@forumone/throughline 0.0.0-stage → 1.0.0-next.0

package/dist/publishing/checks/alt-text.js

@@ -0,0 +1,63 @@
+/**
+ * Walks the document tree looking for image-shaped objects (anything with
+ * a `url` or `filename` property whose `mimeType`, if present, starts with
+ * `image/`). Flags any whose `alt` is missing or empty.
+ *
+ * Skips an upload's `sizes` map: Payload's generated derivatives carry
+ * `filename` and `mimeType` but never `alt`, which lives on the parent
+ * document. They are renditions of an image already checked, not images in
+ * their own right — walking into them reports one false failure per
+ * configured `imageSize`.
+ *
+ * Heuristic, not exhaustive. A host can add checks via `accessibilityChecks`
+ * and switch a built-in off via `disableAccessibilityChecks`.
+ */
+export const altTextCheck = {
+    name: 'alt-text',
+    run(doc) {
+        const issues = [];
+        walkForImages(doc, (image, path) => {
+            const alt = image['alt'];
+            if (typeof alt !== 'string' || alt.trim() === '') {
+                issues.push({
+                    field: path,
+                    message: `Image at "${path}" is missing alt text`,
+                    severity: 'error',
+                });
+            }
+        });
+        return issues;
+    },
+};
+function walkForImages(value, visit, path = '') {
+    if (!value || typeof value !== 'object')
+        return;
+    if (Array.isArray(value)) {
+        for (let i = 0; i < value.length; i++) {
+            walkForImages(value[i], visit, `${path}[${i}]`);
+        }
+        return;
+    }
+    const obj = value;
+    const isImage = looksLikeImage(obj);
+    if (isImage) {
+        visit(obj, path || '(root)');
+    }
+    for (const key of Object.keys(obj)) {
+        // An image's own derivatives are not separate images.
+        if (isImage && key === 'sizes')
+            continue;
+        walkForImages(obj[key], visit, path ? `${path}.${key}` : key);
+    }
+}
+function looksLikeImage(obj) {
+    // Require an explicit image marker: a `filename` (Payload media uploads
+    // always have one) or an `image/*` mimeType. A bare `{ url }` is too
+    // ambiguous — it's just as likely to be a link, so we leave that to the
+    // link-labels check.
+    const mime = obj['mimeType'];
+    if (typeof mime === 'string')
+        return mime.startsWith('image/');
+    return typeof obj['filename'] === 'string';
+}
+//# sourceMappingURL=alt-text.js.map

package/dist/publishing/checks/alt-text.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"alt-text.js","sourceRoot":"","sources":["../../../src/publishing/checks/alt-text.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,YAAY,GAAuB;IAC9C,IAAI,EAAE,UAAU;IAChB,GAAG,CAAC,GAAG;QACL,MAAM,MAAM,GAAyB,EAAE,CAAA;QACvC,aAAa,CAAC,GAAG,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;YACjC,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,CAAA;YACxB,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;gBACjD,MAAM,CAAC,IAAI,CAAC;oBACV,KAAK,EAAE,IAAI;oBACX,OAAO,EAAE,aAAa,IAAI,uBAAuB;oBACjD,QAAQ,EAAE,OAAO;iBAClB,CAAC,CAAA;YACJ,CAAC;QACH,CAAC,CAAC,CAAA;QACF,OAAO,MAAM,CAAA;IACf,CAAC;CACF,CAAA;AAED,SAAS,aAAa,CACpB,KAAc,EACd,KAA6D,EAC7D,IAAI,GAAG,EAAE;IAET,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAM;IAE/C,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAA;QACjD,CAAC;QACD,OAAM;IACR,CAAC;IAED,MAAM,GAAG,GAAG,KAAgC,CAAA;IAC5C,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,CAAA;IACnC,IAAI,OAAO,EAAE,CAAC;QACZ,KAAK,CAAC,GAAG,EAAE,IAAI,IAAI,QAAQ,CAAC,CAAA;IAC9B,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACnC,sDAAsD;QACtD,IAAI,OAAO,IAAI,GAAG,KAAK,OAAO;YAAE,SAAQ;QACxC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;IAC/D,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,GAA4B;IAClD,wEAAwE;IACxE,qEAAqE;IACrE,wEAAwE;IACxE,qBAAqB;IACrB,MAAM,IAAI,GAAG,GAAG,CAAC,UAAU,CAAC,CAAA;IAC5B,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAA;IAC9D,OAAO,OAAO,GAAG,CAAC,UAAU,CAAC,KAAK,QAAQ,CAAA;AAC5C,CAAC"}

package/dist/publishing/checks/heading-hierarchy.d.ts

@@ -0,0 +1,11 @@
+import type { AccessibilityCheck } from '../options.js';
+/**
+ * Structural heading-hierarchy check. Without rendering the page we can't
+ * fully audit heading levels, but we can flag the most common structural
+ * mistake: multiple Hero blocks (each becomes an h1 in the reference DS).
+ *
+ * Block types are matched case-insensitively against `'hero'` since the
+ * `blockType` field is by convention lower-cased in Payload.
+ */
+export declare const headingHierarchyCheck: AccessibilityCheck;
+//# sourceMappingURL=heading-hierarchy.d.ts.map

package/dist/publishing/checks/heading-hierarchy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"heading-hierarchy.d.ts","sourceRoot":"","sources":["../../../src/publishing/checks/heading-hierarchy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAsB,MAAM,eAAe,CAAA;AAE3E;;;;;;;GAOG;AACH,eAAO,MAAM,qBAAqB,EAAE,kBAuBnC,CAAA"}

package/dist/publishing/checks/heading-hierarchy.js

@@ -0,0 +1,32 @@
+/**
+ * Structural heading-hierarchy check. Without rendering the page we can't
+ * fully audit heading levels, but we can flag the most common structural
+ * mistake: multiple Hero blocks (each becomes an h1 in the reference DS).
+ *
+ * Block types are matched case-insensitively against `'hero'` since the
+ * `blockType` field is by convention lower-cased in Payload.
+ */
+export const headingHierarchyCheck = {
+    name: 'heading-hierarchy',
+    run(doc, collection) {
+        const issues = [];
+        const layoutValue = doc[collection.layoutField];
+        if (!Array.isArray(layoutValue))
+            return issues;
+        const heroCount = layoutValue.filter((block) => {
+            if (!block || typeof block !== 'object')
+                return false;
+            const blockType = block['blockType'];
+            return typeof blockType === 'string' && blockType.toLowerCase() === 'hero';
+        }).length;
+        if (heroCount > 1) {
+            issues.push({
+                field: collection.layoutField,
+                message: `Page has ${heroCount} Hero blocks but should have exactly one (each Hero becomes an h1)`,
+                severity: 'error',
+            });
+        }
+        return issues;
+    },
+};
+//# sourceMappingURL=heading-hierarchy.js.map

package/dist/publishing/checks/heading-hierarchy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"heading-hierarchy.js","sourceRoot":"","sources":["../../../src/publishing/checks/heading-hierarchy.ts"],"names":[],"mappings":"AAEA;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAuB;IACvD,IAAI,EAAE,mBAAmB;IACzB,GAAG,CAAC,GAAG,EAAE,UAAU;QACjB,MAAM,MAAM,GAAyB,EAAE,CAAA;QACvC,MAAM,WAAW,GAAG,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,CAAA;QAC/C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC;YAAE,OAAO,MAAM,CAAA;QAE9C,MAAM,SAAS,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;YAC7C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;gBAAE,OAAO,KAAK,CAAA;YACrD,MAAM,SAAS,GAAI,KAAiC,CAAC,WAAW,CAAC,CAAA;YACjE,OAAO,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,WAAW,EAAE,KAAK,MAAM,CAAA;QAC5E,CAAC,CAAC,CAAC,MAAM,CAAA;QAET,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;YAClB,MAAM,CAAC,IAAI,CAAC;gBACV,KAAK,EAAE,UAAU,CAAC,WAAW;gBAC7B,OAAO,EAAE,YAAY,SAAS,oEAAoE;gBAClG,QAAQ,EAAE,OAAO;aAClB,CAAC,CAAA;QACJ,CAAC;QAED,OAAO,MAAM,CAAA;IACf,CAAC;CACF,CAAA"}

package/dist/publishing/checks/index.d.ts

@@ -0,0 +1,6 @@
+export { altTextCheck } from './alt-text.js';
+export { headingHierarchyCheck } from './heading-hierarchy.js';
+export { linkLabelsCheck } from './link-labels.js';
+/** Built-in accessibility checks the pipeline runs before any user-supplied ones. */
+export declare const BUILT_IN_ACCESSIBILITY_CHECKS: readonly [import("../options.js").AccessibilityCheck, import("../options.js").AccessibilityCheck, import("../options.js").AccessibilityCheck];
+//# sourceMappingURL=index.d.ts.map

package/dist/publishing/checks/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/publishing/checks/index.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAC5C,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAA;AAC9D,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAA;AAElD,qFAAqF;AACrF,eAAO,MAAM,6BAA6B,+IAIhC,CAAA"}

package/dist/publishing/checks/index.js

@@ -0,0 +1,13 @@
+import { altTextCheck } from './alt-text.js';
+import { headingHierarchyCheck } from './heading-hierarchy.js';
+import { linkLabelsCheck } from './link-labels.js';
+export { altTextCheck } from './alt-text.js';
+export { headingHierarchyCheck } from './heading-hierarchy.js';
+export { linkLabelsCheck } from './link-labels.js';
+/** Built-in accessibility checks the pipeline runs before any user-supplied ones. */
+export const BUILT_IN_ACCESSIBILITY_CHECKS = [
+    altTextCheck,
+    headingHierarchyCheck,
+    linkLabelsCheck,
+];
+//# sourceMappingURL=index.js.map

package/dist/publishing/checks/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/publishing/checks/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAC5C,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAA;AAC9D,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAA;AAElD,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAC5C,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAA;AAC9D,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAA;AAElD,qFAAqF;AACrF,MAAM,CAAC,MAAM,6BAA6B,GAAG;IAC3C,YAAY;IACZ,qBAAqB;IACrB,eAAe;CACP,CAAA"}

package/dist/publishing/checks/link-labels.d.ts

@@ -0,0 +1,9 @@
+import type { AccessibilityCheck } from '../options.js';
+/**
+ * Walks the document tree for objects with both `url` and `label` fields and
+ * flags any where the URL is non-empty but the label is missing or empty.
+ * "Click here"-style labels are not flagged (those need a content review,
+ * not a link-label check).
+ */
+export declare const linkLabelsCheck: AccessibilityCheck;
+//# sourceMappingURL=link-labels.d.ts.map

package/dist/publishing/checks/link-labels.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"link-labels.d.ts","sourceRoot":"","sources":["../../../src/publishing/checks/link-labels.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAsB,MAAM,eAAe,CAAA;AAE3E;;;;;GAKG;AACH,eAAO,MAAM,eAAe,EAAE,kBAmB7B,CAAA"}

package/dist/publishing/checks/link-labels.js

@@ -0,0 +1,44 @@
+/**
+ * Walks the document tree for objects with both `url` and `label` fields and
+ * flags any where the URL is non-empty but the label is missing or empty.
+ * "Click here"-style labels are not flagged (those need a content review,
+ * not a link-label check).
+ */
+export const linkLabelsCheck = {
+    name: 'link-labels',
+    run(doc) {
+        const issues = [];
+        walkForLinks(doc, (link, path) => {
+            const url = link['url'];
+            const label = link['label'];
+            const hasUrl = typeof url === 'string' && url.trim() !== '';
+            const hasLabel = typeof label === 'string' && label.trim() !== '';
+            if (hasUrl && !hasLabel) {
+                issues.push({
+                    field: path,
+                    message: `Link at "${path}" has a URL but no label`,
+                    severity: 'error',
+                });
+            }
+        });
+        return issues;
+    },
+};
+function walkForLinks(value, visit, path = '') {
+    if (!value || typeof value !== 'object')
+        return;
+    if (Array.isArray(value)) {
+        for (let i = 0; i < value.length; i++) {
+            walkForLinks(value[i], visit, `${path}[${i}]`);
+        }
+        return;
+    }
+    const obj = value;
+    if ('url' in obj && 'label' in obj) {
+        visit(obj, path || '(root)');
+    }
+    for (const key of Object.keys(obj)) {
+        walkForLinks(obj[key], visit, path ? `${path}.${key}` : key);
+    }
+}
+//# sourceMappingURL=link-labels.js.map

package/dist/publishing/checks/link-labels.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"link-labels.js","sourceRoot":"","sources":["../../../src/publishing/checks/link-labels.ts"],"names":[],"mappings":"AAEA;;;;;GAKG;AACH,MAAM,CAAC,MAAM,eAAe,GAAuB;IACjD,IAAI,EAAE,aAAa;IACnB,GAAG,CAAC,GAAG;QACL,MAAM,MAAM,GAAyB,EAAE,CAAA;QACvC,YAAY,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE;YAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAA;YACvB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,CAAA;YAC3B,MAAM,MAAM,GAAG,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,CAAA;YAC3D,MAAM,QAAQ,GAAG,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,CAAA;YACjE,IAAI,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACxB,MAAM,CAAC,IAAI,CAAC;oBACV,KAAK,EAAE,IAAI;oBACX,OAAO,EAAE,YAAY,IAAI,0BAA0B;oBACnD,QAAQ,EAAE,OAAO;iBAClB,CAAC,CAAA;YACJ,CAAC;QACH,CAAC,CAAC,CAAA;QACF,OAAO,MAAM,CAAA;IACf,CAAC;CACF,CAAA;AAED,SAAS,YAAY,CACnB,KAAc,EACd,KAA4D,EAC5D,IAAI,GAAG,EAAE;IAET,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAM;IAE/C,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAA;QAChD,CAAC;QACD,OAAM;IACR,CAAC;IAED,MAAM,GAAG,GAAG,KAAgC,CAAA;IAC5C,IAAI,KAAK,IAAI,GAAG,IAAI,OAAO,IAAI,GAAG,EAAE,CAAC;QACnC,KAAK,CAAC,GAAG,EAAE,IAAI,IAAI,QAAQ,CAAC,CAAA;IAC9B,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACnC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;IAC9D,CAAC;AACH,CAAC"}

package/dist/publishing/endpoints/admin.d.ts

@@ -0,0 +1,19 @@
+import { type Endpoint } from 'payload';
+export interface CreateAdminEndpointsDeps {
+    /** Route prefix the plugin is mounted under, e.g. `/publishing`. */
+    routePrefix: string;
+    /** Collections registered as publishable; anything else is rejected. */
+    publishableSlugs: Set<string>;
+}
+/**
+ * The admin's path into the pipeline.
+ *
+ * These endpoints authenticate off the Payload session cookie, so `req.user`
+ * is the logged-in editor — no API key in the editorial publish path, and
+ * the audit event records the person rather than a service principal. The
+ * write still goes through the pipeline, and still runs with
+ * `overrideAccess: false`, so neither the policy checks nor the collection's
+ * access control are skipped.
+ */
+export declare function createAdminEndpoints(deps: CreateAdminEndpointsDeps): Endpoint[];
+//# sourceMappingURL=admin.d.ts.map

package/dist/publishing/endpoints/admin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin.d.ts","sourceRoot":"","sources":["../../../src/publishing/endpoints/admin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAY,KAAK,QAAQ,EAAuB,MAAM,SAAS,CAAA;AAatE,MAAM,WAAW,wBAAwB;IACvC,oEAAoE;IACpE,WAAW,EAAE,MAAM,CAAA;IACnB,wEAAwE;IACxE,gBAAgB,EAAE,GAAG,CAAC,MAAM,CAAC,CAAA;CAC9B;AAED;;;;;;;;;GASG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,wBAAwB,GAAG,QAAQ,EAAE,CAuB/E"}

package/dist/publishing/endpoints/admin.js

@@ -0,0 +1,112 @@
+import { APIError } from 'payload';
+import { z } from 'zod';
+import { getPublishingService, toAuthenticatedUser } from '../service.js';
+const BodySchema = z.object({
+    collection: z.string().min(1),
+    id: z.union([z.string().min(1), z.number()]),
+    /** `schedule` only. */
+    publishAt: z.string().datetime({ offset: true }).optional(),
+});
+/**
+ * The admin's path into the pipeline.
+ *
+ * These endpoints authenticate off the Payload session cookie, so `req.user`
+ * is the logged-in editor — no API key in the editorial publish path, and
+ * the audit event records the person rather than a service principal. The
+ * write still goes through the pipeline, and still runs with
+ * `overrideAccess: false`, so neither the policy checks nor the collection's
+ * access control are skipped.
+ */
+export function createAdminEndpoints(deps) {
+    return [
+        {
+            path: `${deps.routePrefix}/publish`,
+            method: 'post',
+            handler: (req) => handle(req, deps, 'publish'),
+        },
+        {
+            path: `${deps.routePrefix}/unpublish`,
+            method: 'post',
+            handler: (req) => handle(req, deps, 'unpublish'),
+        },
+        {
+            path: `${deps.routePrefix}/schedule`,
+            method: 'post',
+            handler: (req) => handle(req, deps, 'schedule'),
+        },
+        {
+            path: `${deps.routePrefix}/unschedule`,
+            method: 'post',
+            handler: (req) => handle(req, deps, 'unschedule'),
+        },
+    ];
+}
+async function handle(req, deps, action) {
+    if (!req.user) {
+        return json({ error: 'You must be logged in to publish.' }, 401);
+    }
+    let raw;
+    try {
+        raw = await req.json?.();
+    }
+    catch {
+        return json({ error: 'Invalid JSON body.' }, 400);
+    }
+    const parsed = BodySchema.safeParse(raw);
+    if (!parsed.success) {
+        return json({ error: 'Expected a JSON body with `collection` and `id`.' }, 400);
+    }
+    const { collection, publishAt } = parsed.data;
+    const id = String(parsed.data.id);
+    if (action === 'schedule' && !publishAt) {
+        return json({ error: 'Expected `publishAt`, an ISO 8601 time, to schedule.' }, 400);
+    }
+    if (!deps.publishableSlugs.has(collection)) {
+        return json({
+            error: `Collection "${collection}" is not registered as publishable. Add it to publishingPlugin's collections option.`,
+        }, 400);
+    }
+    let service;
+    try {
+        service = getPublishingService(req.payload);
+    }
+    catch {
+        return json({ error: 'Publishing server not initialized.' }, 503);
+    }
+    const request = {
+        collection,
+        id,
+        actor: {
+            user: toAuthenticatedUser(req.user),
+            enforceAccessAs: req.user,
+            channel: 'admin',
+        },
+    };
+    try {
+        const result = action === 'publish'
+            ? await service.publish(request)
+            : action === 'unpublish'
+                ? await service.unpublish(request)
+                : action === 'schedule'
+                    ? await service.schedule({ ...request, publishAt: publishAt })
+                    : await service.unschedule(request);
+        // A pipeline block is a real answer, not a transport failure: 200 with
+        // the diagnostic so the admin can render `failedAt` / `reason` /
+        // `issues` / `suggestion` rather than a generic error.
+        return json(result, 200);
+    }
+    catch (error) {
+        if (error instanceof APIError) {
+            return json({ error: error.message }, error.status || 500);
+        }
+        req.payload.logger.error({ err: error }, `[publishing] admin ${action} failed for ${collection}/${id}`);
+        return json({ error: `Could not ${action} this document.` }, 500);
+    }
+}
+function json(body, status) {
+    return new Response(JSON.stringify(body), {
+        status,
+        headers: { 'content-type': 'application/json' },
+    });
+}
+//# sourceMappingURL=admin.js.map

package/dist/publishing/endpoints/admin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin.js","sourceRoot":"","sources":["../../../src/publishing/endpoints/admin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAsC,MAAM,SAAS,CAAA;AACtE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAA;AAEzE,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IAC5C,uBAAuB;IACvB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE;CAC5D,CAAC,CAAA;AAWF;;;;;;;;;GASG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAA8B;IACjE,OAAO;QACL;YACE,IAAI,EAAE,GAAG,IAAI,CAAC,WAAW,UAAU;YACnC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,SAAS,CAAC;SAC/C;QACD;YACE,IAAI,EAAE,GAAG,IAAI,CAAC,WAAW,YAAY;YACrC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,WAAW,CAAC;SACjD;QACD;YACE,IAAI,EAAE,GAAG,IAAI,CAAC,WAAW,WAAW;YACpC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,UAAU,CAAC;SAChD;QACD;YACE,IAAI,EAAE,GAAG,IAAI,CAAC,WAAW,aAAa;YACtC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,YAAY,CAAC;SAClD;KACF,CAAA;AACH,CAAC;AAED,KAAK,UAAU,MAAM,CACnB,GAAmB,EACnB,IAA8B,EAC9B,MAAc;IAEd,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QACd,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,mCAAmC,EAAE,EAAE,GAAG,CAAC,CAAA;IAClE,CAAC;IAED,IAAI,GAAY,CAAA;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,EAAE,CAAA;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,GAAG,CAAC,CAAA;IACnD,CAAC;IAED,MAAM,MAAM,GAAG,UAAU,CAAC,SAAS,CAAC,GAAG,CAAC,CAAA;IACxC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,kDAAkD,EAAE,EAAE,GAAG,CAAC,CAAA;IACjF,CAAC;IAED,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,MAAM,CAAC,IAAI,CAAA;IAC7C,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAEjC,IAAI,MAAM,KAAK,UAAU,IAAI,CAAC,SAAS,EAAE,CAAC;QACxC,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,sDAAsD,EAAE,EAAE,GAAG,CAAC,CAAA;IACrF,CAAC;IAED,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3C,OAAO,IAAI,CACT;YACE,KAAK,EAAE,eAAe,UAAU,sFAAsF;SACvH,EACD,GAAG,CACJ,CAAA;IACH,CAAC;IAED,IAAI,OAAO,CAAA;IACX,IAAI,CAAC;QACH,OAAO,GAAG,oBAAoB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,oCAAoC,EAAE,EAAE,GAAG,CAAC,CAAA;IACnE,CAAC;IAED,MAAM,OAAO,GAAG;QACd,UAAU;QACV,EAAE;QACF,KAAK,EAAE;YACL,IAAI,EAAE,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC;YACnC,eAAe,EAAE,GAAG,CAAC,IAAI;YACzB,OAAO,EAAE,OAAgB;SAC1B;KACF,CAAA;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GACV,MAAM,KAAK,SAAS;YAClB,CAAC,CAAC,MAAM,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC;YAChC,CAAC,CAAC,MAAM,KAAK,WAAW;gBACtB,CAAC,CAAC,MAAM,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC;gBAClC,CAAC,CAAC,MAAM,KAAK,UAAU;oBACrB,CAAC,CAAC,MAAM,OAAO,CAAC,QAAQ,CAAC,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,SAAU,EAAE,CAAC;oBAC/D,CAAC,CAAC,MAAM,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAA;QAC3C,uEAAuE;QACvE,iEAAiE;QACjE,uDAAuD;QACvD,OAAO,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC1B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,QAAQ,EAAE,CAAC;YAC9B,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE,KAAK,CAAC,MAAM,IAAI,GAAG,CAAC,CAAA;QAC5D,CAAC;QACD,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CACtB,EAAE,GAAG,EAAE,KAAK,EAAE,EACd,sBAAsB,MAAM,eAAe,UAAU,IAAI,EAAE,EAAE,CAC9D,CAAA;QACD,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,aAAa,MAAM,iBAAiB,EAAE,EAAE,GAAG,CAAC,CAAA;IACnE,CAAC;AACH,CAAC;AAED,SAAS,IAAI,CAAC,IAAa,EAAE,MAAc;IACzC,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE;QACxC,MAAM;QACN,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;KAChD,CAAC,CAAA;AACJ,CAAC"}

package/dist/publishing/events.d.ts

@@ -0,0 +1,16 @@
+import type { Inngest } from 'inngest';
+type EventPayload = Parameters<Inngest['send']>[0];
+/**
+ * Emits an Inngest event without letting a transport failure fail the action
+ * that already completed. Returns a warning message on failure, `null` on
+ * success.
+ *
+ * Publishing writes the document first and emits afterwards. The event is a
+ * consequence of the write, not a step in it — if the emission fails the
+ * document is still published. Throwing here would tell an editor their
+ * change didn't go live when it did, and the obvious response to that is to
+ * click Publish again on content that is already live.
+ */
+export declare function sendEventSafely(inngest: Inngest, event: EventPayload): Promise<string | null>;
+export {};
+//# sourceMappingURL=events.d.ts.map

package/dist/publishing/events.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.d.ts","sourceRoot":"","sources":["../../src/publishing/events.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AAEtC,KAAK,YAAY,GAAG,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;AAElD;;;;;;;;;;GAUG;AACH,wBAAsB,eAAe,CACnC,OAAO,EAAE,OAAO,EAChB,KAAK,EAAE,YAAY,GAClB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAQxB"}

package/dist/publishing/events.js

@@ -0,0 +1,30 @@
+/**
+ * Emits an Inngest event without letting a transport failure fail the action
+ * that already completed. Returns a warning message on failure, `null` on
+ * success.
+ *
+ * Publishing writes the document first and emits afterwards. The event is a
+ * consequence of the write, not a step in it — if the emission fails the
+ * document is still published. Throwing here would tell an editor their
+ * change didn't go live when it did, and the obvious response to that is to
+ * click Publish again on content that is already live.
+ */
+export async function sendEventSafely(inngest, event) {
+    try {
+        await inngest.send(event);
+        return null;
+    }
+    catch (error) {
+        const name = eventName(event);
+        return `The ${name} event could not be sent, so revalidation and integrations may not have run: ${describeError(error)}`;
+    }
+}
+function eventName(event) {
+    if (Array.isArray(event))
+        return event[0]?.name ?? 'publishing';
+    return event.name ?? 'publishing';
+}
+function describeError(error) {
+    return error instanceof Error ? error.message : String(error);
+}
+//# sourceMappingURL=events.js.map

package/dist/publishing/events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.js","sourceRoot":"","sources":["../../src/publishing/events.ts"],"names":[],"mappings":"AAIA;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,OAAgB,EAChB,KAAmB;IAEnB,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACzB,OAAO,IAAI,CAAA;IACb,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,CAAA;QAC7B,OAAO,OAAO,IAAI,gFAAgF,aAAa,CAAC,KAAK,CAAC,EAAE,CAAA;IAC1H,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,KAAmB;IACpC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,YAAY,CAAA;IAC/D,OAAQ,KAA2B,CAAC,IAAI,IAAI,YAAY,CAAA;AAC1D,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AAC/D,CAAC"}

package/dist/publishing/hooks/block-status-writes.d.ts

@@ -0,0 +1,52 @@
+import type { CollectionBeforeChangeHook } from 'payload';
+/**
+ * The trust boundary. This `beforeChange` hook rejects every update that
+ * changes whether a document is live, unless the request explicitly carries
+ * the `bypassPublishingServer` context flag (set by the pipeline's
+ * `executeStep`).
+ *
+ * Without this hook, the Payload MCP could let Claude flip a document to
+ * `published` directly, sidestepping every check the publishing server
+ * exists to enforce. With it, the only sanctioned path is the pipeline.
+ *
+ * Three details of Payload's update pipeline shape this:
+ *
+ * 1. `data` is the existing document merged with the incoming changes, so
+ *    `_status` is present on essentially every update — an ordinary field
+ *    edit on a published document arrives carrying `_status: 'published'`.
+ *    The presence of `_status` therefore means nothing on its own.
+ *
+ * 2. Payload injects `data._status = 'draft'` into every `draft: true`
+ *    update before this hook runs, so a draft save of a published document
+ *    arrives looking like an unpublish. `createRecordDraftWritesHook`
+ *    captures the operation's real `draft` flag to tell them apart; both
+ *    hooks must be installed together.
+ *
+ * 3. `originalDoc` is the *latest version*, not the live document. Once any
+ *    draft version exists on a published document, `originalDoc._status` is
+ *    `'draft'` while the document is still live — so comparing against it
+ *    reads a genuine unpublish as a harmless no-op.
+ *
+ * So the question asked here is narrow and concrete: **would this write
+ * change what the public sees?** A draft write never does. A non-draft
+ * write does when it takes a live document down, or when it puts content
+ * live — including promoting a pending draft, which leaves `_status` on
+ * `published` throughout and so cannot be caught by comparing statuses
+ * alone.
+ *
+ * One non-draft `published` write over a pending draft is harmless: one
+ * whose content is exactly what is already live. That is Payload's own
+ * "Revert to published", which reads the live document and writes it back
+ * unchanged to discard the draft — the public sees nothing new, so there is
+ * nothing for the pipeline to check.
+ *
+ * Moving a document to the trash is the same question asked a different way.
+ * On a collection with `trash: true` it is an update that sets `deletedAt`,
+ * and every read then leaves the document out — so trashing a live document
+ * takes it off the site. `_status` stays `published` throughout, so without
+ * its own check it passed as an ordinary edit, and the page came down with no
+ * policy check, no `unpublished` event and nothing to drop the cached copy.
+ * It is refused while the document is live: unpublish, then trash.
+ */
+export declare function createBlockStatusWritesHook(): CollectionBeforeChangeHook;
+//# sourceMappingURL=block-status-writes.d.ts.map

package/dist/publishing/hooks/block-status-writes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"block-status-writes.d.ts","sourceRoot":"","sources":["../../../src/publishing/hooks/block-status-writes.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,0BAA0B,EAAkB,MAAM,SAAS,CAAA;AAGzE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgDG;AACH,wBAAgB,2BAA2B,IAAI,0BAA0B,CA2DxE"}