RankInput, type RankTier, type RankTierLabel, type Recommendation, type RecommendationAuthor, type RenderActivitySvgOptions, SCHEMA_VERSION, SUPPORTED_SCHEMA_VERSIONS, type Schema, type Settings, type Skill, type Slug, StorageError, type Takuhon, type TakuhonAssetStorage, type TakuhonStorage, type TestScore, type ValidationError, type ValidationResult, type Volunteering, type YearMonth, applyPublicPrivacyFilter, computeLanguagePercentages, deriveCv, deriveRankTier, detectImageMime, executeMcpTool, exportTakuhon, formatCodingTime, formatDate, generateJsonLd, generatePersonJsonLd, generateProfilePageJsonLd, getPresentLabel, gravatarUrl, importTakuhon, isActivitySnapshot, migrateTakuhon, migrations, normalize, readImageInfo, readMcpResource, renderActivitySvg, resolveLocale, schema, stripImageMetadata, validate };