@forumone/throughline-publishing 0.0.1 → 0.2.1

package/CHANGELOG.md

@@ -0,0 +1,13 @@
+# @forumone/throughline-publishing
+
+## 0.2.1
+
+### Patch Changes
+
+- 3ef6f6a: The pipeline's `approvalStep` now falls back to looking up an approval resolver on the Payload instance under `Symbol.for('@forumone/throughline/approvals-resolver')` when no resolver is supplied via `publishingPlugin`'s `options.approvalResolver`. The `@forumone/throughline-approvals` plugin attaches its resolver under that symbol automatically, so adding approvals to a config no longer requires re-wiring the publishing plugin's options. An explicit `options.approvalResolver` still takes precedence when you need to override.
+
+## 0.2.0
+
+### Minor Changes
+
+- [`123d2ea`](https://github.com/forumone/throughline/commit/123d2ea0172d9495b9e2c8e8c6039e623f5fba66) Thanks [@briangraves](https://github.com/briangraves)! - Initial release. Policy-gated publishing server with a seven-step pipeline (exist, composition, accessibility, required-fields, embargo, approval, execute), five MCP tools (publish, unpublish, schedule_publish, get_publish_status, rollback), and a Payload `beforeChange` hook on every publishable collection that rejects direct `_status` writes from anywhere other than the pipeline's execute step. Built-in accessibility checks cover alt text, heading hierarchy, and link labels; clients add custom checks via the `accessibilityChecks` option.

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Forum One Communications Corporation
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,45 +1,5 @@
 # @forumone/throughline-publishing
 
-## ⚠️ IMPORTANT NOTICE ⚠️
+Policy-gated publishing server for Throughline. The trust boundary that decides what's allowed to ship.
 
-**This package is created solely for the purpose of setting up OIDC (OpenID Connect) trusted publishing with npm.**
-
-This is **NOT** a functional package and contains **NO** code or functionality beyond the OIDC setup configuration.
-
-## Purpose
-
-This package exists to:
-1. Configure OIDC trusted publishing for the package name `@forumone/throughline-publishing`
-2. Enable secure, token-less publishing from CI/CD workflows
-3. Establish provenance for packages published under this name
-
-## What is OIDC Trusted Publishing?
-
-OIDC trusted publishing allows package maintainers to publish packages directly from their CI/CD workflows without needing to manage npm access tokens. Instead, it uses OpenID Connect to establish trust between the CI/CD provider (like GitHub Actions) and npm.
-
-## Setup Instructions
-
-To properly configure OIDC trusted publishing for this package:
-
-1. Go to [npmjs.com](https://www.npmjs.com/) and navigate to your package settings
-2. Configure the trusted publisher (e.g., GitHub Actions)
-3. Specify the repository and workflow that should be allowed to publish
-4. Use the configured workflow to publish your actual package
-
-## DO NOT USE THIS PACKAGE
-
-This package is a placeholder for OIDC configuration only. It:
-- Contains no executable code
-- Provides no functionality
-- Should not be installed as a dependency
-- Exists only for administrative purposes
-
-## More Information
-
-For more details about npm's trusted publishing feature, see:
-- [npm Trusted Publishing Documentation](https://docs.npmjs.com/generating-provenance-statements)
-- [GitHub Actions OIDC Documentation](https://docs.github.com/en/actions/deployment/security-hardening-your-deployments/about-security-hardening-with-openid-connect)
-
----
-
-**Maintained for OIDC setup purposes only**
+_Authoring guide and full API reference land in a later commit._

package/dist/checks/alt-text.d.ts

@@ -0,0 +1,11 @@
+import type { AccessibilityCheck } from '../options.js';
+/**
+ * Walks the document tree looking for image-shaped objects (anything with
+ * a `url` or `filename` property whose `mimeType`, if present, starts with
+ * `image/`). Flags any whose `alt` is missing or empty.
+ *
+ * Heuristic, not exhaustive — clients with non-standard image shapes
+ * register their own check via `accessibilityChecks`.
+ */
+export declare const altTextCheck: AccessibilityCheck;
+//# sourceMappingURL=alt-text.d.ts.map

package/dist/checks/alt-text.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"alt-text.d.ts","sourceRoot":"","sources":["../../src/checks/alt-text.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAsB,MAAM,eAAe,CAAA;AAE3E;;;;;;;GAOG;AACH,eAAO,MAAM,YAAY,EAAE,kBAgB1B,CAAA"}

package/dist/checks/alt-text.js

@@ -0,0 +1,53 @@
+/**
+ * Walks the document tree looking for image-shaped objects (anything with
+ * a `url` or `filename` property whose `mimeType`, if present, starts with
+ * `image/`). Flags any whose `alt` is missing or empty.
+ *
+ * Heuristic, not exhaustive — clients with non-standard image shapes
+ * register their own check via `accessibilityChecks`.
+ */
+export const altTextCheck = {
+    name: 'alt-text',
+    run(doc) {
+        const issues = [];
+        walkForImages(doc, (image, path) => {
+            const alt = image['alt'];
+            if (typeof alt !== 'string' || alt.trim() === '') {
+                issues.push({
+                    field: path,
+                    message: `Image at "${path}" is missing alt text`,
+                    severity: 'error',
+                });
+            }
+        });
+        return issues;
+    },
+};
+function walkForImages(value, visit, path = '') {
+    if (!value || typeof value !== 'object')
+        return;
+    if (Array.isArray(value)) {
+        for (let i = 0; i < value.length; i++) {
+            walkForImages(value[i], visit, `${path}[${i}]`);
+        }
+        return;
+    }
+    const obj = value;
+    if (looksLikeImage(obj)) {
+        visit(obj, path || '(root)');
+    }
+    for (const key of Object.keys(obj)) {
+        walkForImages(obj[key], visit, path ? `${path}.${key}` : key);
+    }
+}
+function looksLikeImage(obj) {
+    // Require an explicit image marker: a `filename` (Payload media uploads
+    // always have one) or an `image/*` mimeType. A bare `{ url }` is too
+    // ambiguous — it's just as likely to be a link, so we leave that to the
+    // link-labels check.
+    const mime = obj['mimeType'];
+    if (typeof mime === 'string')
+        return mime.startsWith('image/');
+    return typeof obj['filename'] === 'string';
+}
+//# sourceMappingURL=alt-text.js.map

package/dist/checks/alt-text.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"alt-text.js","sourceRoot":"","sources":["../../src/checks/alt-text.ts"],"names":[],"mappings":"AAEA;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,YAAY,GAAuB;IAC9C,IAAI,EAAE,UAAU;IAChB,GAAG,CAAC,GAAG;QACL,MAAM,MAAM,GAAyB,EAAE,CAAA;QACvC,aAAa,CAAC,GAAG,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;YACjC,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,CAAA;YACxB,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;gBACjD,MAAM,CAAC,IAAI,CAAC;oBACV,KAAK,EAAE,IAAI;oBACX,OAAO,EAAE,aAAa,IAAI,uBAAuB;oBACjD,QAAQ,EAAE,OAAO;iBAClB,CAAC,CAAA;YACJ,CAAC;QACH,CAAC,CAAC,CAAA;QACF,OAAO,MAAM,CAAA;IACf,CAAC;CACF,CAAA;AAED,SAAS,aAAa,CACpB,KAAc,EACd,KAA6D,EAC7D,IAAI,GAAG,EAAE;IAET,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAM;IAE/C,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAA;QACjD,CAAC;QACD,OAAM;IACR,CAAC;IAED,MAAM,GAAG,GAAG,KAAgC,CAAA;IAC5C,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,KAAK,CAAC,GAAG,EAAE,IAAI,IAAI,QAAQ,CAAC,CAAA;IAC9B,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACnC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;IAC/D,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,GAA4B;IAClD,wEAAwE;IACxE,qEAAqE;IACrE,wEAAwE;IACxE,qBAAqB;IACrB,MAAM,IAAI,GAAG,GAAG,CAAC,UAAU,CAAC,CAAA;IAC5B,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAA;IAC9D,OAAO,OAAO,GAAG,CAAC,UAAU,CAAC,KAAK,QAAQ,CAAA;AAC5C,CAAC"}

package/dist/checks/heading-hierarchy.d.ts

@@ -0,0 +1,11 @@
+import type { AccessibilityCheck } from '../options.js';
+/**
+ * Structural heading-hierarchy check. Without rendering the page we can't
+ * fully audit heading levels, but we can flag the most common structural
+ * mistake: multiple Hero blocks (each becomes an h1 in the reference DS).
+ *
+ * Block types are matched case-insensitively against `'hero'` since the
+ * `blockType` field is by convention lower-cased in Payload.
+ */
+export declare const headingHierarchyCheck: AccessibilityCheck;
+//# sourceMappingURL=heading-hierarchy.d.ts.map

package/dist/checks/heading-hierarchy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"heading-hierarchy.d.ts","sourceRoot":"","sources":["../../src/checks/heading-hierarchy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAsB,MAAM,eAAe,CAAA;AAE3E;;;;;;;GAOG;AACH,eAAO,MAAM,qBAAqB,EAAE,kBAuBnC,CAAA"}

package/dist/checks/heading-hierarchy.js

@@ -0,0 +1,32 @@
+/**
+ * Structural heading-hierarchy check. Without rendering the page we can't
+ * fully audit heading levels, but we can flag the most common structural
+ * mistake: multiple Hero blocks (each becomes an h1 in the reference DS).
+ *
+ * Block types are matched case-insensitively against `'hero'` since the
+ * `blockType` field is by convention lower-cased in Payload.
+ */
+export const headingHierarchyCheck = {
+    name: 'heading-hierarchy',
+    run(doc, collection) {
+        const issues = [];
+        const layoutValue = doc[collection.layoutField];
+        if (!Array.isArray(layoutValue))
+            return issues;
+        const heroCount = layoutValue.filter((block) => {
+            if (!block || typeof block !== 'object')
+                return false;
+            const blockType = block['blockType'];
+            return typeof blockType === 'string' && blockType.toLowerCase() === 'hero';
+        }).length;
+        if (heroCount > 1) {
+            issues.push({
+                field: collection.layoutField,
+                message: `Page has ${heroCount} Hero blocks but should have exactly one (each Hero becomes an h1)`,
+                severity: 'error',
+            });
+        }
+        return issues;
+    },
+};
+//# sourceMappingURL=heading-hierarchy.js.map

package/dist/checks/heading-hierarchy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"heading-hierarchy.js","sourceRoot":"","sources":["../../src/checks/heading-hierarchy.ts"],"names":[],"mappings":"AAEA;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAuB;IACvD,IAAI,EAAE,mBAAmB;IACzB,GAAG,CAAC,GAAG,EAAE,UAAU;QACjB,MAAM,MAAM,GAAyB,EAAE,CAAA;QACvC,MAAM,WAAW,GAAG,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,CAAA;QAC/C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC;YAAE,OAAO,MAAM,CAAA;QAE9C,MAAM,SAAS,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;YAC7C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;gBAAE,OAAO,KAAK,CAAA;YACrD,MAAM,SAAS,GAAI,KAAiC,CAAC,WAAW,CAAC,CAAA;YACjE,OAAO,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,WAAW,EAAE,KAAK,MAAM,CAAA;QAC5E,CAAC,CAAC,CAAC,MAAM,CAAA;QAET,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;YAClB,MAAM,CAAC,IAAI,CAAC;gBACV,KAAK,EAAE,UAAU,CAAC,WAAW;gBAC7B,OAAO,EAAE,YAAY,SAAS,oEAAoE;gBAClG,QAAQ,EAAE,OAAO;aAClB,CAAC,CAAA;QACJ,CAAC;QAED,OAAO,MAAM,CAAA;IACf,CAAC;CACF,CAAA"}

package/dist/checks/index.d.ts

@@ -0,0 +1,6 @@
+export { altTextCheck } from './alt-text.js';
+export { headingHierarchyCheck } from './heading-hierarchy.js';
+export { linkLabelsCheck } from './link-labels.js';
+/** Built-in accessibility checks the pipeline runs before any user-supplied ones. */
+export declare const BUILT_IN_ACCESSIBILITY_CHECKS: readonly [import("../options.js").AccessibilityCheck, import("../options.js").AccessibilityCheck, import("../options.js").AccessibilityCheck];
+//# sourceMappingURL=index.d.ts.map

package/dist/checks/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/checks/index.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAC5C,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAA;AAC9D,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAA;AAElD,qFAAqF;AACrF,eAAO,MAAM,6BAA6B,+IAIhC,CAAA"}

package/dist/checks/index.js

@@ -0,0 +1,13 @@
+import { altTextCheck } from './alt-text.js';
+import { headingHierarchyCheck } from './heading-hierarchy.js';
+import { linkLabelsCheck } from './link-labels.js';
+export { altTextCheck } from './alt-text.js';
+export { headingHierarchyCheck } from './heading-hierarchy.js';
+export { linkLabelsCheck } from './link-labels.js';
+/** Built-in accessibility checks the pipeline runs before any user-supplied ones. */
+export const BUILT_IN_ACCESSIBILITY_CHECKS = [
+    altTextCheck,
+    headingHierarchyCheck,
+    linkLabelsCheck,
+];
+//# sourceMappingURL=index.js.map

package/dist/checks/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/checks/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAC5C,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAA;AAC9D,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAA;AAElD,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAC5C,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAA;AAC9D,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAA;AAElD,qFAAqF;AACrF,MAAM,CAAC,MAAM,6BAA6B,GAAG;IAC3C,YAAY;IACZ,qBAAqB;IACrB,eAAe;CACP,CAAA"}

package/dist/checks/link-labels.d.ts

@@ -0,0 +1,9 @@
+import type { AccessibilityCheck } from '../options.js';
+/**
+ * Walks the document tree for objects with both `url` and `label` fields and
+ * flags any where the URL is non-empty but the label is missing or empty.
+ * "Click here"-style labels are not flagged (those need a content review,
+ * not a link-label check).
+ */
+export declare const linkLabelsCheck: AccessibilityCheck;
+//# sourceMappingURL=link-labels.d.ts.map

package/dist/checks/link-labels.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"link-labels.d.ts","sourceRoot":"","sources":["../../src/checks/link-labels.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAsB,MAAM,eAAe,CAAA;AAE3E;;;;;GAKG;AACH,eAAO,MAAM,eAAe,EAAE,kBAmB7B,CAAA"}

package/dist/checks/link-labels.js

@@ -0,0 +1,44 @@
+/**
+ * Walks the document tree for objects with both `url` and `label` fields and
+ * flags any where the URL is non-empty but the label is missing or empty.
+ * "Click here"-style labels are not flagged (those need a content review,
+ * not a link-label check).
+ */
+export const linkLabelsCheck = {
+    name: 'link-labels',
+    run(doc) {
+        const issues = [];
+        walkForLinks(doc, (link, path) => {
+            const url = link['url'];
+            const label = link['label'];
+            const hasUrl = typeof url === 'string' && url.trim() !== '';
+            const hasLabel = typeof label === 'string' && label.trim() !== '';
+            if (hasUrl && !hasLabel) {
+                issues.push({
+                    field: path,
+                    message: `Link at "${path}" has a URL but no label`,
+                    severity: 'error',
+                });
+            }
+        });
+        return issues;
+    },
+};
+function walkForLinks(value, visit, path = '') {
+    if (!value || typeof value !== 'object')
+        return;
+    if (Array.isArray(value)) {
+        for (let i = 0; i < value.length; i++) {
+            walkForLinks(value[i], visit, `${path}[${i}]`);
+        }
+        return;
+    }
+    const obj = value;
+    if ('url' in obj && 'label' in obj) {
+        visit(obj, path || '(root)');
+    }
+    for (const key of Object.keys(obj)) {
+        walkForLinks(obj[key], visit, path ? `${path}.${key}` : key);
+    }
+}
+//# sourceMappingURL=link-labels.js.map

package/dist/checks/link-labels.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"link-labels.js","sourceRoot":"","sources":["../../src/checks/link-labels.ts"],"names":[],"mappings":"AAEA;;;;;GAKG;AACH,MAAM,CAAC,MAAM,eAAe,GAAuB;IACjD,IAAI,EAAE,aAAa;IACnB,GAAG,CAAC,GAAG;QACL,MAAM,MAAM,GAAyB,EAAE,CAAA;QACvC,YAAY,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE;YAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAA;YACvB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,CAAA;YAC3B,MAAM,MAAM,GAAG,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,CAAA;YAC3D,MAAM,QAAQ,GAAG,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,CAAA;YACjE,IAAI,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACxB,MAAM,CAAC,IAAI,CAAC;oBACV,KAAK,EAAE,IAAI;oBACX,OAAO,EAAE,YAAY,IAAI,0BAA0B;oBACnD,QAAQ,EAAE,OAAO;iBAClB,CAAC,CAAA;YACJ,CAAC;QACH,CAAC,CAAC,CAAA;QACF,OAAO,MAAM,CAAA;IACf,CAAC;CACF,CAAA;AAED,SAAS,YAAY,CACnB,KAAc,EACd,KAA4D,EAC5D,IAAI,GAAG,EAAE;IAET,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAM;IAE/C,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAA;QAChD,CAAC;QACD,OAAM;IACR,CAAC;IAED,MAAM,GAAG,GAAG,KAAgC,CAAA;IAC5C,IAAI,KAAK,IAAI,GAAG,IAAI,OAAO,IAAI,GAAG,EAAE,CAAC;QACnC,KAAK,CAAC,GAAG,EAAE,IAAI,IAAI,QAAQ,CAAC,CAAA;IAC9B,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACnC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;IAC9D,CAAC;AACH,CAAC"}

package/dist/hooks/block-status-writes.d.ts

@@ -0,0 +1,12 @@
+import type { CollectionBeforeChangeHook } from 'payload';
+/**
+ * The trust boundary. This `beforeChange` hook rejects every update that
+ * touches `_status` unless the request explicitly carries the
+ * `bypassPublishingServer` context flag (set by the pipeline's `executeStep`).
+ *
+ * Without this hook, the Payload MCP could let Claude flip a document to
+ * `published` directly, sidestepping every check the publishing server
+ * exists to enforce. With it, the only sanctioned path is the pipeline.
+ */
+export declare function createBlockStatusWritesHook(): CollectionBeforeChangeHook;
+//# sourceMappingURL=block-status-writes.d.ts.map

package/dist/hooks/block-status-writes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"block-status-writes.d.ts","sourceRoot":"","sources":["../../src/hooks/block-status-writes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,SAAS,CAAA;AAEzD;;;;;;;;GAQG;AACH,wBAAgB,2BAA2B,IAAI,0BAA0B,CAqBxE"}

package/dist/hooks/block-status-writes.js

@@ -0,0 +1,36 @@
+/**
+ * The trust boundary. This `beforeChange` hook rejects every update that
+ * touches `_status` unless the request explicitly carries the
+ * `bypassPublishingServer` context flag (set by the pipeline's `executeStep`).
+ *
+ * Without this hook, the Payload MCP could let Claude flip a document to
+ * `published` directly, sidestepping every check the publishing server
+ * exists to enforce. With it, the only sanctioned path is the pipeline.
+ */
+export function createBlockStatusWritesHook() {
+    return ({ data, originalDoc, operation, context, req }) => {
+        if (operation !== 'update')
+            return data;
+        if (!hasStatusChange(data))
+            return data;
+        // No-op writes (status set to its current value) are harmless.
+        if (originalDoc &&
+            typeof originalDoc === 'object' &&
+            data['_status'] ===
+                originalDoc['_status']) {
+            return data;
+        }
+        if (isBypassed(context) || isBypassed(req?.context))
+            return data;
+        throw new Error('Direct writes to `_status` are not allowed. Use the publishing server (publish / unpublish / rollback) so the policy pipeline runs.');
+    };
+}
+function hasStatusChange(data) {
+    return (typeof data === 'object' && data !== null && '_status' in data);
+}
+function isBypassed(context) {
+    if (!context || typeof context !== 'object')
+        return false;
+    return context['bypassPublishingServer'] === true;
+}
+//# sourceMappingURL=block-status-writes.js.map

package/dist/hooks/block-status-writes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"block-status-writes.js","sourceRoot":"","sources":["../../src/hooks/block-status-writes.ts"],"names":[],"mappings":"AAEA;;;;;;;;GAQG;AACH,MAAM,UAAU,2BAA2B;IACzC,OAAO,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE;QACxD,IAAI,SAAS,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAA;QACvC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAA;QAEvC,+DAA+D;QAC/D,IACE,WAAW;YACX,OAAO,WAAW,KAAK,QAAQ;YAC9B,IAAgC,CAAC,SAAS,CAAC;gBACzC,WAAuC,CAAC,SAAS,CAAC,EACrD,CAAC;YACD,OAAO,IAAI,CAAA;QACb,CAAC;QAED,IAAI,UAAU,CAAC,OAAO,CAAC,IAAI,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC;YAAE,OAAO,IAAI,CAAA;QAEhE,MAAM,IAAI,KAAK,CACb,qIAAqI,CACtI,CAAA;IACH,CAAC,CAAA;AACH,CAAC;AAED,SAAS,eAAe,CAAC,IAAa;IACpC,OAAO,CACL,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,SAAS,IAAI,IAAI,CAC/D,CAAA;AACH,CAAC;AAED,SAAS,UAAU,CAAC,OAAgB;IAClC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAA;IACzD,OAAQ,OAAmC,CAAC,wBAAwB,CAAC,KAAK,IAAI,CAAA;AAChF,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,4 @@
+export { publishingPlugin } from './plugin.js';
+export type { AccessibilityCheck, AccessibilityIssue, ActiveApproval, ApprovalResolver, PublishableCollection, PublishingPluginOptions, ResolvedCollection, } from './options.js';
+export type { PipelineContext, PipelineResult, PipelineStep, PipelineStepResult, } from './pipeline/index.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAE9C,YAAY,EACV,kBAAkB,EAClB,kBAAkB,EAClB,cAAc,EACd,gBAAgB,EAChB,qBAAqB,EACrB,uBAAuB,EACvB,kBAAkB,GACnB,MAAM,cAAc,CAAA;AAErB,YAAY,EACV,eAAe,EACf,cAAc,EACd,YAAY,EACZ,kBAAkB,GACnB,MAAM,qBAAqB,CAAA"}

package/dist/index.js

@@ -0,0 +1,2 @@
+export { publishingPlugin } from './plugin.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA"}

package/dist/options.d.ts

@@ -0,0 +1,65 @@
+import type { Inngest } from 'inngest';
+import type { BaseCorePluginOptions } from '@forumone/throughline-plugin-contract';
+export interface PublishableCollection {
+    /** Slug of the collection that can be published through this server. */
+    slug: string;
+    /** Field name on the document holding composition blocks. Default: `'layout'`. */
+    layoutField?: string;
+    /** Field name for the SEO group used by required-field checks. Default: `'seo'`. */
+    seoField?: string;
+    /** Field name for the policy group (`requiresApproval`, `embargoedUntil`). Default: `'policy'`. */
+    policyField?: string;
+    /** Field name for the slug. Default: `'slug'`. */
+    slugField?: string;
+    /** Field name for the publish timestamp. Default: `'publishedAt'`. */
+    publishedAtField?: string;
+    /** Field name for a future scheduled publish time. Default: `'scheduledPublishAt'`. */
+    scheduledPublishField?: string;
+    /** Per-collection required fields beyond the built-in SEO/slug checks. */
+    requiredFields?: Array<{
+        path: string;
+        message: string;
+    }>;
+}
+export interface AccessibilityIssue {
+    field?: string | undefined;
+    message: string;
+    severity: 'error' | 'warning';
+}
+export interface AccessibilityCheck {
+    name: string;
+    run: (doc: Record<string, unknown>, collection: ResolvedCollection) => Promise<AccessibilityIssue[]> | AccessibilityIssue[];
+}
+export interface ActiveApproval {
+    id: string;
+    grantedAt: string;
+    grantedBy: string;
+    version: string;
+}
+export interface ApprovalResolver {
+    /** Returns the active granted approval for this document version, or `null`. */
+    getActiveApproval: (collection: string, id: string, version: string) => Promise<ActiveApproval | null>;
+}
+export interface PublishingPluginOptions extends BaseCorePluginOptions {
+    /** Required: collections that can be published through this server. */
+    collections: PublishableCollection[];
+    /** Optional: extra accessibility checks beyond the built-ins. */
+    accessibilityChecks?: AccessibilityCheck[];
+    /** Optional: resolver consulted when a document's policy requires approval. */
+    approvalResolver?: ApprovalResolver;
+    /** Required: Inngest client used to fire publishing events. */
+    inngest: Inngest;
+}
+export type ResolvedCollection = Required<Omit<PublishableCollection, 'requiredFields'>> & Pick<PublishableCollection, 'requiredFields'>;
+/**
+ * Validates plugin options at load time. Throws with targeted messages on
+ * obvious misconfiguration so deploys fail fast rather than the first publish
+ * call returning 503.
+ */
+export declare function validateOptions(options: PublishingPluginOptions): PublishingPluginOptions;
+/**
+ * Returns the collection config with all field-name defaults filled in.
+ * Throws when the slug isn't registered as publishable.
+ */
+export declare function resolveCollection(options: PublishingPluginOptions, slug: string): ResolvedCollection;
+//# sourceMappingURL=options.d.ts.map

package/dist/options.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"options.d.ts","sourceRoot":"","sources":["../src/options.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AAEtC,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAA;AAElF,MAAM,WAAW,qBAAqB;IACpC,wEAAwE;IACxE,IAAI,EAAE,MAAM,CAAA;IACZ,kFAAkF;IAClF,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,oFAAoF;IACpF,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,mGAAmG;IACnG,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,kDAAkD;IAClD,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,sEAAsE;IACtE,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,uFAAuF;IACvF,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAC9B,0EAA0E;IAC1E,cAAc,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAC1D;AAED,MAAM,WAAW,kBAAkB;IACjC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC1B,OAAO,EAAE,MAAM,CAAA;IACf,QAAQ,EAAE,OAAO,GAAG,SAAS,CAAA;CAC9B;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAA;IACZ,GAAG,EAAE,CACH,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC5B,UAAU,EAAE,kBAAkB,KAC3B,OAAO,CAAC,kBAAkB,EAAE,CAAC,GAAG,kBAAkB,EAAE,CAAA;CAC1D;AAED,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAA;IACV,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,EAAE,MAAM,CAAA;CAChB;AAED,MAAM,WAAW,gBAAgB;IAC/B,gFAAgF;IAChF,iBAAiB,EAAE,CACjB,UAAU,EAAE,MAAM,EAClB,EAAE,EAAE,MAAM,EACV,OAAO,EAAE,MAAM,KACZ,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAAA;CACpC;AAED,MAAM,WAAW,uBAAwB,SAAQ,qBAAqB;IACpE,uEAAuE;IACvE,WAAW,EAAE,qBAAqB,EAAE,CAAA;IACpC,iEAAiE;IACjE,mBAAmB,CAAC,EAAE,kBAAkB,EAAE,CAAA;IAC1C,+EAA+E;IAC/E,gBAAgB,CAAC,EAAE,gBAAgB,CAAA;IACnC,+DAA+D;IAC/D,OAAO,EAAE,OAAO,CAAA;CACjB;AAED,MAAM,MAAM,kBAAkB,GAAG,QAAQ,CAAC,IAAI,CAAC,qBAAqB,EAAE,gBAAgB,CAAC,CAAC,GACtF,IAAI,CAAC,qBAAqB,EAAE,gBAAgB,CAAC,CAAA;AAe/C;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,uBAAuB,GAAG,uBAAuB,CAiBzF;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,uBAAuB,EAChC,IAAI,EAAE,MAAM,GACX,kBAAkB,CAiBpB"}

package/dist/options.js

@@ -0,0 +1,57 @@
+import { z } from 'zod';
+const PublishableCollectionSchema = z.object({
+    slug: z.string().min(1),
+    layoutField: z.string().optional(),
+    seoField: z.string().optional(),
+    policyField: z.string().optional(),
+    slugField: z.string().optional(),
+    publishedAtField: z.string().optional(),
+    scheduledPublishField: z.string().optional(),
+    requiredFields: z
+        .array(z.object({ path: z.string().min(1), message: z.string().min(1) }))
+        .optional(),
+});
+/**
+ * Validates plugin options at load time. Throws with targeted messages on
+ * obvious misconfiguration so deploys fail fast rather than the first publish
+ * call returning 503.
+ */
+export function validateOptions(options) {
+    if (!options.collections || options.collections.length === 0) {
+        throw new Error('publishingPlugin requires at least one collection in options.collections');
+    }
+    if (!options.inngest) {
+        throw new Error('publishingPlugin requires an Inngest client in options.inngest');
+    }
+    for (const collection of options.collections) {
+        const result = PublishableCollectionSchema.safeParse(collection);
+        if (!result.success) {
+            const issues = result.error.issues
+                .map((i) => `  - ${i.path.join('.') || '(root)'}: ${i.message}`)
+                .join('\n');
+            throw new Error(`Invalid collection config:\n${issues}`);
+        }
+    }
+    return options;
+}
+/**
+ * Returns the collection config with all field-name defaults filled in.
+ * Throws when the slug isn't registered as publishable.
+ */
+export function resolveCollection(options, slug) {
+    const config = options.collections.find((c) => c.slug === slug);
+    if (!config) {
+        throw new Error(`Collection "${slug}" is not registered as publishable. Add it to publishingPlugin's collections option.`);
+    }
+    return {
+        slug: config.slug,
+        layoutField: config.layoutField ?? 'layout',
+        seoField: config.seoField ?? 'seo',
+        policyField: config.policyField ?? 'policy',
+        slugField: config.slugField ?? 'slug',
+        publishedAtField: config.publishedAtField ?? 'publishedAt',
+        scheduledPublishField: config.scheduledPublishField ?? 'scheduledPublishAt',
+        ...(config.requiredFields ? { requiredFields: config.requiredFields } : {}),
+    };
+}
+//# sourceMappingURL=options.js.map

package/dist/options.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"options.js","sourceRoot":"","sources":["../src/options.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAkEvB,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACvC,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5C,cAAc,EAAE,CAAC;SACd,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;SACxE,QAAQ,EAAE;CACd,CAAC,CAAA;AAEF;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,OAAgC;IAC9D,IAAI,CAAC,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7D,MAAM,IAAI,KAAK,CAAC,0EAA0E,CAAC,CAAA;IAC7F,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAA;IACnF,CAAC;IACD,KAAK,MAAM,UAAU,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;QAC7C,MAAM,MAAM,GAAG,2BAA2B,CAAC,SAAS,CAAC,UAAU,CAAC,CAAA;QAChE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM;iBAC/B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;iBAC/D,IAAI,CAAC,IAAI,CAAC,CAAA;YACb,MAAM,IAAI,KAAK,CAAC,+BAA+B,MAAM,EAAE,CAAC,CAAA;QAC1D,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAA;AAChB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAC/B,OAAgC,EAChC,IAAY;IAEZ,MAAM,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAA;IAC/D,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACb,eAAe,IAAI,sFAAsF,CAC1G,CAAA;IACH,CAAC;IACD,OAAO;QACL,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,QAAQ;QAC3C,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,KAAK;QAClC,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,QAAQ;QAC3C,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,MAAM;QACrC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,IAAI,aAAa;QAC1D,qBAAqB,EAAE,MAAM,CAAC,qBAAqB,IAAI,oBAAoB;QAC3E,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5E,CAAA;AACH,CAAC"}

package/dist/pipeline/index.d.ts

@@ -0,0 +1,15 @@
+import type { PipelineContext, PipelineResult } from './types.js';
+/**
+ * Runs the full publish pipeline. Stops at the first failing step and
+ * returns its diagnostic; otherwise records success with the publish
+ * timestamp the execute step set.
+ */
+export declare function runPublishPipeline(context: PipelineContext): Promise<PipelineResult>;
+/**
+ * Runs every preflight step (everything but `execute`). Used by
+ * `get_publish_status` to answer "would this publish succeed?" without
+ * mutating anything.
+ */
+export declare function runPreflightPipeline(context: PipelineContext): Promise<PipelineResult>;
+export type { PipelineContext, PipelineResult, PipelineStep, PipelineStepResult } from './types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/pipeline/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/pipeline/index.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAgB,MAAM,YAAY,CAAA;AAqB/E;;;;GAIG;AACH,wBAAsB,kBAAkB,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,cAAc,CAAC,CAe1F;AAED;;;;GAIG;AACH,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,eAAe,GACvB,OAAO,CAAC,cAAc,CAAC,CAezB;AAED,YAAY,EAAE,eAAe,EAAE,cAAc,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAA"}

package/dist/pipeline/index.js

@@ -0,0 +1,62 @@
+import { existStep } from './steps/exist.js';
+import { compositionStep } from './steps/composition.js';
+import { accessibilityStep } from './steps/accessibility.js';
+import { requiredFieldsStep } from './steps/required-fields.js';
+import { embargoStep } from './steps/embargo.js';
+import { approvalStep } from './steps/approval.js';
+import { executeStep } from './steps/execute.js';
+const PREFLIGHT_STEPS = [
+    { name: 'exist', step: existStep },
+    { name: 'composition', step: compositionStep },
+    { name: 'accessibility', step: accessibilityStep },
+    { name: 'required-fields', step: requiredFieldsStep },
+    { name: 'embargo', step: embargoStep },
+    { name: 'approval', step: approvalStep },
+];
+const ORDERED_STEPS = [
+    ...PREFLIGHT_STEPS,
+    { name: 'execute', step: executeStep },
+];
+/**
+ * Runs the full publish pipeline. Stops at the first failing step and
+ * returns its diagnostic; otherwise records success with the publish
+ * timestamp the execute step set.
+ */
+export async function runPublishPipeline(context) {
+    for (const { name, step } of ORDERED_STEPS) {
+        const result = await step(context);
+        if (!result.pass) {
+            return {
+                success: false,
+                failedAt: name,
+                ...(result.reason ? { reason: result.reason } : {}),
+                ...(result.code ? { code: result.code } : {}),
+                ...(result.issues ? { issues: result.issues } : {}),
+                ...(result.suggestion ? { suggestion: result.suggestion } : {}),
+            };
+        }
+    }
+    return { success: true, publishedAt: new Date().toISOString() };
+}
+/**
+ * Runs every preflight step (everything but `execute`). Used by
+ * `get_publish_status` to answer "would this publish succeed?" without
+ * mutating anything.
+ */
+export async function runPreflightPipeline(context) {
+    for (const { name, step } of PREFLIGHT_STEPS) {
+        const result = await step(context);
+        if (!result.pass) {
+            return {
+                success: false,
+                failedAt: name,
+                ...(result.reason ? { reason: result.reason } : {}),
+                ...(result.code ? { code: result.code } : {}),
+                ...(result.issues ? { issues: result.issues } : {}),
+                ...(result.suggestion ? { suggestion: result.suggestion } : {}),
+            };
+        }
+    }
+    return { success: true };
+}
+//# sourceMappingURL=index.js.map

package/dist/pipeline/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/pipeline/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAC5C,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAA;AACxD,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAA;AAC5D,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAA;AAC/D,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAQhD,MAAM,eAAe,GAAkB;IACrC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE;IAClC,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,eAAe,EAAE;IAC9C,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,iBAAiB,EAAE;IAClD,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,kBAAkB,EAAE;IACrD,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE;IACtC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,YAAY,EAAE;CACzC,CAAA;AAED,MAAM,aAAa,GAAkB;IACnC,GAAG,eAAe;IAClB,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE;CACvC,CAAA;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,OAAwB;IAC/D,KAAK,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,aAAa,EAAE,CAAC;QAC3C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,CAAA;QAClC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACjB,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,QAAQ,EAAE,IAAI;gBACd,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnD,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7C,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnD,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAChE,CAAA;QACH,CAAC;IACH,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAA;AACjE,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,OAAwB;IAExB,KAAK,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,eAAe,EAAE,CAAC;QAC7C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,CAAA;QAClC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACjB,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,QAAQ,EAAE,IAAI;gBACd,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnD,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7C,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnD,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAChE,CAAA;QACH,CAAC;IACH,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;AAC1B,CAAC"}

package/dist/pipeline/steps/accessibility.d.ts

@@ -0,0 +1,9 @@
+import type { PipelineStep } from '../types.js';
+/**
+ * Runs every built-in accessibility check followed by user-supplied ones.
+ * Errors block publish; warnings are surfaced on the result but don't fail
+ * the step. (Warning-only behavior is currently unused by the built-in
+ * checks but reserved for richer per-client checks.)
+ */
+export declare const accessibilityStep: PipelineStep;
+//# sourceMappingURL=accessibility.d.ts.map

package/dist/pipeline/steps/accessibility.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"accessibility.d.ts","sourceRoot":"","sources":["../../../src/pipeline/steps/accessibility.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAiB,YAAY,EAAE,MAAM,aAAa,CAAA;AAG9D;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB,EAAE,YA2B/B,CAAA"}