@forumone/throughline 0.0.0-stage → 1.0.0-next.0

package/dist/publishing/jobs/revalidate-tag-hooks.js

@@ -0,0 +1,116 @@
+import { isDraftWrite } from '../hooks/draft-writes.js';
+import { defaultCacheTags } from '../../cache-tags.js';
+import { IMMEDIATE, isOutsideNextRequest, loadNextCache } from './next-revalidate.js';
+/**
+ * Builds the tag-revalidation hooks for one tag scheme.
+ *
+ * ```ts
+ * import { createTagRevalidationHooks } from '@forumone/throughline/publishing'
+ * import { cacheTags } from './lib/cache-tags'
+ *
+ * const revalidation = createTagRevalidationHooks({ cacheTags })
+ *
+ * const Pages: CollectionConfig = {
+ *   slug: 'pages',
+ *   hooks: {
+ *     afterChange: [revalidation.afterCollectionChange()],
+ *     afterDelete: [revalidation.afterCollectionDelete()],
+ *   },
+ *   ...
+ * }
+ * const Navigation: GlobalConfig = {
+ *   slug: 'navigation',
+ *   hooks: { afterChange: [revalidation.afterGlobalChange()] },
+ *   ...
+ * }
+ * ```
+ *
+ * A hook never throws. Failing it would roll back the editor's save over a
+ * cache miss. A failure is logged at `error` instead, and the one expected
+ * failure — running outside a Next request, as seeds, migrations and the CLI
+ * do — at `debug`.
+ */
+export function createTagRevalidationHooks(options = {}) {
+    const cacheTags = options.cacheTags ?? defaultCacheTags;
+    const revalidateTag = options.revalidateTag ?? nextRevalidateTag;
+    async function drop(tags, req) {
+        for (const tag of new Set(tags)) {
+            try {
+                await revalidateTag(tag);
+            }
+            catch (error) {
+                /*
+                Outside Next there is no server to be stale, so that one is noise.
+                Anything else means the cache did *not* clear while a server was
+                running — a real fault, so it is logged loudly. It is still not
+                thrown: an `afterChange` that throws fails the editor's save.
+                */
+                if (isOutsideNextRequest(error)) {
+                    req.payload.logger.debug({ tag }, 'Skipped cache revalidation: not inside a Next request.');
+                }
+                else {
+                    req.payload.logger.error({ err: error, tag }, 'Failed to revalidate a cache tag; the cached copy is stale.');
+                }
+            }
+        }
+    }
+    return {
+        afterCollectionChange(hookOptions = {}) {
+            const select = hookOptions.tags ?? ((t, slug) => [t.collection(slug)]);
+            const operations = new Set(hookOptions.operations ?? ['create', 'update']);
+            return async ({ collection, doc, operation, req }) => {
+                if (!operations.has(operation))
+                    return doc;
+                if (isUnpublishedWrite(req, collection.slug, doc, operation))
+                    return doc;
+                await drop(select(cacheTags, collection.slug), req);
+                return doc;
+            };
+        },
+        afterCollectionDelete(hookOptions = {}) {
+            const select = hookOptions.tags ?? ((t, slug) => [t.collection(slug)]);
+            return async ({ collection, doc, req }) => {
+                await drop(select(cacheTags, collection.slug), req);
+                return doc;
+            };
+        },
+        afterGlobalChange(hookOptions = {}) {
+            const select = hookOptions.tags ?? ((t, slug) => [t.global(slug)]);
+            return async ({ doc, global, req }) => {
+                await drop(select(cacheTags, global.slug), req);
+                return doc;
+            };
+        },
+    };
+}
+/*
+A write the public cannot see changes nothing cached, so there is nothing to
+drop — and with autosave on, "a draft save" is every few seconds of an open
+editor. Without this, one editing session evicts the tag over and over and every
+request in between pays a cold read for content that did not change.
+
+`isDraftWrite` is publishing's own predicate, the one its trust boundary uses.
+An `afterChange` hook cannot answer this for itself: Payload sets
+`data._status = 'draft'` on any `draft: true` update before hooks run, and
+`previousDoc` is the latest *version*, so a draft save of a published document
+and an unpublish of it look the same from in here. The publishing plugin records
+the operation's real `draft` argument in `beforeOperation`. That is recorded for
+the collections the plugin manages; on any other collection `isDraftWrite` is
+false and the hook drops, which is the safe direction.
+
+An unpublish is not a draft write and still drops — it is the case that would
+otherwise leave a cached link pointing at a 404.
+
+A *create* that lands as a draft is unambiguous on its own: nothing published
+existed a moment ago, so nothing cached can be about it.
+*/
+function isUnpublishedWrite(req, collectionSlug, doc, operation) {
+    if (operation === 'create')
+        return doc?._status === 'draft';
+    return isDraftWrite(req, collectionSlug, doc?.id);
+}
+async function nextRevalidateTag(tag) {
+    const { revalidateTag } = await loadNextCache();
+    revalidateTag(tag, IMMEDIATE);
+}
+//# sourceMappingURL=revalidate-tag-hooks.js.map

package/dist/publishing/jobs/revalidate-tag-hooks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"revalidate-tag-hooks.js","sourceRoot":"","sources":["../../../src/publishing/jobs/revalidate-tag-hooks.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAA;AACvD,OAAO,EAAkB,gBAAgB,EAAE,MAAM,qBAAqB,CAAA;AACtE,OAAO,EAAE,SAAS,EAAE,oBAAoB,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAA;AAoErF;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,UAAU,0BAA0B,CACxC,UAAkC,EAAE;IAEpC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,gBAAgB,CAAA;IACvD,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,iBAAiB,CAAA;IAEhE,KAAK,UAAU,IAAI,CAAC,IAAuB,EAAE,GAAmB;QAC9D,KAAK,MAAM,GAAG,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAChC,IAAI,CAAC;gBACH,MAAM,aAAa,CAAC,GAAG,CAAC,CAAA;YAC1B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf;;;;;kBAKE;gBACF,IAAI,oBAAoB,CAAC,KAAK,CAAC,EAAE,CAAC;oBAChC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CACtB,EAAE,GAAG,EAAE,EACP,wDAAwD,CACzD,CAAA;gBACH,CAAC;qBAAM,CAAC;oBACN,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CACtB,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,EACnB,6DAA6D,CAC9D,CAAA;gBACH,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO;QACL,qBAAqB,CAAC,WAAW,GAAG,EAAE;YACpC,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;YACtE,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,UAAU,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAA;YAE1E,OAAO,KAAK,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,EAAE;gBACnD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC;oBAAE,OAAO,GAAG,CAAA;gBAC1C,IAAI,kBAAkB,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,EAAE,GAAG,EAAE,SAAS,CAAC;oBAAE,OAAO,GAAG,CAAA;gBACxE,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,UAAU,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAA;gBACnD,OAAO,GAAG,CAAA;YACZ,CAAC,CAAA;QACH,CAAC;QAED,qBAAqB,CAAC,WAAW,GAAG,EAAE;YACpC,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;YACtE,OAAO,KAAK,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE;gBACxC,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,UAAU,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAA;gBACnD,OAAO,GAAG,CAAA;YACZ,CAAC,CAAA;QACH,CAAC;QAED,iBAAiB,CAAC,WAAW,GAAG,EAAE;YAChC,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;YAClE,OAAO,KAAK,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE;gBACpC,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAA;gBAC/C,OAAO,GAAG,CAAA;YACZ,CAAC,CAAA;QACH,CAAC;KACF,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;EAoBE;AACF,SAAS,kBAAkB,CACzB,GAAmB,EACnB,cAAsB,EACtB,GAAoD,EACpD,SAA8B;IAE9B,IAAI,SAAS,KAAK,QAAQ;QAAE,OAAO,GAAG,EAAE,OAAO,KAAK,OAAO,CAAA;IAC3D,OAAO,YAAY,CAAC,GAAG,EAAE,cAAc,EAAE,GAAG,EAAE,EAAE,CAAC,CAAA;AACnD,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,GAAW;IAC1C,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,aAAa,EAAE,CAAA;IAC/C,aAAa,CAAC,GAAG,EAAE,SAAS,CAAC,CAAA;AAC/B,CAAC"}

package/dist/publishing/options.d.ts

@@ -0,0 +1,100 @@
+import type { McpToolCollector } from '../mcp/collector.js';
+import type { Inngest } from 'inngest';
+import type { BaseCorePluginOptions } from '../plugin-contract/index.js';
+export interface PublishableCollection {
+    /** Slug of the collection that can be published through this server. */
+    slug: string;
+    /** Field name on the document holding composition blocks. Default: `'layout'`. */
+    layoutField?: string;
+    /** Field name for the SEO group used by required-field checks. Default: `'seo'`. */
+    seoField?: string;
+    /** Field name for the policy group (`requiresApproval`, `embargoedUntil`). Default: `'policy'`. */
+    policyField?: string;
+    /** Field name for the slug. Default: `'slug'`. */
+    slugField?: string;
+    /** Field name for the publish timestamp. Default: `'publishedAt'`. */
+    publishedAtField?: string;
+    /** Field name for a future scheduled publish time. Default: `'scheduledPublishAt'`. */
+    scheduledPublishField?: string;
+    /** Per-collection required fields beyond the built-in SEO/slug checks. */
+    requiredFields?: Array<{
+        path: string;
+        message: string;
+    }>;
+}
+export interface AccessibilityIssue {
+    field?: string | undefined;
+    message: string;
+    severity: 'error' | 'warning';
+}
+export interface AccessibilityCheck {
+    name: string;
+    run: (doc: Record<string, unknown>, collection: ResolvedCollection) => Promise<AccessibilityIssue[]> | AccessibilityIssue[];
+}
+export interface ActiveApproval {
+    id: string;
+    grantedAt: string;
+    grantedBy: string;
+    version: string;
+}
+export interface ApprovalResolver {
+    /** Returns the active granted approval for this document version, or `null`. */
+    getActiveApproval: (collection: string, id: string, version: string) => Promise<ActiveApproval | null>;
+}
+export interface PublishingPluginOptions extends BaseCorePluginOptions {
+    /** Required: collections that can be published through this server. */
+    collections: PublishableCollection[];
+    /** Optional: extra accessibility checks beyond the built-ins. */
+    accessibilityChecks?: AccessibilityCheck[];
+    /**
+     * Optional: names of built-in accessibility checks to skip —
+     * `'alt-text'`, `'heading-hierarchy'`, `'link-labels'`.
+     *
+     * `accessibilityChecks` only appends, so without this a built-in that
+     * misfires on a host's content shape blocks every publish until the
+     * plugin ships a fix. Switch one off here and supply your own.
+     */
+    disableAccessibilityChecks?: string[];
+    /** Optional: resolver consulted when a document's policy requires approval. */
+    approvalResolver?: ApprovalResolver;
+    /** Required: Inngest client used to fire publishing events. */
+    inngest: Inngest;
+    /**
+     * Whether to install the plugin's Publish / Unpublish controls on each
+     * configured collection. Default: `true`.
+     *
+     * Payload's native buttons write `_status` directly, which the plugin's
+     * trust boundary rejects — so with this off, the admin has no working
+     * publish path until the host supplies its own control (see
+     * `publishDocument`).
+     */
+    adminComponents?: boolean;
+    /**
+     * Where to put this server's MCP tools so Payload's own MCP plugin can serve
+     * them.
+     *
+     * Payload ships `@payloadcms/plugin-mcp`, which takes its tools as a config
+     * option — and every tool here is built at `onInit`, because every one closes
+     * over `payload`. `createMcpToolCollector()` from `@forumone/throughline`
+     * bridges that: the host hands the collector's array to `mcpPlugin` at config
+     * time and this plugin fills it at init, which is before any request and
+     * therefore before the plugin reads it.
+     *
+     * Omit it and nothing changes — this server keeps its own `/mcp` endpoint,
+     * which is what lets a host move one server at a time.
+     */
+    mcpTools?: McpToolCollector;
+}
+export type ResolvedCollection = Required<Omit<PublishableCollection, 'requiredFields'>> & Pick<PublishableCollection, 'requiredFields'>;
+/**
+ * Validates plugin options at load time. Throws with targeted messages on
+ * obvious misconfiguration so deploys fail fast rather than the first publish
+ * call returning 503.
+ */
+export declare function validateOptions(options: PublishingPluginOptions): PublishingPluginOptions;
+/**
+ * Returns the collection config with all field-name defaults filled in.
+ * Throws when the slug isn't registered as publishable.
+ */
+export declare function resolveCollection(options: PublishingPluginOptions, slug: string): ResolvedCollection;
+//# sourceMappingURL=options.d.ts.map

package/dist/publishing/options.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"options.d.ts","sourceRoot":"","sources":["../../src/publishing/options.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAA;AAC3D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AAEtC,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAA;AAExE,MAAM,WAAW,qBAAqB;IACpC,wEAAwE;IACxE,IAAI,EAAE,MAAM,CAAA;IACZ,kFAAkF;IAClF,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,oFAAoF;IACpF,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,mGAAmG;IACnG,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,kDAAkD;IAClD,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,sEAAsE;IACtE,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,uFAAuF;IACvF,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAC9B,0EAA0E;IAC1E,cAAc,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAC1D;AAED,MAAM,WAAW,kBAAkB;IACjC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC1B,OAAO,EAAE,MAAM,CAAA;IACf,QAAQ,EAAE,OAAO,GAAG,SAAS,CAAA;CAC9B;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAA;IACZ,GAAG,EAAE,CACH,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC5B,UAAU,EAAE,kBAAkB,KAC3B,OAAO,CAAC,kBAAkB,EAAE,CAAC,GAAG,kBAAkB,EAAE,CAAA;CAC1D;AAED,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAA;IACV,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,EAAE,MAAM,CAAA;CAChB;AAED,MAAM,WAAW,gBAAgB;IAC/B,gFAAgF;IAChF,iBAAiB,EAAE,CACjB,UAAU,EAAE,MAAM,EAClB,EAAE,EAAE,MAAM,EACV,OAAO,EAAE,MAAM,KACZ,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAAA;CACpC;AAED,MAAM,WAAW,uBAAwB,SAAQ,qBAAqB;IACpE,uEAAuE;IACvE,WAAW,EAAE,qBAAqB,EAAE,CAAA;IACpC,iEAAiE;IACjE,mBAAmB,CAAC,EAAE,kBAAkB,EAAE,CAAA;IAC1C;;;;;;;OAOG;IACH,0BAA0B,CAAC,EAAE,MAAM,EAAE,CAAA;IACrC,+EAA+E;IAC/E,gBAAgB,CAAC,EAAE,gBAAgB,CAAA;IACnC,+DAA+D;IAC/D,OAAO,EAAE,OAAO,CAAA;IAChB;;;;;;;;OAQG;IACH,eAAe,CAAC,EAAE,OAAO,CAAA;IAEzB;;;;;;;;;;;;;OAaG;IACH,QAAQ,CAAC,EAAE,gBAAgB,CAAA;CAC5B;AAED,MAAM,MAAM,kBAAkB,GAAG,QAAQ,CAAC,IAAI,CAAC,qBAAqB,EAAE,gBAAgB,CAAC,CAAC,GACtF,IAAI,CAAC,qBAAqB,EAAE,gBAAgB,CAAC,CAAA;AAe/C;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,uBAAuB,GAAG,uBAAuB,CAezF;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,uBAAuB,EAChC,IAAI,EAAE,MAAM,GACX,kBAAkB,CAiBpB"}

package/dist/publishing/options.js

@@ -0,0 +1,56 @@
+import { formatZodIssues } from '../utils/zod-issues.js';
+import { z } from 'zod';
+const PublishableCollectionSchema = z.object({
+    slug: z.string().min(1),
+    layoutField: z.string().optional(),
+    seoField: z.string().optional(),
+    policyField: z.string().optional(),
+    slugField: z.string().optional(),
+    publishedAtField: z.string().optional(),
+    scheduledPublishField: z.string().optional(),
+    requiredFields: z
+        .array(z.object({ path: z.string().min(1), message: z.string().min(1) }))
+        .optional(),
+});
+/**
+ * Validates plugin options at load time. Throws with targeted messages on
+ * obvious misconfiguration so deploys fail fast rather than the first publish
+ * call returning 503.
+ */
+export function validateOptions(options) {
+    if (!options.collections || options.collections.length === 0) {
+        throw new Error('publishingPlugin requires at least one collection in options.collections');
+    }
+    if (!options.inngest) {
+        throw new Error('publishingPlugin requires an Inngest client in options.inngest');
+    }
+    for (const collection of options.collections) {
+        const result = PublishableCollectionSchema.safeParse(collection);
+        if (!result.success) {
+            const issues = formatZodIssues(result.error);
+            throw new Error(`Invalid collection config:\n${issues}`);
+        }
+    }
+    return options;
+}
+/**
+ * Returns the collection config with all field-name defaults filled in.
+ * Throws when the slug isn't registered as publishable.
+ */
+export function resolveCollection(options, slug) {
+    const config = options.collections.find((c) => c.slug === slug);
+    if (!config) {
+        throw new Error(`Collection "${slug}" is not registered as publishable. Add it to publishingPlugin's collections option.`);
+    }
+    return {
+        slug: config.slug,
+        layoutField: config.layoutField ?? 'layout',
+        seoField: config.seoField ?? 'seo',
+        policyField: config.policyField ?? 'policy',
+        slugField: config.slugField ?? 'slug',
+        publishedAtField: config.publishedAtField ?? 'publishedAt',
+        scheduledPublishField: config.scheduledPublishField ?? 'scheduledPublishAt',
+        ...(config.requiredFields ? { requiredFields: config.requiredFields } : {}),
+    };
+}
+//# sourceMappingURL=options.js.map

package/dist/publishing/options.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"options.js","sourceRoot":"","sources":["../../src/publishing/options.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAA;AAGxD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAqGvB,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACvC,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5C,cAAc,EAAE,CAAC;SACd,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;SACxE,QAAQ,EAAE;CACd,CAAC,CAAA;AAEF;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,OAAgC;IAC9D,IAAI,CAAC,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7D,MAAM,IAAI,KAAK,CAAC,0EAA0E,CAAC,CAAA;IAC7F,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAA;IACnF,CAAC;IACD,KAAK,MAAM,UAAU,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;QAC7C,MAAM,MAAM,GAAG,2BAA2B,CAAC,SAAS,CAAC,UAAU,CAAC,CAAA;QAChE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;YAC5C,MAAM,IAAI,KAAK,CAAC,+BAA+B,MAAM,EAAE,CAAC,CAAA;QAC1D,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAA;AAChB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAC/B,OAAgC,EAChC,IAAY;IAEZ,MAAM,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAA;IAC/D,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACb,eAAe,IAAI,sFAAsF,CAC1G,CAAA;IACH,CAAC;IACD,OAAO;QACL,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,QAAQ;QAC3C,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,KAAK;QAClC,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,QAAQ;QAC3C,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,MAAM;QACrC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,IAAI,aAAa;QAC1D,qBAAqB,EAAE,MAAM,CAAC,qBAAqB,IAAI,oBAAoB;QAC3E,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5E,CAAA;AACH,CAAC"}

package/dist/publishing/pipeline/index.d.ts

@@ -0,0 +1,20 @@
+import type { PipelineContext, PipelineResult } from './types.js';
+/**
+ * Runs the full publish pipeline. Stops at the first failing step and
+ * returns its diagnostic; otherwise records success with the publish
+ * timestamp the execute step set.
+ */
+export declare function runPublishPipeline(context: PipelineContext): Promise<PipelineResult>;
+/**
+ * Runs every preflight step (everything but `execute`). Used by
+ * `get_publish_status` to answer "would this publish succeed?" without
+ * mutating anything.
+ *
+ * Warnings are deliberately dropped, as they always were: this answers a
+ * question about whether a publish would be *blocked*, and a warning does not
+ * block. Surfacing them here would be a change to what `get_publish_status`
+ * means, not a tidy-up.
+ */
+export declare function runPreflightPipeline(context: PipelineContext): Promise<PipelineResult>;
+export type { PipelineContext, PipelineResult, PipelineStep, PipelineStepResult } from './types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/publishing/pipeline/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/publishing/pipeline/index.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAgB,MAAM,YAAY,CAAA;AAoE/E;;;;GAIG;AACH,wBAAsB,kBAAkB,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,cAAc,CAAC,CAO1F;AAED;;;;;;;;;GASG;AACH,wBAAsB,oBAAoB,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,cAAc,CAAC,CAG5F;AAED,YAAY,EAAE,eAAe,EAAE,cAAc,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAA"}

package/dist/publishing/pipeline/index.js

@@ -0,0 +1,88 @@
+import { existStep } from './steps/exist.js';
+import { compositionStep } from './steps/composition.js';
+import { accessibilityStep } from './steps/accessibility.js';
+import { requiredFieldsStep } from './steps/required-fields.js';
+import { embargoStep } from './steps/embargo.js';
+import { approvalStep } from './steps/approval.js';
+import { executeStep } from './steps/execute.js';
+const PREFLIGHT_STEPS = [
+    { name: 'exist', step: existStep },
+    { name: 'composition', step: compositionStep },
+    { name: 'accessibility', step: accessibilityStep },
+    { name: 'required-fields', step: requiredFieldsStep },
+    { name: 'embargo', step: embargoStep },
+    { name: 'approval', step: approvalStep },
+];
+const ORDERED_STEPS = [
+    ...PREFLIGHT_STEPS,
+    { name: 'execute', step: executeStep },
+];
+/**
+ * Walks a list of steps, stopping at the first that does not pass.
+ *
+ * The failure envelope — `failedAt` plus whichever of `reason`, `code`,
+ * `issues` and `suggestion` the step supplied — was written out twice, once per
+ * runner, and a field added to one would have been missed by the other. It is
+ * written here once.
+ *
+ * Warnings are collected but not returned in the envelope: what to do with them
+ * differs between the two callers, and that difference is the only reason there
+ * are still two.
+ *
+ * One thing worth knowing before adding a step: a warning cannot currently reach
+ * a *failure* envelope. `execute` is the only step that warns, it runs last, and
+ * its two failure returns carry none — so `runPublishPipeline` spreading
+ * warnings onto a failure is unreachable today. It is kept because the moment a
+ * step both warns and fails, or an earlier step learns to warn, dropping them
+ * would be silent. That is also why there is no test for it: the pipeline has no
+ * way to produce the case.
+ */
+async function runSteps(context, steps) {
+    const warnings = [];
+    for (const { name, step } of steps) {
+        const result = await step(context);
+        if (result.warnings)
+            warnings.push(...result.warnings);
+        if (result.pass)
+            continue;
+        return {
+            failure: {
+                success: false,
+                failedAt: name,
+                ...(result.reason ? { reason: result.reason } : {}),
+                ...(result.code ? { code: result.code } : {}),
+                ...(result.issues ? { issues: result.issues } : {}),
+                ...(result.suggestion ? { suggestion: result.suggestion } : {}),
+            },
+            warnings,
+        };
+    }
+    return { warnings };
+}
+/**
+ * Runs the full publish pipeline. Stops at the first failing step and
+ * returns its diagnostic; otherwise records success with the publish
+ * timestamp the execute step set.
+ */
+export async function runPublishPipeline(context) {
+    const { failure, warnings } = await runSteps(context, ORDERED_STEPS);
+    const carried = warnings.length ? { warnings } : {};
+    if (failure)
+        return { ...failure, ...carried };
+    return { success: true, publishedAt: new Date().toISOString(), ...carried };
+}
+/**
+ * Runs every preflight step (everything but `execute`). Used by
+ * `get_publish_status` to answer "would this publish succeed?" without
+ * mutating anything.
+ *
+ * Warnings are deliberately dropped, as they always were: this answers a
+ * question about whether a publish would be *blocked*, and a warning does not
+ * block. Surfacing them here would be a change to what `get_publish_status`
+ * means, not a tidy-up.
+ */
+export async function runPreflightPipeline(context) {
+    const { failure } = await runSteps(context, PREFLIGHT_STEPS);
+    return failure ?? { success: true };
+}
+//# sourceMappingURL=index.js.map

package/dist/publishing/pipeline/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/publishing/pipeline/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAC5C,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAA;AACxD,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAA;AAC5D,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAA;AAC/D,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAQhD,MAAM,eAAe,GAAkB;IACrC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE;IAClC,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,eAAe,EAAE;IAC9C,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,iBAAiB,EAAE;IAClD,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,kBAAkB,EAAE;IACrD,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE;IACtC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,YAAY,EAAE;CACzC,CAAA;AAED,MAAM,aAAa,GAAkB;IACnC,GAAG,eAAe;IAClB,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE;CACvC,CAAA;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,KAAK,UAAU,QAAQ,CACrB,OAAwB,EACxB,KAAoB;IAEpB,MAAM,QAAQ,GAAa,EAAE,CAAA;IAE7B,KAAK,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,KAAK,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,CAAA;QAClC,IAAI,MAAM,CAAC,QAAQ;YAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAA;QACtD,IAAI,MAAM,CAAC,IAAI;YAAE,SAAQ;QAEzB,OAAO;YACL,OAAO,EAAE;gBACP,OAAO,EAAE,KAAK;gBACd,QAAQ,EAAE,IAAI;gBACd,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnD,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7C,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnD,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAChE;YACD,QAAQ;SACT,CAAA;IACH,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,CAAA;AACrB,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,OAAwB;IAC/D,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC,CAAA;IACpE,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;IAEnD,IAAI,OAAO;QAAE,OAAO,EAAE,GAAG,OAAO,EAAE,GAAG,OAAO,EAAE,CAAA;IAE9C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,GAAG,OAAO,EAAE,CAAA;AAC7E,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,OAAwB;IACjE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC,CAAA;IAC5D,OAAO,OAAO,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;AACrC,CAAC"}

package/dist/publishing/pipeline/steps/accessibility.d.ts

@@ -0,0 +1,13 @@
+import type { PipelineStep } from '../types.js';
+/**
+ * Runs every built-in accessibility check followed by user-supplied ones.
+ * Errors block publish; warnings are surfaced on the result but don't fail
+ * the step. (Warning-only behavior is currently unused by the built-in
+ * checks but reserved for richer per-client checks.)
+ *
+ * Built-ins named in `disableAccessibilityChecks` are skipped, so a host
+ * whose content shape trips one can replace it rather than wait for a
+ * plugin release.
+ */
+export declare const accessibilityStep: PipelineStep;
+//# sourceMappingURL=accessibility.d.ts.map

package/dist/publishing/pipeline/steps/accessibility.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"accessibility.d.ts","sourceRoot":"","sources":["../../../../src/publishing/pipeline/steps/accessibility.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAiB,YAAY,EAAE,MAAM,aAAa,CAAA;AAG9D;;;;;;;;;GASG;AACH,eAAO,MAAM,iBAAiB,EAAE,YA4B/B,CAAA"}

package/dist/publishing/pipeline/steps/accessibility.js

@@ -0,0 +1,37 @@
+import { BUILT_IN_ACCESSIBILITY_CHECKS } from '../../checks/index.js';
+/**
+ * Runs every built-in accessibility check followed by user-supplied ones.
+ * Errors block publish; warnings are surfaced on the result but don't fail
+ * the step. (Warning-only behavior is currently unused by the built-in
+ * checks but reserved for richer per-client checks.)
+ *
+ * Built-ins named in `disableAccessibilityChecks` are skipped, so a host
+ * whose content shape trips one can replace it rather than wait for a
+ * plugin release.
+ */
+export const accessibilityStep = async (ctx) => {
+    const disabled = new Set(ctx.options.disableAccessibilityChecks ?? []);
+    const checks = [
+        ...BUILT_IN_ACCESSIBILITY_CHECKS.filter((check) => !disabled.has(check.name)),
+        ...(ctx.options.accessibilityChecks ?? []),
+    ];
+    const allIssues = [];
+    for (const check of checks) {
+        const issues = await check.run(ctx.document, ctx.collection);
+        for (const issue of issues) {
+            allIssues.push({ ...issue, rule: check.name });
+        }
+    }
+    const errors = allIssues.filter((i) => i.severity === 'error');
+    if (errors.length > 0) {
+        return {
+            pass: false,
+            code: 'accessibility-errors',
+            reason: `${errors.length} accessibility issue${errors.length === 1 ? '' : 's'}`,
+            issues: errors,
+            suggestion: 'Every image needs alt text. Every link needs a label. Heading levels must not skip. Fix these before publishing.',
+        };
+    }
+    return { pass: true };
+};
+//# sourceMappingURL=accessibility.js.map

package/dist/publishing/pipeline/steps/accessibility.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"accessibility.js","sourceRoot":"","sources":["../../../../src/publishing/pipeline/steps/accessibility.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,6BAA6B,EAAE,MAAM,uBAAuB,CAAA;AAErE;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAiB,KAAK,EAAE,GAAG,EAAE,EAAE;IAC3D,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,0BAA0B,IAAI,EAAE,CAAC,CAAA;IACtE,MAAM,MAAM,GAAG;QACb,GAAG,6BAA6B,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC7E,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,mBAAmB,IAAI,EAAE,CAAC;KAC3C,CAAA;IAED,MAAM,SAAS,GAAoB,EAAE,CAAA;IACrC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,UAAU,CAAC,CAAA;QAC5D,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,SAAS,CAAC,IAAI,CAAC,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAA;QAChD,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAA;IAC9D,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,OAAO;YACL,IAAI,EAAE,KAAK;YACX,IAAI,EAAE,sBAAsB;YAC5B,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,uBAAuB,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE;YAC/E,MAAM,EAAE,MAAM;YACd,UAAU,EACR,kHAAkH;SACrH,CAAA;IACH,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;AACvB,CAAC,CAAA"}

package/dist/publishing/pipeline/steps/approval.d.ts

@@ -0,0 +1,14 @@
+import type { PipelineStep } from '../types.js';
+/**
+ * Gates publish on a granted approval when the document's policy demands
+ * one. Fails closed: if `policy.requiresApproval` is true but no resolver
+ * is available (neither in options nor attached via the approvals plugin),
+ * the step blocks the publish.
+ *
+ * Resolution order:
+ *   1. `options.approvalResolver` (explicit wiring)
+ *   2. The resolver attached on the Payload instance via
+ *      `APPROVALS_RESOLVER_SYMBOL` by the approvals plugin
+ */
+export declare const approvalStep: PipelineStep;
+//# sourceMappingURL=approval.d.ts.map

package/dist/publishing/pipeline/steps/approval.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval.d.ts","sourceRoot":"","sources":["../../../../src/publishing/pipeline/steps/approval.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAI/C;;;;;;;;;;GAUG;AACH,eAAO,MAAM,YAAY,EAAE,YA+C1B,CAAA"}

package/dist/publishing/pipeline/steps/approval.js

@@ -0,0 +1,54 @@
+import { documentContentHash } from '../../../utils/content-hash.js';
+import { APPROVALS_RESOLVER_SYMBOL } from '../../../approvals/symbol.js';
+/**
+ * Gates publish on a granted approval when the document's policy demands
+ * one. Fails closed: if `policy.requiresApproval` is true but no resolver
+ * is available (neither in options nor attached via the approvals plugin),
+ * the step blocks the publish.
+ *
+ * Resolution order:
+ *   1. `options.approvalResolver` (explicit wiring)
+ *   2. The resolver attached on the Payload instance via
+ *      `APPROVALS_RESOLVER_SYMBOL` by the approvals plugin
+ */
+export const approvalStep = async (ctx) => {
+    const policy = ctx.document[ctx.collection.policyField];
+    if (!policy?.['requiresApproval'])
+        return { pass: true };
+    const resolver = ctx.options.approvalResolver ?? lookupResolverOnPayload(ctx.payload);
+    if (!resolver) {
+        return {
+            pass: false,
+            code: 'approval-resolver-missing',
+            reason: 'Document requires approval but no approval resolver is configured',
+            suggestion: 'Register approvalsPlugin in your Payload config (it attaches the resolver automatically) or pass an explicit `approvalResolver` to publishingPlugin.',
+        };
+    }
+    /*
+    The approval binds to the document's content, not to its `updatedAt`. The
+    approvals plugin's `request_approval` computes this same hash, with this
+    same function, over a document loaded by the same `findByID` call — so an
+    approval granted on what an approver read still resolves after a save that
+    changed nothing, and does not resolve after one that changed something.
+  
+    Binding to `updatedAt` made that a property of a timestamp rather than a
+    rule: any save at all invalidated a pending approval, which is also why
+    autosave and approvals could not both be on. See #341.
+    */
+    const versionId = await documentContentHash(ctx.document);
+    const approval = await resolver.getActiveApproval(ctx.collection.slug, ctx.documentId, versionId);
+    if (!approval) {
+        return {
+            pass: false,
+            code: 'approval-required',
+            reason: 'This document requires approval and no granted approval exists for the current version',
+            suggestion: 'Use the Approvals Server to request approval. Once granted, publish will succeed.',
+        };
+    }
+    return { pass: true };
+};
+function lookupResolverOnPayload(payload) {
+    const value = payload[APPROVALS_RESOLVER_SYMBOL];
+    return typeof value === 'object' && value !== null ? value : undefined;
+}
+//# sourceMappingURL=approval.js.map

package/dist/publishing/pipeline/steps/approval.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval.js","sourceRoot":"","sources":["../../../../src/publishing/pipeline/steps/approval.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAA;AAGpE,OAAO,EAAE,yBAAyB,EAAE,MAAM,8BAA8B,CAAA;AAGxE;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,YAAY,GAAiB,KAAK,EAAE,GAAG,EAAE,EAAE;IACtD,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,WAAW,CAEzC,CAAA;IACb,IAAI,CAAC,MAAM,EAAE,CAAC,kBAAkB,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;IAExD,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,gBAAgB,IAAI,uBAAuB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;IACrF,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO;YACL,IAAI,EAAE,KAAK;YACX,IAAI,EAAE,2BAA2B;YACjC,MAAM,EAAE,mEAAmE;YAC3E,UAAU,EACR,sJAAsJ;SACzJ,CAAA;IACH,CAAC;IAED;;;;;;;;;;MAUE;IACF,MAAM,SAAS,GAAG,MAAM,mBAAmB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;IACzD,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,iBAAiB,CAC/C,GAAG,CAAC,UAAU,CAAC,IAAI,EACnB,GAAG,CAAC,UAAU,EACd,SAAS,CACV,CAAA;IAED,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO;YACL,IAAI,EAAE,KAAK;YACX,IAAI,EAAE,mBAAmB;YACzB,MAAM,EACJ,wFAAwF;YAC1F,UAAU,EACR,mFAAmF;SACtF,CAAA;IACH,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;AACvB,CAAC,CAAA;AAED,SAAS,uBAAuB,CAAC,OAAe;IAC9C,MAAM,KAAK,GAAI,OAAmC,CAAC,yBAAyB,CAAC,CAAA;IAC7E,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,CAAE,KAA0B,CAAC,CAAC,CAAC,SAAS,CAAA;AAC9F,CAAC"}

package/dist/publishing/pipeline/steps/composition.d.ts

@@ -0,0 +1,14 @@
+import type { PipelineStep } from '../types.js';
+/**
+ * Symbol the Component Server's plugin (C5) attaches its composition
+ * validator to. Keep in sync with the components package.
+ */
+export declare const COMPONENTS_VALIDATOR_SYMBOL: unique symbol;
+/**
+ * Validates a document's layout blocks via the Component Server's validator
+ * (attached to the Payload instance by `componentsPlugin`'s `onInit`). Empty
+ * layouts pass automatically. Composition warnings don't block publish; only
+ * errors do.
+ */
+export declare const compositionStep: PipelineStep;
+//# sourceMappingURL=composition.d.ts.map

package/dist/publishing/pipeline/steps/composition.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"composition.d.ts","sourceRoot":"","sources":["../../../../src/publishing/pipeline/steps/composition.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAiB,YAAY,EAAE,MAAM,aAAa,CAAA;AAE9D;;;GAGG;AACH,eAAO,MAAM,2BAA2B,eAEvC,CAAA;AAqBD;;;;;GAKG;AACH,eAAO,MAAM,eAAe,EAAE,YA2D7B,CAAA"}

package/dist/publishing/pipeline/steps/composition.js

@@ -0,0 +1,63 @@
+/**
+ * Symbol the Component Server's plugin (C5) attaches its composition
+ * validator to. Keep in sync with the components package.
+ */
+export const COMPONENTS_VALIDATOR_SYMBOL = Symbol.for('@forumone/throughline/components-validator');
+/**
+ * Validates a document's layout blocks via the Component Server's validator
+ * (attached to the Payload instance by `componentsPlugin`'s `onInit`). Empty
+ * layouts pass automatically. Composition warnings don't block publish; only
+ * errors do.
+ */
+export const compositionStep = async (ctx) => {
+    const layoutValue = ctx.document[ctx.collection.layoutField];
+    if (!Array.isArray(layoutValue) || layoutValue.length === 0) {
+        return { pass: true };
+    }
+    const blocks = layoutValue
+        .map((block) => {
+        const type = block?.blockType;
+        const variant = block?.variant;
+        if (typeof type !== 'string')
+            return null;
+        return typeof variant === 'string'
+            ? { type, variant }
+            : { type };
+    })
+        .filter((b) => b !== null);
+    if (blocks.length === 0)
+        return { pass: true };
+    const validator = ctx.payload[COMPONENTS_VALIDATOR_SYMBOL];
+    if (!validator) {
+        return {
+            pass: false,
+            code: 'components-server-missing',
+            reason: 'Composition step requires the components plugin to be registered before publishingPlugin',
+            suggestion: 'Register `componentsPlugin` in your Payload config before `publishingPlugin`. Both must share the same Payload instance.',
+        };
+    }
+    const result = await validator({ blocks });
+    const errors = result.issues
+        .filter((issue) => issue.severity === 'error')
+        .map((issue) => {
+        const out = {
+            severity: 'error',
+            message: issue.message,
+            rule: issue.rule,
+        };
+        if (issue.blockIndex !== undefined)
+            out.field = `${ctx.collection.layoutField}[${issue.blockIndex}]`;
+        return out;
+    });
+    if (errors.length > 0) {
+        return {
+            pass: false,
+            code: 'composition-errors',
+            reason: `${errors.length} composition error${errors.length === 1 ? '' : 's'}`,
+            issues: errors,
+            suggestion: 'Fix the composition errors. Common causes: duplicate Heroes, forbidden adjacent blocks, or unknown component types.',
+        };
+    }
+    return { pass: true };
+};
+//# sourceMappingURL=composition.js.map

package/dist/publishing/pipeline/steps/composition.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"composition.js","sourceRoot":"","sources":["../../../../src/publishing/pipeline/steps/composition.ts"],"names":[],"mappings":"AAEA;;;GAGG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,MAAM,CAAC,GAAG,CACnD,4CAA4C,CAC7C,CAAA;AAqBD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,eAAe,GAAiB,KAAK,EAAE,GAAG,EAAE,EAAE;IACzD,MAAM,WAAW,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,CAAA;IAC5D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5D,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;IACvB,CAAC;IAED,MAAM,MAAM,GAAI,WAA6B;SAC1C,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QACb,MAAM,IAAI,GAAG,KAAK,EAAE,SAAS,CAAA;QAC7B,MAAM,OAAO,GAAG,KAAK,EAAE,OAAO,CAAA;QAC9B,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAA;QACzC,OAAO,OAAO,OAAO,KAAK,QAAQ;YAChC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE;YACnB,CAAC,CAAC,EAAE,IAAI,EAAE,CAAA;IACd,CAAC,CAAC;SACD,MAAM,CAAC,CAAC,CAAC,EAA2C,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAA;IAErE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;IAE9C,MAAM,SAAS,GAAI,GAAG,CAAC,OAA8C,CACnE,2BAA2B,CACM,CAAA;IAEnC,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO;YACL,IAAI,EAAE,KAAK;YACX,IAAI,EAAE,2BAA2B;YACjC,MAAM,EACJ,0FAA0F;YAC5F,UAAU,EACR,0HAA0H;SAC7H,CAAA;IACH,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC,CAAA;IAC1C,MAAM,MAAM,GAAoB,MAAM,CAAC,MAAM;SAC1C,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,OAAO,CAAC;SAC7C,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QACb,MAAM,GAAG,GAAkB;YACzB,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,IAAI,EAAE,KAAK,CAAC,IAAI;SACjB,CAAA;QACD,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS;YAAE,GAAG,CAAC,KAAK,GAAG,GAAG,GAAG,CAAC,UAAU,CAAC,WAAW,IAAI,KAAK,CAAC,UAAU,GAAG,CAAA;QACpG,OAAO,GAAG,CAAA;IACZ,CAAC,CAAC,CAAA;IAEJ,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,OAAO;YACL,IAAI,EAAE,KAAK;YACX,IAAI,EAAE,oBAAoB;YAC1B,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,qBAAqB,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE;YAC7E,MAAM,EAAE,MAAM;YACd,UAAU,EACR,qHAAqH;SACxH,CAAA;IACH,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;AACvB,CAAC,CAAA"}