@forumone/throughline-workflows 0.3.1 → 0.5.0

package/CHANGELOG.md

@@ -1,5 +1,86 @@
 # @forumone/throughline-workflows
 
+## 0.5.0
+
+### Minor Changes
+
+- ab623e1: The `payload` peer range moves from `^3.0.0` to `^3.89.0` for every package that has one. **A site on Payload older than 3.89.0 must upgrade Payload before upgrading these packages.**
+
+  Before 3.89.0, the `payload-mcp-api-keys` collection that `@payloadcms/plugin-mcp` adds registered Payload's API-key strategy on every REST route. Any key could then become `req.user` outside `/api/mcp` and pass access rules written as `Boolean(req.user)`. Every Throughline site runs that plugin, so the floor is the same for every package. No package's code changes with this bump.
+
+- 653817e: Revalidation no longer guesses paths, and covers the changes a publish event never announces.
+
+  - **workflows (breaking)**: `createRevalidateOnPublishFunction` has no built-in URL
+    builders. They mapped `pages` to `/<slug>`, `posts` to `/blog/<slug>` and any other
+    collection to `/<slug>`, so a site whose routes differed revalidated the wrong path
+    without a word. `urlBuilders` is now required; a collection with no entry has its
+    tags dropped and no path revalidated, and the run logs a warning. To keep the old
+    behaviour, pass the old builders:
+
+    ```ts
+    urlBuilders: {
+      pages: (slug) => (slug === 'home' || slug === '' ? '/' : `/${slug}`),
+      posts: (slug) => `/blog/${slug}`,
+    }
+    ```
+
+    and then check them against your routes.
+
+  - **workflows**: `createTagRevalidationHooks` — collection `afterChange` and
+    `afterDelete`, and global `afterChange`, hooks that call
+    `revalidateTag(tag, { expire: 0 })`. Draft saves and autosave drop nothing (via
+    publishing's `isDraftWrite`); an unpublish still does. A hook never throws: outside a
+    Next request (seeds, migrations, the CLI) it logs at `debug`, and any other failure
+    at `error` with the tag and the cause.
+  - **workflows**: `createCacheTags` builds every tag string, so the hooks, the publish
+    workflow (new `cacheTags` option) and cached reads cannot name different tags.
+    Defaults: the bare slug for a collection, `global_<slug>` for a global. Also on the
+    dependency-free `@forumone/throughline-workflows/cache-tags` subpath for frontend code.
+    `@forumone/throughline-publishing` is now a dependency of this package.
+  - **create-throughline**: the scaffold adds `apps/web/src/lib/cache-tags.ts`, attaches
+    the tag hooks to `Pages`, and passes explicit `urlBuilders` and the shared
+    `cacheTags` to the publish workflow.
+
+- 70385c4: `onTerminalFailure` has a handler to pass it. `createTerminalFailureHandler({ payload })` logs a run that exhausted its retries, writes a `job-failures` row through core's `jobFailuresPlugin` when it is registered, and posts the report to `ERROR_WEBHOOK_URL`. `createHealthcheckFailureHandler({ payload })` does the same for the healthcheck's per-run `onFailure`. Neither throws, because a throwing `onFailure` is retried by Inngest. The terminal handler also works as the `onFailure` of any Inngest function.
+
+  Recording rows needs core's `jobFailuresPlugin` and its migration. Without the plugin, the handlers still log and report.
+
+### Patch Changes
+
+- Updated dependencies [006ae30]
+- Updated dependencies [549d292]
+- Updated dependencies [70385c4]
+- Updated dependencies [c8a86bf]
+- Updated dependencies [ab623e1]
+- Updated dependencies [ab623e1]
+- Updated dependencies [36728c4]
+  - @forumone/throughline-core@0.10.0
+  - @forumone/throughline-publishing@0.11.0
+
+## 0.4.0
+
+### Minor Changes
+
+- 35060e5: Scheduled publishing works from the admin, publishes on time, and cleans up after itself.
+
+  A schedule set from the admin never published. It was written by a draft save,
+  Payload keeps a draft save in the versions table only, and the cron read the main
+  row — so only a schedule written over MCP, by a non-draft update, was ever found.
+  - **publishing**: a Schedule control replaces the scheduled-publish date field on
+    any collection that declares one, and runs the pipeline's checks when a time is
+    picked. An approval not yet granted, or an embargo that ends first, schedules
+    with a warning rather than refusing. `schedule` and `unschedule` admin
+    endpoints, `PublishingService.schedule` / `.unschedule`, and
+    `scheduleDocument` / `unscheduleDocument`; `schedule_publish` now calls the
+    service and writes the time as a draft. An `afterChange` hook sends
+    `content/page.scheduled` whenever the time changes, whichever route set it.
+    Publishing and unpublishing clear the time, so an unpublished page can no longer
+    put itself back up.
+  - **workflows**: `createPublishAtScheduledTimeFunction` sleeps until the scheduled
+    time instead of polling, in six-day hops for schedules further out.
+    `createExecuteScheduledPublishesFunction` reads the latest version
+    (`draft: true`) and takes `overdueByMs`, for running it as a backstop.
+
 ## 0.3.1
 
 ### Patch Changes

package/README.md

@@ -1,18 +1,31 @@
 # @forumone/throughline-workflows
 
-Composable Inngest function factories for the Throughline framework. Client apps import the factories they need and merge the functions into their Inngest endpoint.
+Composable Inngest function factories for the Throughline framework, and the Payload hooks that keep a Next cache honest. Client apps import the factories they need and merge the functions into their Inngest endpoint.
 
-This package has **no Payload plugin** — it exports factories only. Workflows subscribe to events the server packages emit; they don't modify Payload configuration.
+This package has **no Payload plugin** — it exports factories only. Workflows subscribe to events the server packages emit; they don't modify Payload configuration. The cache-revalidation hooks are factories too: you attach them to the collections and globals you choose.
 
 ## What this package provides
 
 | Factory | What it does |
 |---|---|
 | `createRevalidateOnPublishFunction` | Invalidates Next.js caches for the page, listings, and sitemap when content publishes |
-| `createExecuteScheduledPublishesFunction` | Cron-driven scheduled publish executor that calls through the Publishing Server's MCP |
+| `createPublishAtScheduledTimeFunction` | Publishes a document at its scheduled time by sleeping until then, woken by `content/page.scheduled` |
+| `createExecuteScheduledPublishesFunction` | Cron that publishes any document past its scheduled time — the backstop for the one above, or a poller on its own |
 | `createExpireStaleApprovalsFunction` | Daily cron that flips pending approvals past `expiresAt` to `expired` and fires an `approval/expired` event |
 | `createAuditEventEchoFunction` | Fan-out point: turns `audit/event.recorded` into `notification/send-approval-*` events plus custom handlers |
 | `createHealthcheckFunction` | Periodic health monitoring with configurable checks |
+| `createTagRevalidationHooks` | Payload `afterChange` / `afterDelete` hooks that drop Next cache tags when a collection or global changes |
+| `createCacheTags` | The one tag scheme hooks, workflow and readers all build tags from (also on `@forumone/throughline-workflows/cache-tags`) |
+
+Plus two failure handlers, for the `onTerminalFailure` every factory accepts and the healthcheck's own `onFailure`:
+
+- `createTerminalFailureHandler({ payload })` — logs a run that exhausted its retries, writes a `job-failures` row (when core's `jobFailuresPlugin` is registered) and posts it to `ERROR_WEBHOOK_URL`. Never throws. Works as any Inngest function's `onFailure`.
+- `createHealthcheckFailureHandler({ payload })` — the same, once per healthcheck run with failing checks.
+
+```ts
+const onTerminalFailure = createTerminalFailureHandler({ payload })
+createExpireStaleApprovalsFunction({ inngest, payload, onTerminalFailure })
+```
 
 Plus two reusable check helpers used with the healthcheck factory:
 
@@ -25,7 +38,7 @@ Plus two reusable check helpers used with the healthcheck factory:
 pnpm add @forumone/throughline-workflows
 ```
 
-Peers: `payload@^3.0.0`, `inngest@^4.0.0`. `next` is an **optional** peer — install it only if you use `createRevalidateOnPublishFunction` with the default revalidator.
+Peers: `payload@^3.89.0`, `inngest@^4.0.0`. `next` is an **optional** peer — install it only if you use `createRevalidateOnPublishFunction` or `createTagRevalidationHooks` with their default revalidators.
 
 ## Usage
 
@@ -51,7 +64,16 @@ const payload = await getPayload({ config })
 export const { GET, POST, PUT } = serve({
   client: inngest,
   functions: [
-    createRevalidateOnPublishFunction({ inngest, payload }),
+    createRevalidateOnPublishFunction({
+      inngest,
+      payload,
+      // Required. Where each publishable collection is served.
+      urlBuilders: {
+        pages: (slug) => (slug === 'home' ? '/' : `/${slug}`),
+        posts: (slug) => `/news/${slug}`,
+      },
+      cacheTags, // the same scheme your readers use — see below
+    }),
     createExecuteScheduledPublishesFunction({
       inngest,
       payload,
@@ -76,14 +98,116 @@ By C10, every server package fires Inngest events when consequential things happ
 
 The factories-only shape (no Payload plugin) is the same reasoning. A workflow that wants to revalidate Next.js pages doesn't need to register a Payload collection. A scheduled-publish executor doesn't need a Payload hook. They're cron / event handlers that happen to read from Payload.
 
+The tag-revalidation hooks are the one place this package reaches into Payload configuration, and only because you put them there: they are plain hook functions, not a plugin. They live here rather than in `publishing` because this package already owns Next cache invalidation — the optional `next` peer, the Next 16 `revalidateTag` profile, and the tag `createRevalidateOnPublishFunction` fires — and one tag scheme has to serve both. They use publishing's `isDraftWrite`, which makes `publishing` a dependency of this package. Publishing depends on nothing here, so there is no cycle.
+
+## Cache tags: one scheme, both ends
+
+A cache tag has two ends: a reader that caches under it and a writer that drops it. Nothing in the type system connects them. Name them differently and everything compiles, every test passes, the hook runs, and the page never refreshes. So build both from one object:
+
+```typescript
+// src/lib/cache-tags.ts — imported by payload.config.ts, the Inngest route and readers
+import { createCacheTags } from '@forumone/throughline-workflows/cache-tags'
+
+export const cacheTags = createCacheTags()
+// or name them your way:
+// createCacheTags({ collection: (slug) => `c:${slug}`, global: (slug) => `g:${slug}` })
+```
+
+The defaults are the bare slug for a collection (`pages`, which is also what `createRevalidateOnPublishFunction` has always fired) and `global_<slug>` for a global. The `/cache-tags` subpath imports nothing, so frontend code can use it without pulling in Payload.
+
+A reader tags its cached read from the same object:
+
+```typescript
+import { unstable_cache } from 'next/cache'
+import { cacheTags } from '@/lib/cache-tags'
+
+export const getNavigation = unstable_cache(
+  async () => (await getPayload({ config })).findGlobal({ slug: 'navigation' }),
+  ['navigation'],
+  { tags: [cacheTags.global('navigation')] },
+)
+// With Cache Components: cacheTag(cacheTags.global('navigation')) inside a 'use cache' function.
+```
+
+## Tag-revalidation hooks
+
+`createRevalidateOnPublishFunction` reacts to publishing events, so it covers publishes, unpublishes and rollbacks of publishable collections — and nothing else. A global (navigation, footer, settings) is read on every page and usually cached, and nothing publishes it. A collection an integration writes emits no publishing event. A delete is not a publish. Each of those leaves the cached copy standing until the next deploy unless a hook drops it:
+
+```typescript
+import { createTagRevalidationHooks } from '@forumone/throughline-workflows'
+import { cacheTags } from './lib/cache-tags'
+
+const revalidation = createTagRevalidationHooks({ cacheTags })
+
+const Pages: CollectionConfig = {
+  slug: 'pages',
+  hooks: {
+    // Navigation links to pages and caches their slugs, so a page change drops it too.
+    afterChange: [
+      revalidation.afterCollectionChange({
+        tags: (t, slug) => [t.collection(slug), t.global('navigation')],
+      }),
+    ],
+    afterDelete: [revalidation.afterCollectionDelete()],
+  },
+  // ...
+}
+
+const Media: CollectionConfig = {
+  slug: 'media',
+  upload: true,
+  hooks: {
+    // An upload cannot be referenced by anything cached yet.
+    afterChange: [revalidation.afterCollectionChange({ operations: ['update'] })],
+    afterDelete: [revalidation.afterCollectionDelete()],
+  },
+  // ...
+}
+
+const Navigation: GlobalConfig = {
+  slug: 'navigation',
+  hooks: { afterChange: [revalidation.afterGlobalChange()] },
+  // ...
+}
+```
+
+What they do:
+
+- **Drop tags, not paths.** Each hook calls `revalidateTag(tag, { expire: 0 })`, the immediate expiry Next 16 requires a profile for. Paths are the workflow's job. A collection hook defaults to `cacheTags.collection(slug)`, a global hook to `cacheTags.global(slug)`; `tags` replaces that list.
+- **Skip draft writes.** On `update`, a collection hook asks publishing's `isDraftWrite`, so a draft save or an autosave tick drops nothing, while an unpublish still does. That answer is recorded by `publishingPlugin` for the collections it manages; on any other collection every write counts as visible, which is the safe direction. A `create` that lands as a draft is skipped too: nothing published existed a moment ago. Global hooks drop on every save.
+- **Never throw.** A throwing `afterChange` fails the editor's save over a cache miss. Outside a Next request — seeds, migrations, the Payload CLI under `tsx` — Next throws `static generation store missing`; there is no server to be stale, so that is logged at `debug`. Any other failure means the cache did not clear while a server was running, and is logged at `error` with the cause and the tag.
+- **Other frontends.** Pass `revalidateTag: (tag) => myCdn.purgeTag(tag)` to drop tags somewhere other than Next.
+
+These overlap with `createRevalidateOnPublishFunction` on a publish — both drop the collection tag — which is harmless: dropping a tag twice is dropping it once. Use the workflow for page paths and the sitemap, and the hooks for everything a publish event never announces.
+
+## Migrating from the built-in URL builders
+
+Before 0.5, `createRevalidateOnPublishFunction` guessed paths: `pages` → `/<slug>` (`home` → `/`), `posts` → `/blog/<slug>`, and any other collection → `/<slug>`. A site whose routes differed revalidated the wrong path without a word. `urlBuilders` is now required and has no built-in entries. A collection with no entry still has its tags dropped, but no path is revalidated and the run logs a warning.
+
+If you relied on the defaults, pass them explicitly — the same behaviour as before:
+
+```typescript
+createRevalidateOnPublishFunction({
+  inngest,
+  payload,
+  urlBuilders: {
+    pages: (slug) => (slug === 'home' || slug === '' ? '/' : `/${slug}`),
+    posts: (slug) => `/blog/${slug}`,
+  },
+})
+```
+
+Then check them against your routes: if your posts are not under `/blog`, they never were being revalidated.
+
 ## Non-Next.js frontends
 
-The default `revalidate` function dynamically imports `next/cache` and is a no-op anywhere `revalidatePath` / `revalidateTag` aren't available. For other frameworks supply your own:
+The default `revalidate` function dynamically imports `next/cache`, so the package installs and imports without Next. For other frameworks supply your own:
 
 ```typescript
 createRevalidateOnPublishFunction({
   inngest,
   payload,
+  urlBuilders,
   revalidate: async ({ path, tags }) => {
     if (path) await myCdn.purge(path)
     for (const tag of tags) await myCdn.purgeTag(tag)
@@ -93,6 +217,46 @@ createRevalidateOnPublishFunction({
 
 `next` is declared as an optional peer (`peerDependenciesMeta.next.optional = true`) so non-Next consumers don't see a missing-peer warning.
 
+## Scheduled publishing: sleep, don't poll
+
+`createPublishAtScheduledTimeFunction` is woken by `content/page.scheduled` — which
+the publishing plugin sends whenever a document's scheduled time changes — sleeps
+until that time, re-reads the document, and publishes it only if the document still
+carries that exact time. The document is the source of truth and the event is a
+wake-up call, so a reschedule, a cancellation, or a publish or unpublish in the
+meantime needs no cancellation event: the old run wakes, finds the time changed, and
+ends.
+
+It publishes on the minute and costs a few steps per schedule. The poller costs two
+executions per tick whether or not anything is due — at `*/15` that is 5,760 a month
+to find, almost always, nothing.
+
+A schedule more than six days out is carried in hops: the run sleeps six days,
+re-sends the event and ends, so no single sleep passes the seven-day cap on
+Inngest's free plan and no run approaches its thirty-day limit. Set `maxSleepMs` on
+a paid plan if you prefer fewer hops.
+
+Run the poller alongside it as a backstop for an event that never arrived, on a slow
+schedule and with `overdueByMs`, so the two never reach a just-due document in the
+same moment:
+
+```ts
+createPublishAtScheduledTimeFunction({ inngest, payload, collections, publish }),
+createExecuteScheduledPublishesFunction({
+  inngest,
+  payload,
+  collections,
+  publish,
+  schedule: '17 3 * * *',
+  overdueByMs: 60 * 60 * 1000,
+}),
+```
+
+Both read the document's **latest version** (`draft: true`). A schedule is written
+by a draft save, and Payload writes a draft save to the versions table only, so the
+main row never carries it — and reading the versions is also what lets a revision
+of a live document be scheduled.
+
 ## Why scheduled publishes go through the pipeline
 
 `createExecuteScheduledPublishesFunction` never writes to Payload. It finds what is
@@ -151,10 +315,12 @@ Each handler runs in its own `step.run`, so failures isolate.
 
 ## Options reference
 
-Every factory takes a typed options object. See `src/types.ts` for the full surface — defaults documented there:
+Every factory takes a typed options object. See `src/types.ts` for the full surface — defaults documented there. All of them also accept `onTerminalFailure?` and `concurrency?`:
 
-- `RevalidateOnPublishOptions` — `revalidate?`, `urlBuilders?`, `collectionTags?`, `id?`
-- `ExecuteScheduledPublishesOptions` — `collections[]`, `publishingServerUrl`, `publishingApiKey?` (env fallback), `schedule?` (default `*/5 * * * *`), `id?`
+- `RevalidateOnPublishOptions` — `urlBuilders` (required), `cacheTags?`, `collectionTags?`, `revalidate?`, `id?`
+- `TagRevalidationOptions` — `cacheTags?`, `revalidateTag?`; per hook, `tags?` and (collection `afterChange`) `operations?`
+- `PublishAtScheduledTimeOptions` — `collections[]`, `publish`, `maxSleepMs?` (default six days), `id?`
+- `ExecuteScheduledPublishesOptions` — `collections[]`, `publish`, `schedule?` (default `*/5 * * * *`), `overdueByMs?` (default 0), `id?`
 - `ExpireStaleApprovalsOptions` — `collectionSlug?` (default `approvals`), `schedule?` (default `0 2 * * *`), `id?`
 - `AuditEventEchoOptions` — `handlers?`, `id?`
 - `HealthcheckOptions` — `checks[]`, `schedule?` (default `*/15 * * * *`), `onFailure?`, `id?`
@@ -162,6 +328,6 @@ Every factory takes a typed options object. See `src/types.ts` for the full surf
 ## Related packages
 
 - `@forumone/throughline-core` — required peer; provides the audit writer the approval-expiration cron uses
-- `@forumone/throughline-publishing` — emits the publishing events the revalidation cron subscribes to
+- `@forumone/throughline-publishing` — emits the publishing events the revalidation workflow subscribes to, and provides the `isDraftWrite` predicate the tag hooks use (a dependency)
 - `@forumone/throughline-approvals` — owns the approvals collection the expiration cron reads
 - `@forumone/throughline-email` (C11) — will subscribe to `notification/send-approval-*`

package/dist/cache-tags.d.ts

@@ -0,0 +1,31 @@
+/** How a site names its tags. Each builder is optional; omitted ones use the default. */
+export interface CacheTagScheme {
+    /**
+     * The tag for cached reads derived from a collection's documents.
+     * Default: the bare slug (`pages`), which is also what
+     * `createRevalidateOnPublishFunction` has always fired.
+     */
+    collection?: (slug: string) => string;
+    /** The tag for a cached global. Default: `global_<slug>`. */
+    global?: (slug: string) => string;
+}
+/** The built scheme. Pass the same instance to writers and readers. */
+export interface CacheTags {
+    collection(slug: string): string;
+    global(slug: string): string;
+}
+/**
+ * Builds the tag scheme both ends of the cache use.
+ *
+ * ```ts
+ * // src/lib/cache-tags.ts — imported by payload.config.ts and by readers
+ * export const cacheTags = createCacheTags()
+ *
+ * // a reader
+ * unstable_cache(load, ['navigation'], { tags: [cacheTags.global('navigation')] })
+ * ```
+ */
+export declare function createCacheTags(scheme?: CacheTagScheme): CacheTags;
+/** The scheme every writer uses when it is given none. */
+export declare const defaultCacheTags: CacheTags;
+//# sourceMappingURL=cache-tags.d.ts.map

package/dist/cache-tags.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cache-tags.d.ts","sourceRoot":"","sources":["../src/cache-tags.ts"],"names":[],"mappings":"AAqBA,yFAAyF;AACzF,MAAM,WAAW,cAAc;IAC7B;;;;OAIG;IACH,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAA;IACrC,6DAA6D;IAC7D,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAA;CAClC;AAED,uEAAuE;AACvE,MAAM,WAAW,SAAS;IACxB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAA;IAChC,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAA;CAC7B;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,eAAe,CAAC,MAAM,GAAE,cAAmB,GAAG,SAAS,CAOtE;AAED,0DAA0D;AAC1D,eAAO,MAAM,gBAAgB,EAAE,SAA6B,CAAA"}

package/dist/cache-tags.js

@@ -0,0 +1,53 @@
+/*
+Next cache tags, named in one place.
+
+A tag is one string with two ends: the reader that caches under it
+(`unstable_cache(..., { tags })`, `cacheTag()`, `fetch(..., { next: { tags } })`)
+and the writer that drops it (the hooks in `revalidate-tag-hooks.ts`, and
+`createRevalidateOnPublishFunction`). Nothing in the type system connects the two
+ends. Name them differently and everything compiles, every test passes, the hook
+runs, and the page never refreshes — the first site on this suite shipped a hook
+that had never invalidated anything for exactly that reason.
+
+So both ends build tags from one object. A site makes it once, in a module its
+`payload.config.ts` and its frontend both import, and hands it to the hooks and
+the readers alike.
+
+Deliberately dependency-free, and published on its own subpath
+(`@forumone/throughline-workflows/cache-tags`): one of its importers is
+`payload.config.ts` and the other is frontend code, and neither should pull in
+the other's world to name a string.
+*/
+/**
+ * Builds the tag scheme both ends of the cache use.
+ *
+ * ```ts
+ * // src/lib/cache-tags.ts — imported by payload.config.ts and by readers
+ * export const cacheTags = createCacheTags()
+ *
+ * // a reader
+ * unstable_cache(load, ['navigation'], { tags: [cacheTags.global('navigation')] })
+ * ```
+ */
+export function createCacheTags(scheme = {}) {
+    const collection = scheme.collection ?? ((slug) => slug);
+    const global = scheme.global ?? ((slug) => `global_${slug}`);
+    return {
+        collection: (slug) => nonEmpty(collection(slug), 'collection', slug),
+        global: (slug) => nonEmpty(global(slug), 'global', slug),
+    };
+}
+/** The scheme every writer uses when it is given none. */
+export const defaultCacheTags = createCacheTags();
+/*
+An empty tag is the silent version of the mismatch above: `revalidateTag('')`
+does nothing and says nothing. A builder that produces one is a bug in the
+site's configuration, and the place to hear about it is the first call.
+*/
+function nonEmpty(tag, kind, slug) {
+    if (typeof tag !== 'string' || tag.length === 0) {
+        throw new Error(`The cache tag scheme built an empty ${kind} tag for "${slug}".`);
+    }
+    return tag;
+}
+//# sourceMappingURL=cache-tags.js.map

package/dist/cache-tags.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cache-tags.js","sourceRoot":"","sources":["../src/cache-tags.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;EAmBE;AAoBF;;;;;;;;;;GAUG;AACH,MAAM,UAAU,eAAe,CAAC,SAAyB,EAAE;IACzD,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,IAAI,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,CAAA;IAChE,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,UAAU,IAAI,EAAE,CAAC,CAAA;IACpE,OAAO;QACL,UAAU,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC;QACpE,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC;KACzD,CAAA;AACH,CAAC;AAED,0DAA0D;AAC1D,MAAM,CAAC,MAAM,gBAAgB,GAAc,eAAe,EAAE,CAAA;AAE5D;;;;EAIE;AACF,SAAS,QAAQ,CAAC,GAAW,EAAE,IAAY,EAAE,IAAY;IACvD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,uCAAuC,IAAI,aAAa,IAAI,IAAI,CAAC,CAAA;IACnF,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC"}

package/dist/execute-scheduled-publishes.d.ts

@@ -3,9 +3,13 @@ import type { ExecuteScheduledPublishesOptions } from './types.js';
 /**
  * Cron-driven scheduled publish executor. Every tick (default: every 5
  * minutes) the function looks for documents in any of the configured
- * collections whose `_status` is still `draft` and whose
+ * collections whose latest version is still a draft and whose
  * `scheduledPublishAt` has passed, and calls `options.publish` for each.
  *
+ * `createPublishAtScheduledTimeFunction` does the same job on time and without
+ * polling. Run alongside it, this is the backstop — set `overdueByMs` and a
+ * slow schedule, and it only ever finds a document whose event went missing.
+ *
  * `publish` must go through the publishing pipeline — see the option's own
  * documentation for the wiring. That is what makes a scheduled publish get the
  * same composition / accessibility / approval checks as an interactive one.

package/dist/execute-scheduled-publishes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"execute-scheduled-publishes.d.ts","sourceRoot":"","sources":["../src/execute-scheduled-publishes.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAA;AAC9C,OAAO,KAAK,EAAE,gCAAgC,EAAE,MAAM,YAAY,CAAA;AAWlE;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,uCAAuC,CACrD,OAAO,EAAE,gCAAgC,GACxC,eAAe,CAAC,GAAG,CAuFrB"}
+{"version":3,"file":"execute-scheduled-publishes.d.ts","sourceRoot":"","sources":["../src/execute-scheduled-publishes.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAA;AAC9C,OAAO,KAAK,EAAE,gCAAgC,EAAE,MAAM,YAAY,CAAA;AAWlE;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,uCAAuC,CACrD,OAAO,EAAE,gCAAgC,GACxC,eAAe,CAAC,GAAG,CAiGrB"}

package/dist/execute-scheduled-publishes.js

@@ -4,9 +4,13 @@ const REASONING = 'Scheduled publish executed by workflow cron';
 /**
  * Cron-driven scheduled publish executor. Every tick (default: every 5
  * minutes) the function looks for documents in any of the configured
- * collections whose `_status` is still `draft` and whose
+ * collections whose latest version is still a draft and whose
  * `scheduledPublishAt` has passed, and calls `options.publish` for each.
  *
+ * `createPublishAtScheduledTimeFunction` does the same job on time and without
+ * polling. Run alongside it, this is the backstop — set `overdueByMs` and a
+ * slow schedule, and it only ever finds a document whose event went missing.
+ *
  * `publish` must go through the publishing pipeline — see the option's own
  * documentation for the wiring. That is what makes a scheduled publish get the
  * same composition / accessibility / approval checks as an interactive one.
@@ -33,7 +37,7 @@ export function createExecuteScheduledPublishesFunction(options) {
         ...failureOptions(options, 1),
         triggers: [{ cron: schedule }],
     }, async ({ step, logger }) => {
-        const nowIso = new Date().toISOString();
+        const dueBy = new Date(Date.now() - (options.overdueByMs ?? 0)).toISOString();
         let publishedCount = 0;
         let blockedCount = 0;
         for (const config of options.collections) {
@@ -46,9 +50,19 @@ export function createExecuteScheduledPublishesFunction(options) {
                         and: [
                             { [statusField]: { equals: 'draft' } },
                             { [scheduledField]: { exists: true } },
-                            { [scheduledField]: { less_than_equal: nowIso } },
+                            { [scheduledField]: { less_than_equal: dueBy } },
                         ],
                     },
+                    /*
+                    The latest version, not the main row. A schedule is set by a draft
+                    save, and Payload writes a draft save to the versions table alone —
+                    so without this the poll read a column that the admin never wrote,
+                    and only a schedule set over MCP, by a non-draft update, was ever
+                    found. It is also what lets a revision of a live document be
+                    scheduled: its latest version is a draft even while the main row
+                    says `published`.
+                    */
+                    draft: true,
                     limit: 100,
                 });
                 return result.docs.map((doc) => ({

package/dist/execute-scheduled-publishes.js.map

@@ -1 +1 @@
-{"version":3,"file":"execute-scheduled-publishes.js","sourceRoot":"","sources":["../src/execute-scheduled-publishes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AAI3C,MAAM,gBAAgB,GAAG,aAAa,CAAA;AACtC,MAAM,SAAS,GAAG,6CAA6C,CAAA;AAQ/D;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,uCAAuC,CACrD,OAAyC;IAEzC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,gBAAgB,CAAA;IAErD,OAAO,OAAO,CAAC,OAAO,CAAC,cAAc,CACnC;QACE,EAAE,EAAE,OAAO,CAAC,EAAE,IAAI,6BAA6B;QAC/C;;;;;;;;;UASE;QACF,GAAG,cAAc,CAAC,OAAO,EAAE,CAAC,CAAC;QAC7B,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;KAC/B,EACD,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE;QACzB,MAAM,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;QACvC,IAAI,cAAc,GAAG,CAAC,CAAA;QACtB,IAAI,YAAY,GAAG,CAAC,CAAA;QAEpB,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;YACzC,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,IAAI,SAAS,CAAA;YACnD,MAAM,cAAc,GAAG,MAAM,CAAC,cAAc,IAAI,oBAAoB,CAAA;YAEpE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,YAAY,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,IAAuB,EAAE;gBAClF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;oBACxC,UAAU,EAAE,MAAM,CAAC,IAAI;oBACvB,KAAK,EAAE;wBACL,GAAG,EAAE;4BACH,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE;4BACtC,EAAE,CAAC,cAAc,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;4BACtC,EAAE,CAAC,cAAc,CAAC,EAAE,EAAE,eAAe,EAAE,MAAM,EAAE,EAAE;yBAClD;qBACF;oBACD,KAAK,EAAE,GAAG;iBACX,CAAC,CAAA;gBACF,OAAQ,MAAM,CAAC,IAAuC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;oBACnE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;oBACrB,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC;oBACxC,UAAU,EAAE,MAAM,CAAC,IAAI;iBACxB,CAAC,CAAC,CAAA;YACL,CAAC,CAAC,CAAA;YAEF,KAAK,MAAM,GAAG,IAAI,GAAG,EAAE,CAAC;gBACtB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,GAAG,CAC5B,WAAW,MAAM,CAAC,IAAI,IAAI,GAAG,CAAC,EAAE,EAAE,EAClC,KAAK,IAAgD,EAAE;oBACrD,IAAI,MAAM,CAAA;oBACV,IAAI,CAAC;wBACH,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC;4BAC7B,UAAU,EAAE,GAAG,CAAC,UAAU;4BAC1B,EAAE,EAAE,GAAG,CAAC,EAAE;4BACV,SAAS,EAAE,SAAS;yBACrB,CAAC,CAAA;oBACJ,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,MAAM,CAAC,KAAK,CAAC,yBAAyB,EAAE;4BACtC,QAAQ,EAAE,GAAG,CAAC,KAAK;4BACnB,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;yBAC9D,CAAC,CAAA;wBACF,OAAO,OAAO,CAAA;oBAChB,CAAC;oBAED,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;wBACtB,MAAM,CAAC,IAAI,CAAC,qCAAqC,EAAE;4BACjD,QAAQ,EAAE,GAAG,CAAC,KAAK;4BACnB,MAAM,EAAE,MAAM,CAAC,MAAM;yBACtB,CAAC,CAAA;wBACF,OAAO,SAAS,CAAA;oBAClB,CAAC;oBAED,MAAM,CAAC,IAAI,CAAC,6BAA6B,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAA;oBACnE,OAAO,WAAW,CAAA;gBACpB,CAAC,CACF,CAAA;gBACD,IAAI,OAAO,KAAK,WAAW;oBAAE,cAAc,IAAI,CAAC,CAAA;gBAChD,IAAI,OAAO,KAAK,SAAS;oBAAE,YAAY,IAAI,CAAC,CAAA;YAC9C,CAAC;QACH,CAAC;QAED,MAAM,CAAC,IAAI,CAAC,iCAAiC,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC,CAAA;QAChF,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,CAAA;IACzC,CAAC,CACF,CAAA;AACH,CAAC"}
+{"version":3,"file":"execute-scheduled-publishes.js","sourceRoot":"","sources":["../src/execute-scheduled-publishes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AAI3C,MAAM,gBAAgB,GAAG,aAAa,CAAA;AACtC,MAAM,SAAS,GAAG,6CAA6C,CAAA;AAQ/D;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,uCAAuC,CACrD,OAAyC;IAEzC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,gBAAgB,CAAA;IAErD,OAAO,OAAO,CAAC,OAAO,CAAC,cAAc,CACnC;QACE,EAAE,EAAE,OAAO,CAAC,EAAE,IAAI,6BAA6B;QAC/C;;;;;;;;;UASE;QACF,GAAG,cAAc,CAAC,OAAO,EAAE,CAAC,CAAC;QAC7B,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;KAC/B,EACD,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE;QACzB,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,WAAW,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAA;QAC7E,IAAI,cAAc,GAAG,CAAC,CAAA;QACtB,IAAI,YAAY,GAAG,CAAC,CAAA;QAEpB,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;YACzC,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,IAAI,SAAS,CAAA;YACnD,MAAM,cAAc,GAAG,MAAM,CAAC,cAAc,IAAI,oBAAoB,CAAA;YAEpE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,YAAY,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,IAAuB,EAAE;gBAClF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;oBACxC,UAAU,EAAE,MAAM,CAAC,IAAI;oBACvB,KAAK,EAAE;wBACL,GAAG,EAAE;4BACH,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE;4BACtC,EAAE,CAAC,cAAc,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;4BACtC,EAAE,CAAC,cAAc,CAAC,EAAE,EAAE,eAAe,EAAE,KAAK,EAAE,EAAE;yBACjD;qBACF;oBACD;;;;;;;;sBAQE;oBACF,KAAK,EAAE,IAAI;oBACX,KAAK,EAAE,GAAG;iBACX,CAAC,CAAA;gBACF,OAAQ,MAAM,CAAC,IAAuC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;oBACnE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;oBACrB,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC;oBACxC,UAAU,EAAE,MAAM,CAAC,IAAI;iBACxB,CAAC,CAAC,CAAA;YACL,CAAC,CAAC,CAAA;YAEF,KAAK,MAAM,GAAG,IAAI,GAAG,EAAE,CAAC;gBACtB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,GAAG,CAC5B,WAAW,MAAM,CAAC,IAAI,IAAI,GAAG,CAAC,EAAE,EAAE,EAClC,KAAK,IAAgD,EAAE;oBACrD,IAAI,MAAM,CAAA;oBACV,IAAI,CAAC;wBACH,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC;4BAC7B,UAAU,EAAE,GAAG,CAAC,UAAU;4BAC1B,EAAE,EAAE,GAAG,CAAC,EAAE;4BACV,SAAS,EAAE,SAAS;yBACrB,CAAC,CAAA;oBACJ,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,MAAM,CAAC,KAAK,CAAC,yBAAyB,EAAE;4BACtC,QAAQ,EAAE,GAAG,CAAC,KAAK;4BACnB,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;yBAC9D,CAAC,CAAA;wBACF,OAAO,OAAO,CAAA;oBAChB,CAAC;oBAED,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;wBACtB,MAAM,CAAC,IAAI,CAAC,qCAAqC,EAAE;4BACjD,QAAQ,EAAE,GAAG,CAAC,KAAK;4BACnB,MAAM,EAAE,MAAM,CAAC,MAAM;yBACtB,CAAC,CAAA;wBACF,OAAO,SAAS,CAAA;oBAClB,CAAC;oBAED,MAAM,CAAC,IAAI,CAAC,6BAA6B,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAA;oBACnE,OAAO,WAAW,CAAA;gBACpB,CAAC,CACF,CAAA;gBACD,IAAI,OAAO,KAAK,WAAW;oBAAE,cAAc,IAAI,CAAC,CAAA;gBAChD,IAAI,OAAO,KAAK,SAAS;oBAAE,YAAY,IAAI,CAAC,CAAA;YAC9C,CAAC;QACH,CAAC;QAED,MAAM,CAAC,IAAI,CAAC,iCAAiC,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC,CAAA;QAChF,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,CAAA;IACzC,CAAC,CACF,CAAA;AACH,CAAC"}

package/dist/failure-handler.d.ts

@@ -0,0 +1,38 @@
+import type { Payload } from 'payload';
+import type { Logger } from '@forumone/throughline-core';
+import { type ErrorReporter, type JobFailureWriter } from '@forumone/throughline-core';
+import type { HealthcheckOptions, WorkflowFailureHandler } from './types.js';
+export interface FailureHandlerOptions {
+    /**
+     * The Payload instance whose `jobFailuresPlugin` writer receives the row.
+     * Without one — or without the plugin — the failure is logged and reported
+     * but not recorded.
+     */
+    payload?: Payload | undefined;
+    /** Replaces the writer found on `payload`. */
+    writer?: JobFailureWriter | undefined;
+    /** Default: `reportError` from core, which posts to `ERROR_WEBHOOK_URL`. Pass `false` to not report. */
+    report?: ErrorReporter | false | undefined;
+    /** Default: core's console logger. */
+    logger?: Logger | undefined;
+}
+export interface HealthcheckFailureHandlerOptions extends FailureHandlerOptions {
+    /** The healthcheck function's id, recorded as the failure's source. Default: `'healthcheck'`. */
+    functionId?: string | undefined;
+}
+/**
+ * An `onTerminalFailure` handler for any workflow factory here — or for any
+ * Inngest function, as its `onFailure`.
+ *
+ * ```ts
+ * const onTerminalFailure = createTerminalFailureHandler({ payload })
+ * createExpireStaleApprovalsFunction({ inngest, payload, onTerminalFailure })
+ * ```
+ */
+export declare function createTerminalFailureHandler(options?: FailureHandlerOptions): WorkflowFailureHandler;
+/**
+ * A `HealthcheckOptions.onFailure` handler: once per run with failing checks,
+ * to the same three places.
+ */
+export declare function createHealthcheckFailureHandler(options?: HealthcheckFailureHandlerOptions): NonNullable<HealthcheckOptions['onFailure']>;
+//# sourceMappingURL=failure-handler.d.ts.map

package/dist/failure-handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"failure-handler.d.ts","sourceRoot":"","sources":["../src/failure-handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACtC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAA;AACxD,OAAO,EAOL,KAAK,aAAa,EAGlB,KAAK,gBAAgB,EACtB,MAAM,4BAA4B,CAAA;AACnC,OAAO,KAAK,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAA;AAuB5E,MAAM,WAAW,qBAAqB;IACpC;;;;OAIG;IACH,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IAC7B,8CAA8C;IAC9C,MAAM,CAAC,EAAE,gBAAgB,GAAG,SAAS,CAAA;IACrC,wGAAwG;IACxG,MAAM,CAAC,EAAE,aAAa,GAAG,KAAK,GAAG,SAAS,CAAA;IAC1C,sCAAsC;IACtC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAC5B;AAED,MAAM,WAAW,gCAAiC,SAAQ,qBAAqB;IAC7E,iGAAiG;IACjG,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAChC;AAED;;;;;;;;GAQG;AACH,wBAAgB,4BAA4B,CAC1C,OAAO,GAAE,qBAA0B,GAClC,sBAAsB,CAgBxB;AAED;;;GAGG;AACH,wBAAgB,+BAA+B,CAC7C,OAAO,GAAE,gCAAqC,GAC7C,WAAW,CAAC,kBAAkB,CAAC,WAAW,CAAC,CAAC,CAa9C"}

package/dist/failure-handler.js

@@ -0,0 +1,60 @@
+import { buildHealthcheckFailureReport, buildJobFailureReport, defaultLogger, getJobFailureWriter, reportError, summariseReport, } from '@forumone/throughline-core';
+/**
+ * An `onTerminalFailure` handler for any workflow factory here — or for any
+ * Inngest function, as its `onFailure`.
+ *
+ * ```ts
+ * const onTerminalFailure = createTerminalFailureHandler({ payload })
+ * createExpireStaleApprovalsFunction({ inngest, payload, onTerminalFailure })
+ * ```
+ */
+export function createTerminalFailureHandler(options = {}) {
+    return async ({ error, event }) => {
+        let report;
+        try {
+            const data = event?.data;
+            report = buildJobFailureReport({
+                functionId: data?.function_id,
+                runId: data?.run_id,
+                triggerEvent: data?.event?.name,
+                error,
+            });
+        }
+        catch {
+            return;
+        }
+        await dispatch(report, '[job-failed]', options);
+    };
+}
+/**
+ * A `HealthcheckOptions.onFailure` handler: once per run with failing checks,
+ * to the same three places.
+ */
+export function createHealthcheckFailureHandler(options = {}) {
+    return async (failures) => {
+        let report;
+        try {
+            report = buildHealthcheckFailureReport(failures, options.functionId ? { functionId: options.functionId } : {});
+        }
+        catch {
+            return;
+        }
+        await dispatch(report, '[healthcheck-failed]', options);
+    };
+}
+async function dispatch(report, tag, options) {
+    const logger = options.logger ?? defaultLogger;
+    try {
+        // The stack goes to the log and the webhook; the row keeps the message.
+        logger.error(`${tag} ${summariseReport(report)}`, { report });
+    }
+    catch {
+        // Carry on to the other two.
+    }
+    const writer = options.writer ?? (options.payload ? getJobFailureWriter(options.payload) : undefined);
+    const reporter = options.report === false ? undefined : (options.report ?? reportError);
+    // Core's writer and reporter never reject. These wrappers are for a host's
+    // own, which may not keep that promise — or may throw before returning one.
+    await Promise.allSettled([(async () => writer?.(report))(), (async () => reporter?.(report))()]);
+}
+//# sourceMappingURL=failure-handler.js.map

package/dist/failure-handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"failure-handler.js","sourceRoot":"","sources":["../src/failure-handler.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,6BAA6B,EAC7B,qBAAqB,EACrB,aAAa,EACb,mBAAmB,EACnB,WAAW,EACX,eAAe,GAKhB,MAAM,4BAA4B,CAAA;AA4CnC;;;;;;;;GAQG;AACH,MAAM,UAAU,4BAA4B,CAC1C,UAAiC,EAAE;IAEnC,OAAO,KAAK,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE;QAChC,IAAI,MAAwB,CAAA;QAC5B,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,KAAK,EAAE,IAAI,CAAA;YACxB,MAAM,GAAG,qBAAqB,CAAC;gBAC7B,UAAU,EAAE,IAAI,EAAE,WAAW;gBAC7B,KAAK,EAAE,IAAI,EAAE,MAAM;gBACnB,YAAY,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI;gBAC/B,KAAK;aACN,CAAC,CAAA;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAM;QACR,CAAC;QACD,MAAM,QAAQ,CAAC,MAAM,EAAE,cAAc,EAAE,OAAO,CAAC,CAAA;IACjD,CAAC,CAAA;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,+BAA+B,CAC7C,UAA4C,EAAE;IAE9C,OAAO,KAAK,EAAE,QAAQ,EAAE,EAAE;QACxB,IAAI,MAAgC,CAAA;QACpC,IAAI,CAAC;YACH,MAAM,GAAG,6BAA6B,CACpC,QAAQ,EACR,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAC7D,CAAA;QACH,CAAC;QAAC,MAAM,CAAC;YACP,OAAM;QACR,CAAC;QACD,MAAM,QAAQ,CAAC,MAAM,EAAE,sBAAsB,EAAE,OAAO,CAAC,CAAA;IACzD,CAAC,CAAA;AACH,CAAC;AAED,KAAK,UAAU,QAAQ,CACrB,MAAmD,EACnD,GAAW,EACX,OAA8B;IAE9B,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,aAAa,CAAA;IAC9C,IAAI,CAAC;QACH,wEAAwE;QACxE,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,eAAe,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAA;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,6BAA6B;IAC/B,CAAC;IAED,MAAM,MAAM,GACV,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,mBAAmB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;IACxF,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,IAAI,WAAW,CAAC,CAAA;IAEvF,2EAA2E;IAC3E,4EAA4E;IAC5E,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,QAAQ,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;AAClG,CAAC"}

package/dist/index.d.ts

@@ -1,8 +1,15 @@
 export { createRevalidateOnPublishFunction } from './revalidate-on-publish.js';
+export { createTagRevalidationHooks } from './revalidate-tag-hooks.js';
+export type { CollectionTagHookOptions, GlobalTagHookOptions, RevalidateTagFn, TagRevalidationHooks, TagRevalidationOptions, TagSelector, } from './revalidate-tag-hooks.js';
+export { createCacheTags, defaultCacheTags } from './cache-tags.js';
+export type { CacheTags, CacheTagScheme } from './cache-tags.js';
 export { createExecuteScheduledPublishesFunction } from './execute-scheduled-publishes.js';
+export { createPublishAtScheduledTimeFunction } from './publish-at-scheduled-time.js';
 export { createExpireStaleApprovalsFunction } from './expire-stale-approvals.js';
 export { createAuditEventEchoFunction } from './audit-event-echo.js';
 export { createHealthcheckFunction, createPayloadReachableCheck, createManifestReachableCheck, } from './healthcheck.js';
 export { failureOptions } from './types.js';
-export type { BaseWorkflowOptions, WorkflowFailureHandler, FailureAwareOptions, RevalidateFn, RevalidatePathsInput, RevalidateOnPublishOptions, ScheduledCollectionConfig, ExecuteScheduledPublishesOptions, ExpireStaleApprovalsOptions, AuditEchoEvent, AuditEchoHandler, AuditEventEchoOptions, HealthcheckDefinition, HealthcheckOptions, HealthcheckResult, } from './types.js';
+export { createHealthcheckFailureHandler, createTerminalFailureHandler, } from './failure-handler.js';
+export type { FailureHandlerOptions, HealthcheckFailureHandlerOptions, } from './failure-handler.js';
+export type { BaseWorkflowOptions, WorkflowFailureHandler, FailureAwareOptions, RevalidateFn, RevalidatePathsInput, RevalidateOnPublishOptions, ScheduledCollectionConfig, ExecuteScheduledPublishesOptions, PublishAtScheduledTimeOptions, ScheduledPublishRequest, ScheduledPublishResult, ExpireStaleApprovalsOptions, AuditEchoEvent, AuditEchoHandler, AuditEventEchoOptions, HealthcheckDefinition, HealthcheckOptions, HealthcheckResult, } from './types.js';
 //# sourceMappingURL=index.d.ts.map