@aphexcms/cms-core 9.6.0 → 9.7.0

package/dist/lib/types/config.d.ts

@@ -11,6 +11,7 @@ import type { Logger } from '../utils/logger.js';
 import type { CMSPlugin } from '../plugins/types.js';
 import type { Auth } from './auth.js';
 import type { PreviewPerspective } from '../preview/perspective.js';
+import type { JobHandlerMap } from '../jobs/types.js';
 export type { GraphQLConfig };
 export interface CMSConfig {
     schemaTypes: SchemaType[];
@@ -77,6 +78,48 @@ export interface CMSConfig {
     versioning?: {
         maxVersions?: number;
     };
+    /**
+     * Background job execution (the DB-backed job queue). Jobs are scheduled via the
+     * database adapter (`scheduleJob`) and driven by `runDueJobs`, which the protected
+     * worker endpoint (`POST /api/internal/workers/run`) and any self-hosted worker loop
+     * both call. Events and scheduling work without this; only *executing* jobs needs it.
+     */
+    jobs?: {
+        /**
+         * Map of job `type` → handler. A claimed job whose type has no handler is
+         * dead-lettered (an unknown type can never become runnable).
+         */
+        handlers?: JobHandlerMap;
+        /**
+         * Shared secret authorizing `POST /api/internal/workers/run`
+         * (`Authorization: Bearer <secret>`). Machine-to-machine — platform cron or a
+         * self-hosted worker loop, NOT the user capability system. When unset the endpoint
+         * is disabled (404), so it's never an unauthenticated surface by default; jobs can
+         * still be scheduled, they just won't run until a secret (and a driver) exist.
+         */
+        workerSecret?: string;
+        /** Max jobs claimed per worker run. Default 10. */
+        batchSize?: number;
+        /** Lease duration (ms) per claimed job before it's reclaimable. Default 30000. */
+        leaseMs?: number;
+        /**
+         * Max outbox rows the relay drains per worker run (events fanned out to consumer
+         * delivery jobs). Runs at the top of the same tick as job execution. Default 100 —
+         * fan-out is cheap (a few inserts), so it can clear more per pass than it executes.
+         */
+        relayBatchSize?: number;
+        /**
+         * Run an in-process job loop inside the app itself — no separate worker process, no
+         * `workerSecret`, no cron. It calls `runJobsBatch` directly on `embeddedIntervalMs`, so
+         * scheduled publishes and event consumers "just work" the moment the app is running. Ideal
+         * for local dev and single-instance self-hosting; for horizontally-scaled prod prefer the
+         * dedicated worker loop / platform cron so N app replicas don't each run a loop. Ticks never
+         * overlap (a slow tick is skipped, not stacked). Default off.
+         */
+        embedded?: boolean;
+        /** Interval (ms) between embedded loop ticks when `embedded` is on. Default 3000. */
+        embeddedIntervalMs?: number;
+    };
     /**
      * Live preview configuration.
      * - `stega`: Enable stega encoding in preview data pushes so field overlays work

package/dist/lib/types/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../../src/lib/types/config.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AACjC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAC5C,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AACnC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAEjE,YAAY,EAAE,aAAa,EAAE,CAAC;AAE9B,MAAM,WAAW,SAAS;IACzB,WAAW,EAAE,UAAU,EAAE,CAAC;IAC1B,QAAQ,EAAE,eAAe,CAAC;IAC1B;;;;;OAKG;IACH,OAAO,CAAC,EAAE,SAAS,EAAE,CAAC;IACtB,OAAO,CAAC,EAAE,cAAc,GAAG,IAAI,CAAC;IAChC,KAAK,CAAC,EAAE,YAAY,GAAG,IAAI,CAAC;IAC5B,aAAa,CAAC,EAAE;QACf,QAAQ,CAAC,EAAE;YACV,KAAK,CAAC,EAAE,MAAM,CAAC;YACf,IAAI,CAAC,EAAE,MAAM,CAAC;YACd,OAAO,CAAC,EAAE,MAAM,CAAC;SACjB,CAAC;QACF,KAAK,CAAC,EAAE;YACP,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAChC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;SAC/B,CAAC;KACF,CAAC;IACF;;;;;OAKG;IACH,OAAO,CAAC,EAAE,OAAO,GAAG,aAAa,CAAC;IAClC;;;OAGG;IACH,QAAQ,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,MAAM,CAAC;IACxD;;;;;;;;;;;OAWG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE;QACN,QAAQ,EAAE,YAAY,CAAC;QACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;KAClB,CAAC;IACF;;;;OAIG;IACH,KAAK,CAAC,EAAE,YAAY,GAAG,IAAI,CAAC;IAC5B;;;OAGG;IACH,UAAU,CAAC,EAAE;QACZ,WAAW,CAAC,EAAE,MAAM,CAAC;KACrB,CAAC;IACF;;;;;;;;;;OAUG;IACH,OAAO,CAAC,EAAE;QACT,KAAK,CAAC,EAAE,OAAO,CAAC;QAChB,kBAAkB,CAAC,EAAE,CAAC,IAAI,EAAE;YAAE,IAAI,CAAC,EAAE,IAAI,CAAC;YAAC,GAAG,EAAE,GAAG,CAAA;SAAE,KAAK,kBAAkB,CAAC;KAC7E,CAAC;IACF,QAAQ,CAAC,EAAE;QACV;;;;WAIG;QACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;QAC5B;;;;;;WAMG;QACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;KAC7B,CAAC;IACF;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACH,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC;CACpC"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../../src/lib/types/config.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AACjC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAC5C,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AACnC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAEnD,YAAY,EAAE,aAAa,EAAE,CAAC;AAE9B,MAAM,WAAW,SAAS;IACzB,WAAW,EAAE,UAAU,EAAE,CAAC;IAC1B,QAAQ,EAAE,eAAe,CAAC;IAC1B;;;;;OAKG;IACH,OAAO,CAAC,EAAE,SAAS,EAAE,CAAC;IACtB,OAAO,CAAC,EAAE,cAAc,GAAG,IAAI,CAAC;IAChC,KAAK,CAAC,EAAE,YAAY,GAAG,IAAI,CAAC;IAC5B,aAAa,CAAC,EAAE;QACf,QAAQ,CAAC,EAAE;YACV,KAAK,CAAC,EAAE,MAAM,CAAC;YACf,IAAI,CAAC,EAAE,MAAM,CAAC;YACd,OAAO,CAAC,EAAE,MAAM,CAAC;SACjB,CAAC;QACF,KAAK,CAAC,EAAE;YACP,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAChC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;SAC/B,CAAC;KACF,CAAC;IACF;;;;;OAKG;IACH,OAAO,CAAC,EAAE,OAAO,GAAG,aAAa,CAAC;IAClC;;;OAGG;IACH,QAAQ,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,MAAM,CAAC;IACxD;;;;;;;;;;;OAWG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE;QACN,QAAQ,EAAE,YAAY,CAAC;QACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;KAClB,CAAC;IACF;;;;OAIG;IACH,KAAK,CAAC,EAAE,YAAY,GAAG,IAAI,CAAC;IAC5B;;;OAGG;IACH,UAAU,CAAC,EAAE;QACZ,WAAW,CAAC,EAAE,MAAM,CAAC;KACrB,CAAC;IACF;;;;;OAKG;IACH,IAAI,CAAC,EAAE;QACN;;;WAGG;QACH,QAAQ,CAAC,EAAE,aAAa,CAAC;QACzB;;;;;;WAMG;QACH,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,mDAAmD;QACnD,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,kFAAkF;QAClF,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB;;;;WAIG;QACH,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB;;;;;;;WAOG;QACH,QAAQ,CAAC,EAAE,OAAO,CAAC;QACnB,qFAAqF;QACrF,kBAAkB,CAAC,EAAE,MAAM,CAAC;KAC5B,CAAC;IACF;;;;;;;;;;OAUG;IACH,OAAO,CAAC,EAAE;QACT,KAAK,CAAC,EAAE,OAAO,CAAC;QAChB,kBAAkB,CAAC,EAAE,CAAC,IAAI,EAAE;YAAE,IAAI,CAAC,EAAE,IAAI,CAAC;YAAC,GAAG,EAAE,GAAG,CAAA;SAAE,KAAK,kBAAkB,CAAC;KAC7E,CAAC;IACF,QAAQ,CAAC,EAAE;QACV;;;;WAIG;QACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;QAC5B;;;;;;WAMG;QACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;KAC7B,CAAC;IACF;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACH,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC;CACpC"}

package/dist/lib/types/events.d.ts

@@ -0,0 +1,134 @@
+/**
+ * A durable business fact. Append-only: written once (typically inside the same
+ * transaction as the state change that caused it) and never mutated. Payload carries
+ * identifiers + intentional metadata only — never secrets or full document copies.
+ */
+export interface DomainEvent {
+    id: string;
+    organizationId: string;
+    type: string;
+    payload: Record<string, unknown>;
+    correlationId: string | null;
+    causationId: string | null;
+    createdBy: string | null;
+    createdAt: Date;
+}
+/** Input to append a domain event. */
+export interface AppendEventInput {
+    organizationId: string;
+    type: string;
+    payload?: Record<string, unknown>;
+    correlationId?: string | null;
+    causationId?: string | null;
+    createdBy?: string | null;
+}
+export type JobStatus = 'pending' | 'leased' | 'completed' | 'failed' | 'cancelled';
+/** A command to run now or later. Lifecycle: pending → leased → completed/failed/cancelled. */
+export interface Job {
+    id: string;
+    organizationId: string;
+    type: string;
+    payload: Record<string, unknown>;
+    status: JobStatus;
+    runAt: Date;
+    attempts: number;
+    maxAttempts: number;
+    leaseOwner: string | null;
+    leaseExpiresAt: Date | null;
+    lastError: string | null;
+    idempotencyKey: string | null;
+    correlationId: string | null;
+    causationId: string | null;
+    createdBy: string | null;
+    createdAt: Date;
+    updatedAt: Date;
+    completedAt: Date | null;
+}
+/** Input to schedule a job. `idempotencyKey` (unique per org) makes enqueue safe to retry. */
+export interface ScheduleJobInput {
+    organizationId: string;
+    type: string;
+    payload?: Record<string, unknown>;
+    runAt?: Date;
+    maxAttempts?: number;
+    idempotencyKey?: string | null;
+    correlationId?: string | null;
+    causationId?: string | null;
+    createdBy?: string | null;
+}
+/**
+ * Options for claiming due jobs with a lease. Omit `organizationId` to claim across all
+ * orgs (worker context — runs with override access); provide it to scope to one tenant.
+ */
+export interface ClaimJobsOptions {
+    organizationId?: string;
+    limit: number;
+    workerId: string;
+    leaseMs: number;
+    now?: Date;
+}
+/**
+ * An outbox worklist row — the relay's unit of work. Written in the SAME transaction as
+ * the `domain_events` row it mirrors (so it can never exist without its event, nor be
+ * missed if the event committed), then drained by the relay: for each subscribed consumer
+ * it enqueues one delivery job, then stamps `processedAt`.
+ *
+ * Kept SEPARATE from `cms_domain_events` on purpose. The event log is an immutable ledger;
+ * this is a mutable, prunable worklist. And the relay claims rows by `processedAt IS NULL`
+ * (status), never by log position — so an event whose transaction commits late (with an
+ * early timestamp) is still picked up, which a cursor-scan over the append-only log would
+ * silently skip. `eventType`/`payload` are denormalized here so the relay fans out from a
+ * single-table read with no join back to the event log.
+ */
+export interface OutboxRow {
+    id: string;
+    organizationId: string;
+    /** The `cms_domain_events` row this mirrors (FK; the canonical, immutable copy). */
+    eventId: string;
+    eventType: string;
+    payload: Record<string, unknown>;
+    correlationId: string | null;
+    causationId: string | null;
+    createdBy: string | null;
+    createdAt: Date;
+    /** Null until the relay has fanned this event out to every subscriber. */
+    processedAt: Date | null;
+}
+/**
+ * Options for reading the relay's pending work. Omit `organizationId` to read across all
+ * orgs (worker context — runs with override access), mirroring `claimDueJobs`. No lease:
+ * the relay's only side effect is idempotent job enqueue (keyed per event×consumer), so two
+ * workers processing the same row can't double-deliver — the job's unique idempotency key
+ * absorbs the duplicate. Oldest-first, so events relay in roughly causal order.
+ */
+export interface ListUnprocessedOutboxOptions {
+    organizationId?: string;
+    /** Max rows returned per relay pass. */
+    limit: number;
+}
+/** A page of rows plus the unfiltered total, for offset pagination in the admin history views. */
+export interface Page<T> {
+    items: T[];
+    total: number;
+    limit: number;
+    offset: number;
+}
+/** Query for the read-only event history. Newest first. */
+export interface ListEventsOptions {
+    organizationId: string;
+    /** Filter by exact event type (e.g. `document.published`). */
+    type?: string;
+    limit?: number;
+    offset?: number;
+}
+/** Query for the read-only job history. Newest first. */
+export interface ListJobsOptions {
+    organizationId: string;
+    /** Filter by one status or several (e.g. only `failed`). */
+    status?: JobStatus | JobStatus[];
+    /** Filter by exact job type. */
+    type?: string;
+    limit?: number;
+    offset?: number;
+}
+//# sourceMappingURL=events.d.ts.map

package/dist/lib/types/events.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.d.ts","sourceRoot":"","sources":["../../../src/lib/types/events.ts"],"names":[],"mappings":"AAGA;;;;GAIG;AACH,MAAM,WAAW,WAAW;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,IAAI,CAAC;CAChB;AAED,sCAAsC;AACtC,MAAM,WAAW,gBAAgB;IAChC,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,MAAM,MAAM,SAAS,GAAG,SAAS,GAAG,QAAQ,GAAG,WAAW,GAAG,QAAQ,GAAG,WAAW,CAAC;AAEpF,+FAA+F;AAC/F,MAAM,WAAW,GAAG;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,MAAM,EAAE,SAAS,CAAC;IAClB,KAAK,EAAE,IAAI,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,cAAc,EAAE,IAAI,GAAG,IAAI,CAAC;IAC5B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,IAAI,CAAC;IAChB,WAAW,EAAE,IAAI,GAAG,IAAI,CAAC;CACzB;AAED,8FAA8F;AAC9F,MAAM,WAAW,gBAAgB;IAChC,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,KAAK,CAAC,EAAE,IAAI,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAChC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,IAAI,CAAC;CACX;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,SAAS;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,cAAc,EAAE,MAAM,CAAC;IACvB,oFAAoF;IACpF,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,IAAI,CAAC;IAChB,0EAA0E;IAC1E,WAAW,EAAE,IAAI,GAAG,IAAI,CAAC;CACzB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,4BAA4B;IAC5C,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,wCAAwC;IACxC,KAAK,EAAE,MAAM,CAAC;CACd;AAED,kGAAkG;AAClG,MAAM,WAAW,IAAI,CAAC,CAAC;IACtB,KAAK,EAAE,CAAC,EAAE,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;CACf;AAED,2DAA2D;AAC3D,MAAM,WAAW,iBAAiB;IACjC,cAAc,EAAE,MAAM,CAAC;IACvB,8DAA8D;IAC9D,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,yDAAyD;AACzD,MAAM,WAAW,eAAe;IAC/B,cAAc,EAAE,MAAM,CAAC;IACvB,4DAA4D;IAC5D,MAAM,CAAC,EAAE,SAAS,GAAG,SAAS,EAAE,CAAC;IACjC,gCAAgC;IAChC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CAChB"}

package/dist/lib/types/events.js

@@ -0,0 +1,4 @@
+// Universal event + job types — dialect-agnostic shapes the adapters map their rows to.
+// These mirror the `cms_domain_events` and `cms_jobs` tables but never depend on Drizzle.
+export {};
+//# sourceMappingURL=events.js.map

package/dist/lib/types/events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.js","sourceRoot":"","sources":["../../../src/lib/types/events.ts"],"names":[],"mappings":"AAAA,wFAAwF;AACxF,0FAA0F"}

package/dist/lib/types/index.d.ts

@@ -10,4 +10,5 @@ export * from './capabilities.js';
 export * from './filters.js';
 export * from './instance.js';
 export * from './version.js';
+export * from './events.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/lib/types/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/lib/types/index.ts"],"names":[],"mappings":"AAAA,cAAc,SAAS,CAAC;AACxB,cAAc,QAAQ,CAAC;AACvB,cAAc,YAAY,CAAC;AAC3B,cAAc,WAAW,CAAC;AAC1B,cAAc,UAAU,CAAC;AACzB,cAAc,QAAQ,CAAC;AACvB,cAAc,WAAW,CAAC;AAC1B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,WAAW,CAAC;AAC1B,cAAc,YAAY,CAAC;AAC3B,cAAc,WAAW,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/lib/types/index.ts"],"names":[],"mappings":"AAAA,cAAc,SAAS,CAAC;AACxB,cAAc,QAAQ,CAAC;AACvB,cAAc,YAAY,CAAC;AAC3B,cAAc,WAAW,CAAC;AAC1B,cAAc,UAAU,CAAC;AACzB,cAAc,QAAQ,CAAC;AACvB,cAAc,WAAW,CAAC;AAC1B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,WAAW,CAAC;AAC1B,cAAc,YAAY,CAAC;AAC3B,cAAc,WAAW,CAAC;AAC1B,cAAc,UAAU,CAAC"}

package/dist/lib/types/index.js

@@ -10,4 +10,5 @@ export * from './capabilities.js';
 export * from './filters.js';
 export * from './instance.js';
 export * from './version.js';
+export * from './events.js';
 //# sourceMappingURL=index.js.map

package/dist/lib/types/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/lib/types/index.ts"],"names":[],"mappings":"AAAA,cAAc,SAAS,CAAC;AACxB,cAAc,QAAQ,CAAC;AACvB,cAAc,YAAY,CAAC;AAC3B,cAAc,WAAW,CAAC;AAC1B,cAAc,UAAU,CAAC;AACzB,cAAc,QAAQ,CAAC;AACvB,cAAc,WAAW,CAAC;AAC1B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,WAAW,CAAC;AAC1B,cAAc,YAAY,CAAC;AAC3B,cAAc,WAAW,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/lib/types/index.ts"],"names":[],"mappings":"AAAA,cAAc,SAAS,CAAC;AACxB,cAAc,QAAQ,CAAC;AACvB,cAAc,YAAY,CAAC;AAC3B,cAAc,WAAW,CAAC;AAC1B,cAAc,UAAU,CAAC;AACzB,cAAc,QAAQ,CAAC;AACvB,cAAc,WAAW,CAAC;AAC1B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,WAAW,CAAC;AAC1B,cAAc,YAAY,CAAC;AAC3B,cAAc,WAAW,CAAC;AAC1B,cAAc,UAAU,CAAC"}

package/dist/lib/utils/index.d.ts

@@ -1,4 +1,4 @@
-export { cmsLogger, setLogLevel, type LogLevel } from './logger.js';
+export { cmsLogger, setLogLevel, type LogLevel, type Logger } from './logger.js';
 export * from '../schema-utils/index.js';
 export * from '../field-validation/utils.js';
 export * from './content-hash.js';

package/dist/lib/utils/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/lib/utils/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,KAAK,QAAQ,EAAE,MAAM,UAAU,CAAC;AAGjE,cAAc,uBAAuB,CAAC;AAGtC,cAAc,2BAA2B,CAAC;AAG1C,cAAc,gBAAgB,CAAC;AAC/B,cAAc,QAAQ,CAAC;AACvB,cAAc,WAAW,CAAC;AAC1B,cAAc,aAAa,CAAC;AAC5B,cAAc,yBAAyB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/lib/utils/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,KAAK,QAAQ,EAAE,KAAK,MAAM,EAAE,MAAM,UAAU,CAAC;AAG9E,cAAc,uBAAuB,CAAC;AAGtC,cAAc,2BAA2B,CAAC;AAG1C,cAAc,gBAAgB,CAAC;AAC/B,cAAc,QAAQ,CAAC;AACvB,cAAc,WAAW,CAAC;AAC1B,cAAc,aAAa,CAAC;AAC5B,cAAc,yBAAyB,CAAC"}

package/dist/lib/utils/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/lib/utils/index.ts"],"names":[],"mappings":"AAAA,sBAAsB;AAEtB,SAAS;AACT,OAAO,EAAE,SAAS,EAAE,WAAW,EAAiB,MAAM,UAAU,CAAC;AAEjE,mBAAmB;AACnB,cAAc,uBAAuB,CAAC;AAEtC,uBAAuB;AACvB,cAAc,2BAA2B,CAAC;AAE1C,kBAAkB;AAClB,cAAc,gBAAgB,CAAC;AAC/B,cAAc,QAAQ,CAAC;AACvB,cAAc,WAAW,CAAC;AAC1B,cAAc,aAAa,CAAC;AAC5B,cAAc,yBAAyB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/lib/utils/index.ts"],"names":[],"mappings":"AAAA,sBAAsB;AAEtB,SAAS;AACT,OAAO,EAAE,SAAS,EAAE,WAAW,EAA8B,MAAM,UAAU,CAAC;AAE9E,mBAAmB;AACnB,cAAc,uBAAuB,CAAC;AAEtC,uBAAuB;AACvB,cAAc,2BAA2B,CAAC;AAE1C,kBAAkB;AAClB,cAAc,gBAAgB,CAAC;AAC/B,cAAc,QAAQ,CAAC;AACvB,cAAc,WAAW,CAAC;AAC1B,cAAc,aAAa,CAAC;AAC5B,cAAc,yBAAyB,CAAC"}

package/dist/local-api/collection-api.d.ts

@@ -9,6 +9,7 @@ import type { LocalAPIContext } from './types.js';
 import type { SchemaType } from '../types/schemas.js';
 import { PermissionChecker } from './permissions.js';
 import { type DocumentValidationResult } from '../field-validation/utils.js';
+import type { Job } from '../types/events.js';
 /**
  * Result from create/update operations that includes validation
  */
@@ -182,6 +183,13 @@ export declare class CollectionAPI<T = Document> {
      * );
      * ```
      */
+    /**
+     * Publish without a version snapshot — the branch taken when there's no version service or
+     * the caller passed `skipVersioning`. Still emits `document.published` (and its outbox row)
+     * atomically with the publish, so the domain fact fires on EVERY publish path, not only the
+     * versioned one. The versioned branch emits the same event from `versionService.publishTx`.
+     */
+    private publishWithoutVersion;
     publish(context: LocalAPIContext, id: string): Promise<T | null>;
     /**
      * Unpublish a document
@@ -195,5 +203,39 @@ export declare class CollectionAPI<T = Document> {
      * ```
      */
     unpublish(context: LocalAPIContext, id: string): Promise<T | null>;
+    /**
+     * Pending scheduled publish/unpublish jobs for one document. Scheduled jobs are few
+     * and `pending` is a small set, so filtering the org's pending jobs by documentId in
+     * memory is cheap and avoids a dialect-specific JSON query on the hot editor path.
+     */
+    private pendingScheduledFor;
+    /**
+     * Cancel any pending schedule of ONE direction for a document — used when a manual
+     * publish/unpublish supersedes a schedule of the same kind. Only same-direction is
+     * cancelled on purpose: "publish now, auto-unpublish Friday" and "unpublish now,
+     * republish Monday" are legitimate future transitions, so a manual publish leaves a
+     * pending unpublish (and vice versa) alone. Without this, the queued job would fire at
+     * `runAt` and re-run the same transition — re-emitting `document.published`/`unpublished`
+     * and firing every consumer a second time (duplicate notifications, webhooks, cache busts).
+     */
+    private cancelPendingScheduleOfType;
+    /**
+     * Schedule a publish for a future `runAt`. Enqueues a `document.publish` job; the
+     * worker runs `publish()` at that time (re-validating, guarding references, emitting
+     * `document.published`). The permission check happens NOW — you must be able to publish
+     * to schedule one — so an unauthorized caller can't queue work to run later as the system.
+     * Actual publish-time validation still runs then, so a doc that goes invalid before
+     * `runAt` simply fails/retries rather than publishing bad content.
+     *
+     * Replace semantics: any existing pending schedule for this document is cancelled first,
+     * so a document has at most one pending schedule (rescheduling can't double-publish).
+     */
+    schedulePublish(context: LocalAPIContext, id: string, runAt: Date): Promise<Job>;
+    /** Schedule an unpublish for a future `runAt`. Permission-checked now; replaces any existing pending schedule. */
+    scheduleUnpublish(context: LocalAPIContext, id: string, runAt: Date): Promise<Job>;
+    /** Pending scheduled publish/unpublish jobs for a document (read-gated) — for the editor's schedule indicator. */
+    getScheduled(context: LocalAPIContext, id: string): Promise<Job[]>;
+    /** Cancel all pending scheduled publish/unpublish jobs for a document. Returns how many were cancelled. */
+    cancelScheduled(context: LocalAPIContext, id: string): Promise<number>;
 }
 //# sourceMappingURL=collection-api.d.ts.map

package/dist/local-api/collection-api.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"collection-api.d.ts","sourceRoot":"","sources":["../../src/lib/local-api/collection-api.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AACpD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AACxE,OAAO,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACnF,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAElD,OAAO,EAAwB,KAAK,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AAUhG;;GAEG;AACH,MAAM,WAAW,cAAc,CAAC,CAAC;IAChC,QAAQ,EAAE,CAAC,CAAC;IACZ,UAAU,EAAE,wBAAwB,CAAC;CACrC;AA6DD;;;;GAIG;AACH,qBAAa,uBAAwB,SAAQ,KAAK;gBACrC,OAAO,EAAE,MAAM;CAI3B;AAED;;;;;;GAMG;AACH,MAAM,MAAM,mBAAmB,CAAC,CAAC,GAAG,QAAQ,IAAI,IAAI,CACnD,aAAa,CAAC,CAAC,CAAC,EAChB,KAAK,GAAG,gBAAgB,GAAG,QAAQ,GAAG,SAAS,GAAG,WAAW,GAAG,QAAQ,CACxE,CAAC;AAEF;;;GAGG;AACH,qBAAa,aAAa,CAAC,CAAC,GAAG,QAAQ;IAErC,OAAO,CAAC,cAAc;IACtB,OAAO,CAAC,eAAe;IACvB,OAAO,CAAC,OAAO;IACf,OAAO,CAAC,WAAW;IACnB,OAAO,CAAC,aAAa,CAAC;IACtB,OAAO,CAAC,gBAAgB,CAAC;IACzB,OAAO,CAAC,cAAc,CAAC;IACvB,OAAO,CAAC,iBAAiB,CAAC;IAC1B,OAAO,CAAC,cAAc,CAAC;gBARf,cAAc,EAAE,MAAM,EACtB,eAAe,EAAE,eAAe,EAChC,OAAO,EAAE,UAAU,EACnB,WAAW,EAAE,iBAAiB,EAC9B,aAAa,CAAC,GAAE,aAAa,GAAG,IAAI,aAAA,EACpC,gBAAgB,CAAC,EAAE,gBAAgB,YAAA,EACnC,cAAc,CAAC,EAAE,cAAc,YAAA,EAC/B,iBAAiB,CAAC,EAAE,iBAAiB,YAAA,EACrC,cAAc,CAAC,EAAE,UAAU,EAAE,YAAA;IAMtC;;;;OAIG;YACW,cAAc;IAe5B;;OAEG;IACH,IAAI,MAAM,IAAI,UAAU,CAEvB;IAED;;;;;OAKG;IACH,cAAc,CAAC,OAAO,EAAE,eAAe,GAAG,MAAM,GAAG,SAAS;IAM5D;;;;OAIG;IACG,GAAG,CAAC,OAAO,EAAE,eAAe,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAalF;;;;;;;;;;;;;;;;;OAiBG;IACG,IAAI,CAAC,OAAO,EAAE,eAAe,EAAE,OAAO,GAAE,WAAW,CAAC,CAAC,CAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IA8E1F,OAAO,CAAC,uBAAuB;IAK/B,OAAO,CAAC,wBAAwB;IAKhC;;;;;;;;;;;OAWG;IACG,QAAQ,CACb,OAAO,EAAE,eAAe,EACxB,EAAE,EAAE,MAAM,EACV,OAAO,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,GAC/B,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC;IA4CpB;;;;;;;;;;OAUG;IACG,KAAK,CACV,OAAO,EAAE,eAAe,EACxB,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC,GAAG,KAAK,CAAA;KAAE,GACzC,OAAO,CAAC,MAAM,CAAC;IAWlB;;;;;;;;;;;;;;;;OAgBG;IACG,MAAM,CACX,OAAO,EAAE,eAAe,EACxB,IAAI,EAAE,IAAI,CAAC,CAAC,EAAE,IAAI,GAAG,OAAO,CAAC,EAC7B,OAAO,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,OAAO,CAAC;QAAC,cAAc,CAAC,EAAE,OAAO,CAAC;QAAC,EAAE,CAAC,EAAE,MAAM,CAAA;KAAE,GACpE,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;IAmH7B;;;;;;;;;;;;;;OAcG;IACG,MAAM,CACX,OAAO,EAAE,eAAe,EACxB,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,GAAG,OAAO,CAAC,CAAC,EACtC,OAAO,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,OAAO,CAAC;QAAC,cAAc,CAAC,EAAE,OAAO,CAAA;KAAE,GACvD,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;IA6GpC;;;;;;;;;;OAUG;IACG,MAAM,CAAC,OAAO,EAAE,eAAe,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IA6BpE;;;;;;;;;;OAUG;IACG,OAAO,CAAC,OAAO,EAAE,eAAe,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC;IAgEtE;;;;;;;;;;OAUG;IACG,SAAS,CAAC,OAAO,EAAE,eAAe,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC;CAoBxE"}
+{"version":3,"file":"collection-api.d.ts","sourceRoot":"","sources":["../../src/lib/local-api/collection-api.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AACpD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AACxE,OAAO,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACnF,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAElD,OAAO,EAAwB,KAAK,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AAIhG,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,iBAAiB,CAAC;AAS3C;;GAEG;AACH,MAAM,WAAW,cAAc,CAAC,CAAC;IAChC,QAAQ,EAAE,CAAC,CAAC;IACZ,UAAU,EAAE,wBAAwB,CAAC;CACrC;AA6DD;;;;GAIG;AACH,qBAAa,uBAAwB,SAAQ,KAAK;gBACrC,OAAO,EAAE,MAAM;CAI3B;AAED;;;;;;GAMG;AACH,MAAM,MAAM,mBAAmB,CAAC,CAAC,GAAG,QAAQ,IAAI,IAAI,CACnD,aAAa,CAAC,CAAC,CAAC,EAChB,KAAK,GAAG,gBAAgB,GAAG,QAAQ,GAAG,SAAS,GAAG,WAAW,GAAG,QAAQ,CACxE,CAAC;AAEF;;;GAGG;AACH,qBAAa,aAAa,CAAC,CAAC,GAAG,QAAQ;IAErC,OAAO,CAAC,cAAc;IACtB,OAAO,CAAC,eAAe;IACvB,OAAO,CAAC,OAAO;IACf,OAAO,CAAC,WAAW;IACnB,OAAO,CAAC,aAAa,CAAC;IACtB,OAAO,CAAC,gBAAgB,CAAC;IACzB,OAAO,CAAC,cAAc,CAAC;IACvB,OAAO,CAAC,iBAAiB,CAAC;IAC1B,OAAO,CAAC,cAAc,CAAC;gBARf,cAAc,EAAE,MAAM,EACtB,eAAe,EAAE,eAAe,EAChC,OAAO,EAAE,UAAU,EACnB,WAAW,EAAE,iBAAiB,EAC9B,aAAa,CAAC,GAAE,aAAa,GAAG,IAAI,aAAA,EACpC,gBAAgB,CAAC,EAAE,gBAAgB,YAAA,EACnC,cAAc,CAAC,EAAE,cAAc,YAAA,EAC/B,iBAAiB,CAAC,EAAE,iBAAiB,YAAA,EACrC,cAAc,CAAC,EAAE,UAAU,EAAE,YAAA;IAMtC;;;;OAIG;YACW,cAAc;IAe5B;;OAEG;IACH,IAAI,MAAM,IAAI,UAAU,CAEvB;IAED;;;;;OAKG;IACH,cAAc,CAAC,OAAO,EAAE,eAAe,GAAG,MAAM,GAAG,SAAS;IAM5D;;;;OAIG;IACG,GAAG,CAAC,OAAO,EAAE,eAAe,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAalF;;;;;;;;;;;;;;;;;OAiBG;IACG,IAAI,CAAC,OAAO,EAAE,eAAe,EAAE,OAAO,GAAE,WAAW,CAAC,CAAC,CAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IA8E1F,OAAO,CAAC,uBAAuB;IAK/B,OAAO,CAAC,wBAAwB;IAKhC;;;;;;;;;;;OAWG;IACG,QAAQ,CACb,OAAO,EAAE,eAAe,EACxB,EAAE,EAAE,MAAM,EACV,OAAO,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,GAC/B,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC;IA4CpB;;;;;;;;;;OAUG;IACG,KAAK,CACV,OAAO,EAAE,eAAe,EACxB,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC,GAAG,KAAK,CAAA;KAAE,GACzC,OAAO,CAAC,MAAM,CAAC;IAWlB;;;;;;;;;;;;;;;;OAgBG;IACG,MAAM,CACX,OAAO,EAAE,eAAe,EACxB,IAAI,EAAE,IAAI,CAAC,CAAC,EAAE,IAAI,GAAG,OAAO,CAAC,EAC7B,OAAO,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,OAAO,CAAC;QAAC,cAAc,CAAC,EAAE,OAAO,CAAC;QAAC,EAAE,CAAC,EAAE,MAAM,CAAA;KAAE,GACpE,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;IAwK7B;;;;;;;;;;;;;;OAcG;IACG,MAAM,CACX,OAAO,EAAE,eAAe,EACxB,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,GAAG,OAAO,CAAC,CAAC,EACtC,OAAO,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,OAAO,CAAC;QAAC,cAAc,CAAC,EAAE,OAAO,CAAA;KAAE,GACvD,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;IA6GpC;;;;;;;;;;OAUG;IACG,MAAM,CAAC,OAAO,EAAE,eAAe,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IA6BpE;;;;;;;;;;OAUG;IACH;;;;;OAKG;YACW,qBAAqB;IAW7B,OAAO,CAAC,OAAO,EAAE,eAAe,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC;IAsEtE;;;;;;;;;;OAUG;IACG,SAAS,CAAC,OAAO,EAAE,eAAe,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC;IA0BxE;;;;OAIG;YACW,mBAAmB;IAajC;;;;;;;;OAQG;YACW,2BAA2B;IAazC;;;;;;;;;;OAUG;IACG,eAAe,CAAC,OAAO,EAAE,eAAe,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC;IAgBtF,kHAAkH;IAC5G,iBAAiB,CAAC,OAAO,EAAE,eAAe,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC;IAgBxF,kHAAkH;IAC5G,YAAY,CAAC,OAAO,EAAE,eAAe,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAKxE,2GAA2G;IACrG,eAAe,CAAC,OAAO,EAAE,eAAe,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;CAU5E"}

package/dist/local-api/collection-api.js

@@ -5,6 +5,8 @@ import { singletonId } from '../schema-utils/singleton.js';
 import { validateDocumentData } from '../field-validation/utils.js';
 import { runDocumentHooks } from './hooks.js';
 import { collectReferenceIds } from '../utils/reference-walk.js';
+import { emitDocumentPublished } from '../events/emit.js';
+import { DOCUMENT_PUBLISH_JOB, DOCUMENT_UNPUBLISH_JOB } from '../jobs/document-jobs.js';
 import { hiddenReadFields, hiddenWriteFields, dropLockedWrites, stripHiddenFields } from '../field-access.js';
 const EMPTY_SET = new Set();
 /**
@@ -346,24 +348,45 @@ export class CollectionAPI {
                 throw new Error(`Cannot publish: validation errors - ${errorMessage}`);
             }
         }
-        // Create document with normalized data (dates in ISO format)
-        const document = await this.databaseAdapter.createDocument({
-            organizationId: context.organizationId,
-            type: this.collectionName,
-            draftData: validationResult.normalizedData,
-            createdBy: context.user?.id,
-            id: options?.id
-        });
-        await this.syncReferences(context.organizationId, document.id, validationResult.normalizedData);
-        // Create initial draft version
-        if (this.versionService && !options?.skipVersioning) {
-            await this.versionService.createVersion(this.databaseAdapter, context.organizationId, document.id, 'draft', validationResult.normalizedData, context.user?.id);
-        }
-        // Publish immediately if requested (validation already done above)
+        // versionService present unless the caller opted out of versioning; capturing it
+        // here narrows the type so the tx callbacks don't need non-null assertions.
+        const versionService = options?.skipVersioning ? undefined : this.versionService;
+        // Publish path: create + draft-version + publish + publish-version must commit
+        // together, or a crash between them leaves an inconsistent document (a draft that
+        // was meant to be published, or a published doc with no version row). Run all of
+        // it in one transaction. Validation already passed the block-check above, so we
+        // never enter the tx with invalid data.
         if (options?.publish) {
-            const published = this.versionService && !options?.skipVersioning
-                ? await this.versionService.publishWithVersion(this.databaseAdapter, context.organizationId, document.id)
-                : await this.databaseAdapter.publishDoc(context.organizationId, document.id);
+            const { document, published } = await this.databaseAdapter.withTransaction(async (tx) => {
+                const document = await tx.createDocument({
+                    organizationId: context.organizationId,
+                    type: this.collectionName,
+                    draftData: validationResult.normalizedData,
+                    createdBy: context.user?.id,
+                    id: options?.id
+                });
+                if (versionService) {
+                    await versionService.snapshotTx(tx, context.organizationId, document.id, 'draft', validationResult.normalizedData, context.user?.id);
+                }
+                // Either branch emits `document.published` in this same tx: the versioned path
+                // from publishTx, the non-versioned path via emitDocumentPublished here.
+                let published;
+                if (versionService) {
+                    published = await versionService.publishTx(tx, context.organizationId, document.id);
+                }
+                else {
+                    published = await tx.publishDoc(context.organizationId, document.id);
+                    if (published)
+                        await emitDocumentPublished(tx, context.organizationId, published);
+                }
+                return { document, published };
+            });
+            // Post-commit side effects: ref index is best-effort, retention is one pass
+            // covering both the draft and publish snapshots written inside the tx.
+            await this.syncReferences(context.organizationId, document.id, validationResult.normalizedData);
+            if (versionService) {
+                await versionService.enforceRetentionFor(this.databaseAdapter, context.organizationId, document.id);
+            }
             if (published) {
                 if (this.documentCache) {
                     await this.documentCache.invalidateDocument(context.organizationId, document.id);
@@ -374,6 +397,27 @@ export class CollectionAPI {
                     validation: validationResult
                 };
             }
+            // publishDoc returned null (unexpected): fall back to returning the draft.
+            if (this.documentCache) {
+                await this.documentCache.invalidateCollection(context.organizationId, this.collectionName);
+            }
+            return {
+                document: transformDocument(document, 'draft'),
+                validation: validationResult
+            };
+        }
+        // Draft-only path.
+        const document = await this.databaseAdapter.createDocument({
+            organizationId: context.organizationId,
+            type: this.collectionName,
+            draftData: validationResult.normalizedData,
+            createdBy: context.user?.id,
+            id: options?.id
+        });
+        await this.syncReferences(context.organizationId, document.id, validationResult.normalizedData);
+        // Create initial draft version
+        if (versionService) {
+            await versionService.createVersion(this.databaseAdapter, context.organizationId, document.id, 'draft', validationResult.normalizedData, context.user?.id);
         }
         if (this.documentCache) {
             await this.documentCache.invalidateCollection(context.organizationId, this.collectionName);
@@ -454,7 +498,7 @@ export class CollectionAPI {
             }
             const published = this.versionService && !options?.skipVersioning
                 ? await this.versionService.publishWithVersion(this.databaseAdapter, context.organizationId, document.id)
-                : await this.databaseAdapter.publishDoc(context.organizationId, document.id);
+                : await this.publishWithoutVersion(context.organizationId, document.id);
             if (published) {
                 // Invalidate cache
                 if (this.documentCache) {
@@ -516,6 +560,20 @@ export class CollectionAPI {
      * );
      * ```
      */
+    /**
+     * Publish without a version snapshot — the branch taken when there's no version service or
+     * the caller passed `skipVersioning`. Still emits `document.published` (and its outbox row)
+     * atomically with the publish, so the domain fact fires on EVERY publish path, not only the
+     * versioned one. The versioned branch emits the same event from `versionService.publishTx`.
+     */
+    async publishWithoutVersion(organizationId, id) {
+        return this.databaseAdapter.withTransaction(async (tx) => {
+            const published = await tx.publishDoc(organizationId, id);
+            if (published)
+                await emitDocumentPublished(tx, organizationId, published);
+            return published;
+        });
+    }
     async publish(context, id) {
         // Fetch first so policies can inspect the target. Order matters here:
         // 404s beat 403s for missing docs.
@@ -549,10 +607,12 @@ export class CollectionAPI {
                 throw new Error(`Cannot publish — ${unpublished.length} referenced document(s) are not published: ${names}`);
             }
         }
-        // Validation passed - proceed with publish (with version if service available)
+        // Validation passed - proceed with publish (with version if service available). Either
+        // branch emits `document.published`: the versioned path from publishTx, the non-versioned
+        // path from publishWithoutVersion.
         const publishedDocument = this.versionService
             ? await this.versionService.publishWithVersion(this.databaseAdapter, context.organizationId, id)
-            : await this.databaseAdapter.publishDoc(context.organizationId, id);
+            : await this.publishWithoutVersion(context.organizationId, id);
         if (!publishedDocument) {
             return null;
         }
@@ -561,6 +621,9 @@ export class CollectionAPI {
             await this.documentCache.invalidateDocument(context.organizationId, id);
             await this.documentCache.invalidateCollection(context.organizationId, this.collectionName);
         }
+        // This manual publish supersedes any pending scheduled publish — cancel it so the queued
+        // job doesn't fire later and re-emit `document.published` (a pending unpublish is left as-is).
+        await this.cancelPendingScheduleOfType(context.organizationId, id, DOCUMENT_PUBLISH_JOB);
         return transformDocument(publishedDocument, 'published');
     }
     /**
@@ -589,6 +652,102 @@ export class CollectionAPI {
             await this.documentCache.invalidateDocument(context.organizationId, id);
             await this.documentCache.invalidateCollection(context.organizationId, this.collectionName);
         }
+        // This manual unpublish supersedes any pending scheduled unpublish — cancel it so the
+        // queued job doesn't fire later (a pending publish is left as-is: "unpublish now,
+        // republish Monday" is a legitimate transition).
+        await this.cancelPendingScheduleOfType(context.organizationId, id, DOCUMENT_UNPUBLISH_JOB);
         return transformDocument(document, 'draft');
     }
+    /**
+     * Pending scheduled publish/unpublish jobs for one document. Scheduled jobs are few
+     * and `pending` is a small set, so filtering the org's pending jobs by documentId in
+     * memory is cheap and avoids a dialect-specific JSON query on the hot editor path.
+     */
+    async pendingScheduledFor(organizationId, documentId) {
+        const page = await this.databaseAdapter.listJobs({
+            organizationId,
+            status: 'pending',
+            limit: 200
+        });
+        return page.items.filter((j) => (j.type === DOCUMENT_PUBLISH_JOB || j.type === DOCUMENT_UNPUBLISH_JOB) &&
+            j.payload.documentId === documentId);
+    }
+    /**
+     * Cancel any pending schedule of ONE direction for a document — used when a manual
+     * publish/unpublish supersedes a schedule of the same kind. Only same-direction is
+     * cancelled on purpose: "publish now, auto-unpublish Friday" and "unpublish now,
+     * republish Monday" are legitimate future transitions, so a manual publish leaves a
+     * pending unpublish (and vice versa) alone. Without this, the queued job would fire at
+     * `runAt` and re-run the same transition — re-emitting `document.published`/`unpublished`
+     * and firing every consumer a second time (duplicate notifications, webhooks, cache busts).
+     */
+    async cancelPendingScheduleOfType(organizationId, documentId, jobType) {
+        const pending = await this.pendingScheduledFor(organizationId, documentId);
+        for (const job of pending) {
+            if (job.type === jobType) {
+                await this.databaseAdapter.cancelJob(organizationId, job.id);
+            }
+        }
+    }
+    /**
+     * Schedule a publish for a future `runAt`. Enqueues a `document.publish` job; the
+     * worker runs `publish()` at that time (re-validating, guarding references, emitting
+     * `document.published`). The permission check happens NOW — you must be able to publish
+     * to schedule one — so an unauthorized caller can't queue work to run later as the system.
+     * Actual publish-time validation still runs then, so a doc that goes invalid before
+     * `runAt` simply fails/retries rather than publishing bad content.
+     *
+     * Replace semantics: any existing pending schedule for this document is cancelled first,
+     * so a document has at most one pending schedule (rescheduling can't double-publish).
+     */
+    async schedulePublish(context, id, runAt) {
+        const document = await this.databaseAdapter.findByDocIdAdvanced(context.organizationId, id);
+        if (!document)
+            throw new Error('Document not found');
+        await this.permissions.canPublish(context, this.collectionName, document);
+        for (const existing of await this.pendingScheduledFor(context.organizationId, id)) {
+            await this.databaseAdapter.cancelJob(context.organizationId, existing.id);
+        }
+        return this.databaseAdapter.scheduleJob({
+            organizationId: context.organizationId,
+            type: DOCUMENT_PUBLISH_JOB,
+            payload: { documentId: id, documentType: this.collectionName },
+            runAt,
+            createdBy: context.user?.id ?? null
+        });
+    }
+    /** Schedule an unpublish for a future `runAt`. Permission-checked now; replaces any existing pending schedule. */
+    async scheduleUnpublish(context, id, runAt) {
+        const document = await this.databaseAdapter.findByDocIdAdvanced(context.organizationId, id);
+        if (!document)
+            throw new Error('Document not found');
+        await this.permissions.canUnpublish(context, this.collectionName, document);
+        for (const existing of await this.pendingScheduledFor(context.organizationId, id)) {
+            await this.databaseAdapter.cancelJob(context.organizationId, existing.id);
+        }
+        return this.databaseAdapter.scheduleJob({
+            organizationId: context.organizationId,
+            type: DOCUMENT_UNPUBLISH_JOB,
+            payload: { documentId: id, documentType: this.collectionName },
+            runAt,
+            createdBy: context.user?.id ?? null
+        });
+    }
+    /** Pending scheduled publish/unpublish jobs for a document (read-gated) — for the editor's schedule indicator. */
+    async getScheduled(context, id) {
+        await this.permissions.canRead(context, this.collectionName);
+        return this.pendingScheduledFor(context.organizationId, id);
+    }
+    /** Cancel all pending scheduled publish/unpublish jobs for a document. Returns how many were cancelled. */
+    async cancelScheduled(context, id) {
+        const document = await this.databaseAdapter.findByDocIdAdvanced(context.organizationId, id);
+        if (!document)
+            throw new Error('Document not found');
+        await this.permissions.canPublish(context, this.collectionName, document);
+        const pending = await this.pendingScheduledFor(context.organizationId, id);
+        for (const job of pending) {
+            await this.databaseAdapter.cancelJob(context.organizationId, job.id);
+        }
+        return pending.length;
+    }
 }

package/dist/plugins/resolver.d.ts

@@ -5,8 +5,9 @@
  * `config.plugins` and exposed on the engine so both server and admin consult the
  * same resolved model. Validates duplicate part ids up front — no silent overrides.
  */
-import type { AdminToolPart, CMSPlugin, DocumentActionPart, FieldComponentPart, PartKind, PluginPart, ServerRoutePart, SettingsPart } from './types.js';
+import type { AdminToolPart, CMSPlugin, DocumentActionPart, EventConsumerPart, FieldComponentPart, PartKind, PluginPart, ServerRoutePart, SettingsPart } from './types.js';
 import type { SchemaType } from '../types/schemas.js';
+import type { JobHandlerMap } from '../jobs/types.js';
 import { type CapabilityDefinition } from '../types/capabilities.js';
 type PartOf<K extends PartKind> = Extract<PluginPart, {
     implements: K;
@@ -43,6 +44,16 @@ export interface PartResolver {
     settingsDeclarations(): SettingsPart[];
     /** The settings declaration for a given plugin id, if any. */
     settingsDeclaration(pluginId: string): SettingsPart | undefined;
+    /**
+     * All plugin-contributed job handlers, merged into one map (later parts win on a
+     * type collision). The runner layers this between core built-ins and the app's
+     * `config.jobs.handlers`.
+     */
+    jobHandlers(): JobHandlerMap;
+    /** All registered event consumers, in registration order. The runner turns these into delivery job handlers. */
+    eventConsumers(): EventConsumerPart[];
+    /** Event consumers subscribed to a given event type — the relay's fan-out list. */
+    consumersForEvent(eventType: string): EventConsumerPart[];
 }
 export declare function createPartResolver(plugins?: CMSPlugin[]): PartResolver;
 export {};

package/dist/plugins/resolver.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resolver.d.ts","sourceRoot":"","sources":["../../src/lib/plugins/resolver.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,KAAK,EACX,aAAa,EACb,SAAS,EACT,kBAAkB,EAClB,kBAAkB,EAClB,QAAQ,EACR,UAAU,EACV,eAAe,EACf,YAAY,EACZ,MAAM,SAAS,CAAC;AACjB,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAGN,KAAK,oBAAoB,EACzB,MAAM,uBAAuB,CAAC;AAE/B,KAAK,MAAM,CAAC,CAAC,SAAS,QAAQ,IAAI,OAAO,CAAC,UAAU,EAAE;IAAE,UAAU,EAAE,CAAC,CAAA;CAAE,CAAC,CAAC;AAEzE,MAAM,WAAW,YAAY;IAC5B,QAAQ,CAAC,OAAO,EAAE,SAAS,EAAE,CAAC;IAC9B,+EAA+E;IAC/E,QAAQ,CAAC,CAAC,SAAS,QAAQ,EAAE,IAAI,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IACnD,yEAAyE;IACzE,WAAW,IAAI,UAAU,EAAE,CAAC;IAC5B,6EAA6E;IAC7E,qBAAqB,CAAC,OAAO,EAAE,UAAU,EAAE,GAAG,UAAU,EAAE,CAAC;IAC3D,gDAAgD;IAChD,YAAY,IAAI,eAAe,EAAE,CAAC;IAClC,8DAA8D;IAC9D,YAAY,IAAI,MAAM,EAAE,CAAC;IACzB;oEACgE;IAChE,iBAAiB,IAAI,oBAAoB,EAAE,CAAC;IAC5C,sFAAsF;IACtF,eAAe,CAAC,IAAI,EAAE;QACrB,UAAU,EAAE,MAAM,CAAC;QACnB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;QACxB,cAAc,CAAC,EAAE,OAAO,CAAC;KACzB,GAAG,kBAAkB,EAAE,CAAC;IACzB,mDAAmD;IACnD,UAAU,CAAC,IAAI,CAAC,EAAE;QAAE,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,cAAc,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,aAAa,EAAE,CAAC;IAC1F,sEAAsE;IACtE,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS,CAAC;IAC9D,+DAA+D;IAC/D,oBAAoB,IAAI,YAAY,EAAE,CAAC;IACvC,8DAA8D;IAC9D,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,YAAY,GAAG,SAAS,CAAC;CAChE;AAED,wBAAgB,kBAAkB,CAAC,OAAO,GAAE,SAAS,EAAO,GAAG,YAAY,CAgF1E"}
+{"version":3,"file":"resolver.d.ts","sourceRoot":"","sources":["../../src/lib/plugins/resolver.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,KAAK,EACX,aAAa,EACb,SAAS,EACT,kBAAkB,EAClB,iBAAiB,EACjB,kBAAkB,EAClB,QAAQ,EACR,UAAU,EACV,eAAe,EACf,YAAY,EACZ,MAAM,SAAS,CAAC;AACjB,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EAGN,KAAK,oBAAoB,EACzB,MAAM,uBAAuB,CAAC;AAE/B,KAAK,MAAM,CAAC,CAAC,SAAS,QAAQ,IAAI,OAAO,CAAC,UAAU,EAAE;IAAE,UAAU,EAAE,CAAC,CAAA;CAAE,CAAC,CAAC;AAEzE,MAAM,WAAW,YAAY;IAC5B,QAAQ,CAAC,OAAO,EAAE,SAAS,EAAE,CAAC;IAC9B,+EAA+E;IAC/E,QAAQ,CAAC,CAAC,SAAS,QAAQ,EAAE,IAAI,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IACnD,yEAAyE;IACzE,WAAW,IAAI,UAAU,EAAE,CAAC;IAC5B,6EAA6E;IAC7E,qBAAqB,CAAC,OAAO,EAAE,UAAU,EAAE,GAAG,UAAU,EAAE,CAAC;IAC3D,gDAAgD;IAChD,YAAY,IAAI,eAAe,EAAE,CAAC;IAClC,8DAA8D;IAC9D,YAAY,IAAI,MAAM,EAAE,CAAC;IACzB;oEACgE;IAChE,iBAAiB,IAAI,oBAAoB,EAAE,CAAC;IAC5C,sFAAsF;IACtF,eAAe,CAAC,IAAI,EAAE;QACrB,UAAU,EAAE,MAAM,CAAC;QACnB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;QACxB,cAAc,CAAC,EAAE,OAAO,CAAC;KACzB,GAAG,kBAAkB,EAAE,CAAC;IACzB,mDAAmD;IACnD,UAAU,CAAC,IAAI,CAAC,EAAE;QAAE,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,cAAc,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,aAAa,EAAE,CAAC;IAC1F,sEAAsE;IACtE,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS,CAAC;IAC9D,+DAA+D;IAC/D,oBAAoB,IAAI,YAAY,EAAE,CAAC;IACvC,8DAA8D;IAC9D,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,YAAY,GAAG,SAAS,CAAC;IAChE;;;;OAIG;IACH,WAAW,IAAI,aAAa,CAAC;IAC7B,gHAAgH;IAChH,cAAc,IAAI,iBAAiB,EAAE,CAAC;IACtC,mFAAmF;IACnF,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,iBAAiB,EAAE,CAAC;CAC1D;AAED,wBAAgB,kBAAkB,CAAC,OAAO,GAAE,SAAS,EAAO,GAAG,YAAY,CAwF1E"}