@byline/host-tanstack-start 4.14.1 → 4.16.0

package/src/routes/create-admin-analytics-route.test.node.ts

@@ -0,0 +1,46 @@
+/**
+ * This Source Code is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at http://mozilla.org/MPL/2.0/.
+ *
+ * Copyright (c) Infonomic Company Limited
+ */
+
+import { describe, expect, it } from 'vitest'
+
+import { buildAnalyticsDashboardRange } from './analytics-range.js'
+
+describe('buildAnalyticsDashboardRange', () => {
+  it('builds inclusive UTC periods across month and year boundaries', () => {
+    expect(buildAnalyticsDashboardRange(7, new Date('2027-01-03T23:59:59.999Z'))).toEqual({
+      from: '2026-12-28',
+      to: '2027-01-03',
+    })
+  })
+
+  it('builds year-to-date from January 1 in UTC', () => {
+    expect(buildAnalyticsDashboardRange('ytd', new Date('2027-06-03T23:59:59.999Z'))).toEqual({
+      from: '2027-01-01',
+      to: '2027-06-03',
+    })
+  })
+
+  it('builds all-time from the earliest reportable day', () => {
+    expect(
+      buildAnalyticsDashboardRange('all', new Date('2027-06-03T23:59:59.999Z'), '2024-02-29')
+    ).toEqual({ from: '2024-02-29', to: '2027-06-03' })
+  })
+
+  it('uses today for an empty all-time report', () => {
+    expect(buildAnalyticsDashboardRange('all', new Date('2027-06-03T23:59:59.999Z'))).toEqual({
+      from: '2027-06-03',
+      to: '2027-06-03',
+    })
+  })
+
+  it('rejects an invalid earliest report day before constructing a range', () => {
+    expect(() =>
+      buildAnalyticsDashboardRange('all', new Date('2027-06-03T23:59:59.999Z'), '2027-02-30')
+    ).toThrow(/real UTC calendar day/u)
+  })
+})

package/src/routes/create-admin-analytics-route.tsx

@@ -0,0 +1,109 @@
+/**
+ * This Source Code is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at http://mozilla.org/MPL/2.0/.
+ *
+ * Copyright (c) Infonomic Company Limited
+ */
+
+import { createFileRoute, notFound } from '@tanstack/react-router'
+
+import type { AnalyticsDashboardData, AnalyticsDashboardPeriod } from '@byline/admin/analytics'
+import { AnalyticsDashboard } from '@byline/admin/analytics/components/dashboard'
+import { isAnalyticsDashboardPeriod } from '@byline/analytics/config'
+import { useTranslation } from '@byline/i18n/react'
+import { z } from 'zod'
+
+import { BreadcrumbsClient } from '../admin-shell/chrome/breadcrumbs/breadcrumbs-client.js'
+import { useNavigate } from '../admin-shell/chrome/loose-router.js'
+import {
+  getAnalyticsCountries,
+  getAnalyticsReferrers,
+  getAnalyticsReportCoverage,
+  getAnalyticsRuntime,
+  getAnalyticsSummary,
+  getAnalyticsTop,
+} from '../server-fns/analytics/index.js'
+import { getAdminRoutePath } from './admin-path.js'
+import { buildAnalyticsDashboardRange } from './analytics-range.js'
+
+const periodSchema = z.preprocess((value) => {
+  if (value == null) return undefined
+  if (value === 'ytd' || value === 'all') return value
+  return Number(value)
+}, z.custom<AnalyticsDashboardPeriod>((value) => isAnalyticsDashboardPeriod(value)).optional())
+
+const searchSchema = z.object({
+  period: periodSchema.catch(undefined),
+})
+
+interface AnalyticsSearch {
+  period?: AnalyticsDashboardPeriod
+}
+
+export function createAdminAnalyticsRoute(path: string) {
+  const Route: any = createFileRoute(path as never)({
+    validateSearch: searchSchema,
+    loaderDeps: ({ search }: { search: AnalyticsSearch }) => ({
+      period: search.period ?? 30,
+    }),
+    loader: async ({ deps }: { deps: { period: AnalyticsDashboardPeriod } }) => {
+      const runtime = await getAnalyticsRuntime()
+      if (!runtime.enabled) throw notFound()
+
+      const coverage = await getAnalyticsReportCoverage()
+      const range = buildAnalyticsDashboardRange(deps.period, new Date(), coverage.summaryFrom)
+      const [summary, pages, downloads, referrers, countries] = await Promise.all([
+        getAnalyticsSummary({ data: range }),
+        getAnalyticsTop({ data: { ...range, kind: 'page', limit: 20 } }),
+        getAnalyticsTop({ data: { ...range, kind: 'download', limit: 20 } }),
+        getAnalyticsReferrers({ data: { ...range, limit: 20 } }),
+        getAnalyticsCountries({ data: range }),
+      ])
+
+      return {
+        data: {
+          summary,
+          pages,
+          downloads,
+          referrers,
+          countries,
+          range,
+          coverage,
+        } satisfies AnalyticsDashboardData,
+        period: deps.period,
+      }
+    },
+    component: function AdminAnalyticsComponent() {
+      const { data, period } = Route.useLoaderData() as {
+        data: AnalyticsDashboardData
+        period: AnalyticsDashboardPeriod
+      }
+      const navigate = useNavigate()
+      const { t } = useTranslation('byline-admin')
+
+      return (
+        <>
+          <BreadcrumbsClient
+            breadcrumbs={[
+              { label: t('chrome.menu.dashboard'), href: getAdminRoutePath() },
+              { label: t('analytics.title'), href: getAdminRoutePath('analytics') },
+            ]}
+          />
+          <AnalyticsDashboard
+            data={data}
+            period={period}
+            onPeriodChange={(nextPeriod) => {
+              navigate({
+                to: getAdminRoutePath('analytics'),
+                search: { period: nextPeriod },
+              })
+            }}
+          />
+        </>
+      )
+    },
+  })
+
+  return Route
+}

package/src/routes/create-admin-layout-route.tsx

@@ -41,7 +41,9 @@ import { buildLocaleDefinitions } from '../i18n/locale-definitions.js'
 import { bylineAdminServices } from '../integrations/byline-admin-services.js'
 import { BylineAiAdminProvider } from '../integrations/byline-ai.js'
 import { bylineFieldServices } from '../integrations/byline-field-services.js'
+import { getAnalyticsRuntime } from '../server-fns/analytics/index.js'
 import { getCurrentAdminUser } from '../server-fns/auth/index.js'
+import { getScheduledPublicationRuntime } from '../server-fns/collections/index.js'
 import { getActiveLocaleFn, setAdminLocaleFn } from '../server-fns/i18n/index.js'
 import { getSignInRoutePath } from './sign-in-path.js'
 
@@ -57,8 +59,12 @@ export function createAdminLayoutRoute(path: string) {
         // than calling `resolveRequestLocale` directly) keeps
         // `@tanstack/react-start/server` out of the client bundle — the
         // same pattern `getCurrentAdminUser` uses for `getAdminRequestContext`.
-        const activeLocale = await getActiveLocaleFn()
-        return { user, activeLocale }
+        const [activeLocale, scheduledPublicationRuntime, analyticsRuntime] = await Promise.all([
+          getActiveLocaleFn(),
+          getScheduledPublicationRuntime(),
+          getAnalyticsRuntime(),
+        ])
+        return { user, activeLocale, scheduledPublicationRuntime, analyticsRuntime }
       } catch {
         // `getCurrentAdminUser` (via `getAdminRequestContext`) throws
         // `ERR_UNAUTHENTICATED` or a related auth error when no valid
@@ -71,10 +77,13 @@ export function createAdminLayoutRoute(path: string) {
       }
     },
     component: function AdminLayoutComponent() {
-      const { user, activeLocale } = Route.useRouteContext() as {
-        user: Awaited<ReturnType<typeof getCurrentAdminUser>>
-        activeLocale: LocaleCode
-      }
+      const { user, activeLocale, scheduledPublicationRuntime, analyticsRuntime } =
+        Route.useRouteContext() as {
+          user: Awaited<ReturnType<typeof getCurrentAdminUser>>
+          activeLocale: LocaleCode
+          scheduledPublicationRuntime: Awaited<ReturnType<typeof getScheduledPublicationRuntime>>
+          analyticsRuntime: Awaited<ReturnType<typeof getAnalyticsRuntime>>
+        }
       const { i18n } = getAdminConfig()
       const localeDefinitions = buildLocaleDefinitions(
         i18n.admin.locales,
@@ -109,7 +118,10 @@ export function createAdminLayoutRoute(path: string) {
                   <RouteProgressBar />
                   <AdminAppBar user={user} />
                   <main className={cx('byline-admin-layout-main', layoutStyles.main)}>
-                    <AdminMenuDrawer />
+                    <AdminMenuDrawer
+                      analyticsEnabled={analyticsRuntime.enabled}
+                      scheduledPublicationEnabled={scheduledPublicationRuntime.enabled}
+                    />
                     <Content>
                       <Outlet />
                     </Content>

package/src/routes/create-admin-scheduled-publications-route.tsx

@@ -0,0 +1,83 @@
+/**
+ * This Source Code is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at http://mozilla.org/MPL/2.0/.
+ *
+ * Copyright (c) Infonomic Company Limited
+ */
+
+import { createFileRoute, notFound } from '@tanstack/react-router'
+
+import { useTranslation } from '@byline/i18n/react'
+import { z } from 'zod'
+
+import { BreadcrumbsClient } from '../admin-shell/chrome/breadcrumbs/breadcrumbs-client.js'
+import { ScheduledPublicationsView } from '../admin-shell/scheduled-publications/list.js'
+import {
+  getScheduledPublicationRuntime,
+  listScheduledPublications,
+} from '../server-fns/collections/index.js'
+import { getAdminRoutePath } from './admin-path.js'
+import type { ScheduledPublicationListResponse } from '../server-fns/collections/index.js'
+
+// Every member is an optional filter, so an unusable value should narrow to
+// "no filter" rather than take the page down. Without the `.catch`, a hand-typed
+// or stale `?lastAuthorizedBy=…` that is not a UUID replaced the whole view with
+// an error screen quoting the raw regex. `lastAuthorizedBy` has no UI control
+// any more — the authorizer is a column, not a filter — but the parameter and
+// the server fn behind it still work for a caller that constructs the URL.
+const searchSchema = z.object({
+  page: z.coerce.number().int().min(1).optional().catch(undefined),
+  page_size: z.coerce.number().int().min(1).max(100).optional().catch(undefined),
+  state: z.enum(['armed', 'needs_reconfirm']).optional().catch(undefined),
+  lastAuthorizedBy: z
+    .string()
+    .trim()
+    .regex(/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i)
+    .optional()
+    .catch(undefined),
+})
+
+type ScheduledPublicationsSearch = z.infer<typeof searchSchema>
+
+export function createAdminScheduledPublicationsRoute(path: string) {
+  // biome-ignore lint/suspicious/noExplicitAny: dynamic path bypasses route-tree typing
+  const Route: any = createFileRoute(path as never)({
+    shouldReload: true,
+    validateSearch: searchSchema,
+    loaderDeps: ({ search }: { search: ScheduledPublicationsSearch }) => search,
+    loader: async ({ deps }: { deps: ScheduledPublicationsSearch }) => {
+      const runtime = await getScheduledPublicationRuntime()
+      if (!runtime.enabled) throw notFound()
+      const data = await listScheduledPublications({
+        data: {
+          page: deps.page,
+          pageSize: deps.page_size,
+          states: deps.state == null ? undefined : [deps.state],
+          lastAuthorizedBy: deps.lastAuthorizedBy,
+        },
+      })
+      return { data }
+    },
+    component: function AdminScheduledPublicationsComponent() {
+      const { data } = Route.useLoaderData() as { data: ScheduledPublicationListResponse }
+      const { t } = useTranslation('byline-admin')
+      return (
+        <>
+          <BreadcrumbsClient
+            breadcrumbs={[
+              { label: t('chrome.menu.dashboard'), href: getAdminRoutePath() },
+              {
+                label: t('scheduledPublication.list.title'),
+                href: getAdminRoutePath('scheduled-publications'),
+              },
+            ]}
+          />
+          <ScheduledPublicationsView data={data} />
+        </>
+      )
+    },
+  })
+
+  return Route
+}

package/src/routes/index.ts

@@ -33,11 +33,13 @@ export { getSignInRoutePath } from './sign-in-path.js'
 
 export { createAdminAccountRoute } from './create-admin-account-route.js'
 export { createAdminActivityRoute } from './create-admin-activity-route.js'
+export { createAdminAnalyticsRoute } from './create-admin-analytics-route.js'
 export { createAdminDashboardRoute } from './create-admin-dashboard-route.js'
 export { createAdminLayoutRoute } from './create-admin-layout-route.js'
 export { createAdminPermissionsRoute } from './create-admin-permissions-route.js'
 export { createAdminRoleEditRoute } from './create-admin-role-edit-route.js'
 export { createAdminRolesListRoute } from './create-admin-roles-list-route.js'
+export { createAdminScheduledPublicationsRoute } from './create-admin-scheduled-publications-route.js'
 export { createAdminUserEditRoute } from './create-admin-user-edit-route.js'
 export { createAdminUsersListRoute } from './create-admin-users-list-route.js'
 export { createCollectionApiRoute } from './create-collection-api-route.js'

package/src/server-fns/analytics/index.ts

@@ -0,0 +1,23 @@
+/**
+ * This Source Code is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at http://mozilla.org/MPL/2.0/.
+ *
+ * Copyright (c) Infonomic Company Limited
+ */
+
+export {
+  type DeleteAnalyticsEventsInput,
+  deleteAnalyticsEvents,
+  rebuildAnalyticsDay,
+} from './maintenance.js'
+export {
+  type AnalyticsRuntimeState,
+  type AnalyticsTopInput,
+  getAnalyticsCountries,
+  getAnalyticsReferrers,
+  getAnalyticsReportCoverage,
+  getAnalyticsRuntime,
+  getAnalyticsSummary,
+  getAnalyticsTop,
+} from './queries.js'

package/src/server-fns/analytics/maintenance.ts

@@ -0,0 +1,54 @@
+/**
+ * This Source Code is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at http://mozilla.org/MPL/2.0/.
+ *
+ * Copyright (c) Infonomic Company Limited
+ */
+
+import { createServerFn } from '@tanstack/react-start'
+
+import { assertAdminActor } from '@byline/admin'
+import { ANALYTICS_ABILITIES } from '@byline/admin/analytics'
+import { getAdminRequestContext } from '@byline/client/server'
+
+export interface DeleteAnalyticsEventsInput {
+  from: string
+  to: string
+  visitorHash?: string
+}
+
+export const deleteAnalyticsEvents = createServerFn({ method: 'POST' })
+  .validator((input: DeleteAnalyticsEventsInput) => input)
+  .handler(async ({ data }): Promise<{ deleted: number }> => {
+    await assertAnalyticsMaintenance()
+    const { getAnalytics } = await import('@byline/analytics')
+    const from = parseInstant(data.from, 'from')
+    const to = parseInstant(data.to, 'to')
+    const deleted = await getAnalytics().deleteEvents({
+      from,
+      to,
+      ...(data.visitorHash == null ? {} : { visitorHash: data.visitorHash }),
+    })
+    return { deleted }
+  })
+
+export const rebuildAnalyticsDay = createServerFn({ method: 'POST' })
+  .validator((input: { day: string }) => input)
+  .handler(async ({ data }): Promise<{ rebuilt: string }> => {
+    await assertAnalyticsMaintenance()
+    const { getAnalytics } = await import('@byline/analytics')
+    await getAnalytics().rebuildDay(data.day)
+    return { rebuilt: data.day }
+  })
+
+async function assertAnalyticsMaintenance(): Promise<void> {
+  const context = await getAdminRequestContext()
+  assertAdminActor(context, ANALYTICS_ABILITIES.maintain)
+}
+
+function parseInstant(value: string, label: string): Date {
+  const date = new Date(value)
+  if (Number.isNaN(date.valueOf())) throw new Error(`analytics ${label} must be an ISO instant`)
+  return date
+}

package/src/server-fns/analytics/queries.ts

@@ -0,0 +1,86 @@
+/**
+ * This Source Code is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at http://mozilla.org/MPL/2.0/.
+ *
+ * Copyright (c) Infonomic Company Limited
+ */
+
+import { createServerFn } from '@tanstack/react-start'
+
+import { assertAdminActor, requireAdminActor } from '@byline/admin'
+import { ANALYTICS_ABILITIES } from '@byline/admin/analytics'
+import type {
+  AnalyticsCountryTotal,
+  AnalyticsDateRange,
+  AnalyticsEventKind,
+  AnalyticsPathTotal,
+  AnalyticsRankedTotals,
+  AnalyticsReferrerTotal,
+  AnalyticsReportCoverage,
+  AnalyticsSummary,
+} from '@byline/analytics'
+import { getAdminRequestContext } from '@byline/client/server'
+
+export interface AnalyticsTopInput extends AnalyticsDateRange {
+  kind: AnalyticsEventKind
+  limit?: number
+}
+
+export interface AnalyticsRuntimeState {
+  enabled: boolean
+}
+
+export const getAnalyticsRuntime = createServerFn({ method: 'GET' }).handler(
+  async (): Promise<AnalyticsRuntimeState> => {
+    const context = await getAdminRequestContext()
+    requireAdminActor(context, 'reading analytics runtime state')
+    const { isAnalyticsRegistered } = await import('@byline/analytics')
+    return { enabled: isAnalyticsRegistered() }
+  }
+)
+
+export const getAnalyticsSummary = createServerFn({ method: 'GET' })
+  .validator((input: AnalyticsDateRange) => input)
+  .handler(async ({ data }): Promise<AnalyticsSummary> => {
+    await assertAnalyticsRead()
+    const { getAnalytics } = await import('@byline/analytics')
+    return getAnalytics().getSummary(data)
+  })
+
+export const getAnalyticsReportCoverage = createServerFn({ method: 'GET' }).handler(
+  async (): Promise<AnalyticsReportCoverage> => {
+    await assertAnalyticsRead()
+    const { getAnalytics } = await import('@byline/analytics')
+    return getAnalytics().getReportCoverage()
+  }
+)
+
+export const getAnalyticsTop = createServerFn({ method: 'GET' })
+  .validator((input: AnalyticsTopInput) => input)
+  .handler(async ({ data }): Promise<AnalyticsRankedTotals<AnalyticsPathTotal>> => {
+    await assertAnalyticsRead()
+    const { getAnalytics } = await import('@byline/analytics')
+    return getAnalytics().getTopPaths(data)
+  })
+
+export const getAnalyticsReferrers = createServerFn({ method: 'GET' })
+  .validator((input: AnalyticsDateRange & { limit?: number }) => input)
+  .handler(async ({ data }): Promise<AnalyticsRankedTotals<AnalyticsReferrerTotal>> => {
+    await assertAnalyticsRead()
+    const { getAnalytics } = await import('@byline/analytics')
+    return getAnalytics().getReferrers(data)
+  })
+
+export const getAnalyticsCountries = createServerFn({ method: 'GET' })
+  .validator((input: AnalyticsDateRange) => input)
+  .handler(async ({ data }): Promise<AnalyticsCountryTotal[]> => {
+    await assertAnalyticsRead()
+    const { getAnalytics } = await import('@byline/analytics')
+    return getAnalytics().getCountries(data)
+  })
+
+async function assertAnalyticsRead(): Promise<void> {
+  const context = await getAdminRequestContext()
+  assertAdminActor(context, ANALYTICS_ABILITIES.read)
+}

package/src/server-fns/collections/get.ts

@@ -8,10 +8,11 @@
 
 import { createServerFn } from '@tanstack/react-start'
 
-import { getAdminBylineClient } from '@byline/client/server'
+import { getAdminBylineClient, getAdminRequestContext } from '@byline/client/server'
 import {
   BylineError,
   buildRelationSummaryPopulateMap,
+  collectionAbilityKey,
   ERR_NOT_FOUND,
   ErrorCodes,
   getCollectionAdminConfig,
@@ -165,6 +166,25 @@ const getDocumentFn = createServerFn({ method: 'GET' })
       | string[]
       | undefined
 
+    // Scheduled publication is editorial system metadata, not authored
+    // content. Do not join it into ordinary client reads: that would leak
+    // timing to public callers or make every read require publish abilities.
+    // The authenticated admin loader adds it only when the installation is
+    // enabled and this actor holds both schedule abilities for this collection.
+    const scheduledPublicationEnabled = getServerConfig().scheduledPublication?.enabled === true
+    let canSchedulePublication = false
+    let scheduledPublish: Awaited<ReturnType<typeof handle.getScheduledPublish>> = null
+    if (scheduledPublicationEnabled) {
+      const actor = (await getAdminRequestContext()).actor
+      canSchedulePublication =
+        actor?.hasAbility(collectionAbilityKey(path, 'changeStatus')) === true &&
+        actor.hasAbility(collectionAbilityKey(path, 'publish'))
+      if (canSchedulePublication) {
+        scheduledPublish = await handle.getScheduledPublish(id)
+      }
+    }
+    const serializedSchedule = scheduledPublish == null ? null : serialise(scheduledPublish)
+
     return {
       ...(parsed as Record<string, any>),
       _publishedVersion: publishedVersion,
@@ -175,6 +195,15 @@ const getDocumentFn = createServerFn({ method: 'GET' })
       ...(Array.isArray(availableVersionLocales)
         ? { _availableVersionLocales: availableVersionLocales }
         : {}),
+      _scheduledPublicationEnabled: scheduledPublicationEnabled,
+      _canSchedulePublication: canSchedulePublication,
+      _scheduledPublish: serializedSchedule,
+      ...(serializedSchedule == null
+        ? {}
+        : {
+            scheduledPublishAt: serializedSchedule.publishAt,
+            scheduledPublishVersionId: serializedSchedule.targetVersionId,
+          }),
     }
   })
 

package/src/server-fns/collections/index.ts

@@ -18,6 +18,7 @@ export * from './list'
 export * from './reindex'
 export * from './reorder'
 export * from './restore-version'
+export * from './scheduled-publication'
 export * from './set-list-view-preference'
 export * from './stats'
 export * from './status'

package/src/server-fns/collections/scheduled-publication-response.test.node.ts

@@ -0,0 +1,45 @@
+/**
+ * This Source Code is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at http://mozilla.org/MPL/2.0/.
+ *
+ * Copyright (c) Infonomic Company Limited
+ */
+
+import type { DocumentPublishSchedule } from '@byline/core'
+import { describe, expect, it } from 'vitest'
+
+import { omitScheduleExecutionState } from './scheduled-publication-response.js'
+
+describe('scheduled-publication transport response', () => {
+  it('does not expose the execution fencing token or its lease', () => {
+    const now = new Date('2026-08-22T12:00:00.000Z')
+    const schedule: DocumentPublishSchedule = {
+      documentId: 'doc-1',
+      collectionId: 'collection-1',
+      targetVersionId: 'version-1',
+      publishAt: now,
+      state: 'armed',
+      suspendedAt: null,
+      suspendedReason: null,
+      scheduledBy: null,
+      lastAuthorizedBy: null,
+      lastAuthorizedAt: now,
+      scheduledAt: now,
+      updatedAt: now,
+      executionToken: 'sweep-fencing-secret',
+      executionExpiresAt: new Date('2026-08-22T12:05:00.000Z'),
+      lastAttemptAt: now,
+      nextAttemptAt: now,
+      attemptCount: 1,
+      lastError: null,
+    }
+
+    const response = omitScheduleExecutionState(schedule)
+
+    expect(response).not.toHaveProperty('executionToken')
+    expect(response).not.toHaveProperty('executionExpiresAt')
+    expect(JSON.stringify(response)).not.toContain('sweep-fencing-secret')
+    expect(response).toMatchObject({ documentId: 'doc-1', state: 'armed', attemptCount: 1 })
+  })
+})

package/src/server-fns/collections/scheduled-publication-response.ts

@@ -0,0 +1,22 @@
+/**
+ * This Source Code is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at http://mozilla.org/MPL/2.0/.
+ *
+ * Copyright (c) Infonomic Company Limited
+ */
+
+import type { DocumentPublishScheduleInfo } from '@byline/client'
+import type { DocumentPublishSchedule } from '@byline/core'
+
+/** Remove sweep-owned fencing credentials before a schedule crosses a transport boundary. */
+export function omitScheduleExecutionState(
+  schedule: DocumentPublishScheduleInfo | DocumentPublishSchedule
+): DocumentPublishScheduleInfo {
+  const {
+    executionToken: _executionToken,
+    executionExpiresAt: _executionExpiresAt,
+    ...editorialSchedule
+  } = schedule as DocumentPublishSchedule
+  return editorialSchedule
+}