@takuhon/core 1.0.0 → 1.3.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@takuhon/core",
-  "version": "1.0.0",
+  "version": "1.3.0",
   "description": "JSON Schema, validation, normalization, locale resolution, and JSON-LD generation for takuhon",
   "license": "Apache-2.0",
   "author": "Takuhon contributors",

package/takuhon.schema.json

@@ -1,6 +1,6 @@
 {
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "$id": "https://takuhon.example/schemas/1.0.0/takuhon.schema.json",
+  "$id": "https://takuhon.example/schemas/1.3.0/takuhon.schema.json",
   "title": "Takuhon Profile",
   "description": "Portable profile data format consumed by @takuhon/core. The canonical contract for profile content authored as takuhon.json.",
   "type": "object",
@@ -312,6 +312,23 @@
         "order": { "type": "integer", "minimum": 0 }
       }
     },
+    "SkillCategory": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["id", "label"],
+      "properties": {
+        "id": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 64,
+          "description": "Matches the `category` value on the skills that belong to this group."
+        },
+        "label": {
+          "$ref": "#/$defs/LocalizedTitle",
+          "description": "Localized display heading for the group."
+        }
+      }
+    },
     "Contact": {
       "type": "object",
       "additionalProperties": false,
@@ -362,7 +379,104 @@
           "description": "Opt-in flag for first-party analytics. Default is false to keep takuhon privacy-respecting by default."
         },
         "activity": { "$ref": "#/$defs/ActivitySettings" },
-        "publicVisibility": { "$ref": "#/$defs/PublicVisibility" }
+        "publicVisibility": { "$ref": "#/$defs/PublicVisibility" },
+        "contact": { "$ref": "#/$defs/ContactSettings" },
+        "appearance": { "$ref": "#/$defs/AppearanceSettings" },
+        "skillCategories": {
+          "type": "array",
+          "maxItems": 50,
+          "items": { "$ref": "#/$defs/SkillCategory" },
+          "description": "Ordered skill-category display groups (added in 1.3.0). When present, the rendered profile groups skills by their `category` under these localized headings, in array order; absent = the flat skill list. A skill whose `category` is not listed here (or which has none) renders in a trailing group so nothing is dropped."
+        }
+      }
+    },
+    "AppearanceSettings": {
+      "type": "object",
+      "additionalProperties": false,
+      "description": "Opt-in design tokens for the rendered profile (added in 1.2.0). A declarative re-skin seam: owners override the standard renderer's built-in color and font defaults. This is a token map only, not arbitrary CSS — every value is length- and pattern-constrained so it cannot break out of the inline <style>. Overriding tokens re-skins the page but cannot re-layout it (spacing/radius/type-scale are intentionally not exposed). Absent = the built-in defaults are used unchanged.",
+      "properties": {
+        "fontFamily": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 256,
+          "pattern": "^[A-Za-z0-9\\s,'\"._-]+$",
+          "description": "CSS font-family stack for the page body, e.g. \"Inter, system-ui, sans-serif\". Quotes and commas are allowed; CSS-structural characters (; { } < >) are not."
+        },
+        "colors": {
+          "$ref": "#/$defs/AppearanceColors",
+          "description": "Light-mode (:root) color overrides."
+        },
+        "colorsDark": {
+          "$ref": "#/$defs/AppearanceColors",
+          "description": "Dark-mode (prefers-color-scheme: dark) color overrides. Note: until the standard renderer ships a default dark palette, only the keys set here change in dark mode."
+        }
+      }
+    },
+    "AppearanceColors": {
+      "type": "object",
+      "additionalProperties": false,
+      "description": "A set of overridable color tokens. Each value is a CSS color (hex, rgb()/rgba(), hsl()/hsla(), or a named color); CSS-structural characters (; { } < > \" ' \\) are disallowed so a value cannot escape the inline <style>.",
+      "properties": {
+        "bg": { "$ref": "#/$defs/CssColor", "description": "Page background." },
+        "surface": {
+          "$ref": "#/$defs/CssColor",
+          "description": "Raised surfaces such as skill/tag chips."
+        },
+        "text": { "$ref": "#/$defs/CssColor", "description": "Primary body text." },
+        "textMuted": {
+          "$ref": "#/$defs/CssColor",
+          "description": "Secondary/muted text (taglines, meta, captions)."
+        },
+        "border": { "$ref": "#/$defs/CssColor", "description": "Hairline borders and rules." },
+        "accent": {
+          "$ref": "#/$defs/CssColor",
+          "description": "Accent color for emphasis and focus affordances."
+        },
+        "primary": {
+          "$ref": "#/$defs/CssColor",
+          "description": "Primary interactive color, e.g. links."
+        },
+        "primaryContrast": {
+          "$ref": "#/$defs/CssColor",
+          "description": "Foreground color used on top of the primary color."
+        }
+      }
+    },
+    "CssColor": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 64,
+      "pattern": "^(?:#[0-9A-Fa-f]{3,8}|[A-Za-z]+|(?:rgb|rgba|hsl|hsla|hwb|lab|lch|oklab|oklch|color)\\([A-Za-z0-9.,%/\\s-]*\\))$",
+      "description": "A CSS color value, restricted to a safe allowlist: a hex color (#rgb/#rgba/#rrggbb/#rrggbbaa), a bare keyword (named colors, currentColor, transparent), or a color function (rgb/rgba/hsl/hsla/hwb/lab/lch/oklab/oklch/color). url(), image-set(), var(), and other fetch- or reference-bearing functions are intentionally excluded so a value can never trigger an external request or escape the inline <style>."
+    },
+    "ContactSettings": {
+      "type": "object",
+      "additionalProperties": false,
+      "description": "Opt-in contact form configuration (added in 1.1.0). Only public values live here; the Turnstile site key is safe to embed in the page. The Turnstile secret, the recipient address, and the From label are provisioned out of band as environment configuration and are never stored in takuhon.json. Adapters that support the form mount the widget and a POST endpoint when 'enabled' is true.",
+      "properties": {
+        "enabled": {
+          "type": "boolean",
+          "default": false,
+          "description": "Master switch. When false (the default), no contact form is mounted even if a site key is present."
+        },
+        "turnstileSiteKey": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 128,
+          "description": "Public Cloudflare Turnstile site key, safe to embed in the page. Without it the widget is not mounted."
+        },
+        "endpoint": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 2048,
+          "description": "Override the POST endpoint the widget submits to. Defaults to /api/contact on the same origin."
+        },
+        "subjectPrefix": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 128,
+          "description": "Subject prefix for the delivered email, e.g. '[example.com contact]'."
+        }
       }
     },
     "PublicVisibility": {