@forumone/throughline 0.0.0-stage → 1.0.0-next.0

package/dist/publishing/pipeline/steps/embargo.d.ts

@@ -0,0 +1,12 @@
+import type { PipelineStep } from '../types.js';
+/**
+ * Enforces the document's policy:
+ * - `embargoedUntil`: blocks publish until that time has passed
+ * - `expiresAt`: blocks publish if the document has already expired
+ *
+ * Both fields live under the configured `policyField` on the document.
+ * Missing or null values are treated as "no policy applies" — the step
+ * passes.
+ */
+export declare const embargoStep: PipelineStep;
+//# sourceMappingURL=embargo.d.ts.map

package/dist/publishing/pipeline/steps/embargo.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"embargo.d.ts","sourceRoot":"","sources":["../../../../src/publishing/pipeline/steps/embargo.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAE/C;;;;;;;;GAQG;AACH,eAAO,MAAM,WAAW,EAAE,YA6BzB,CAAA"}

package/dist/publishing/pipeline/steps/embargo.js

@@ -0,0 +1,41 @@
+/**
+ * Enforces the document's policy:
+ * - `embargoedUntil`: blocks publish until that time has passed
+ * - `expiresAt`: blocks publish if the document has already expired
+ *
+ * Both fields live under the configured `policyField` on the document.
+ * Missing or null values are treated as "no policy applies" — the step
+ * passes.
+ */
+export const embargoStep = async (ctx) => {
+    const policy = ctx.document[ctx.collection.policyField];
+    if (!policy)
+        return { pass: true };
+    const now = Date.now();
+    const embargoedUntil = parseDate(policy['embargoedUntil']);
+    if (embargoedUntil !== null && embargoedUntil > now) {
+        return {
+            pass: false,
+            code: 'embargoed',
+            reason: `Embargoed until ${new Date(embargoedUntil).toISOString()}`,
+            suggestion: 'Wait until the embargo expires, update the embargoedUntil date, or schedule publish for after the embargo.',
+        };
+    }
+    const expiresAt = parseDate(policy['expiresAt']);
+    if (expiresAt !== null && expiresAt < now) {
+        return {
+            pass: false,
+            code: 'expired',
+            reason: `Content expired on ${new Date(expiresAt).toISOString()}`,
+            suggestion: 'Update the expiresAt date or unpublish this content.',
+        };
+    }
+    return { pass: true };
+};
+function parseDate(value) {
+    if (typeof value !== 'string')
+        return null;
+    const ms = Date.parse(value);
+    return Number.isNaN(ms) ? null : ms;
+}
+//# sourceMappingURL=embargo.js.map

package/dist/publishing/pipeline/steps/embargo.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"embargo.js","sourceRoot":"","sources":["../../../../src/publishing/pipeline/steps/embargo.ts"],"names":[],"mappings":"AAEA;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,WAAW,GAAiB,KAAK,EAAE,GAAG,EAAE,EAAE;IACrD,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,WAAW,CAEzC,CAAA;IACb,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;IAElC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;IACtB,MAAM,cAAc,GAAG,SAAS,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAA;IAC1D,IAAI,cAAc,KAAK,IAAI,IAAI,cAAc,GAAG,GAAG,EAAE,CAAC;QACpD,OAAO;YACL,IAAI,EAAE,KAAK;YACX,IAAI,EAAE,WAAW;YACjB,MAAM,EAAE,mBAAmB,IAAI,IAAI,CAAC,cAAc,CAAC,CAAC,WAAW,EAAE,EAAE;YACnE,UAAU,EACR,4GAA4G;SAC/G,CAAA;IACH,CAAC;IAED,MAAM,SAAS,GAAG,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAA;IAChD,IAAI,SAAS,KAAK,IAAI,IAAI,SAAS,GAAG,GAAG,EAAE,CAAC;QAC1C,OAAO;YACL,IAAI,EAAE,KAAK;YACX,IAAI,EAAE,SAAS;YACf,MAAM,EAAE,sBAAsB,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,EAAE;YACjE,UAAU,EAAE,sDAAsD;SACnE,CAAA;IACH,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;AACvB,CAAC,CAAA;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAA;IAC1C,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IAC5B,OAAO,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAA;AACrC,CAAC"}

package/dist/publishing/pipeline/steps/execute.d.ts

@@ -0,0 +1,52 @@
+import type { PipelineStep } from '../types.js';
+/**
+ * Performs the actual publish: writes `_status: 'published'`, stamps the
+ * publishedAt field on a first publish, then fires `content/page.published`
+ * with metadata subscribers can react to (revalidation, integrations, etc.).
+ *
+ * `publishedAt` is set only when the document does not already have one. It
+ * means "when this went live", which is what a listing sorts on and what a
+ * template prints on the page — so re-publishing an edit must not move it. It
+ * did: every publish overwrote the field with the current time, which sent an
+ * edited article to the top of its index and printed today's date on a piece
+ * written months ago. An editor who typed the original date into the sidebar
+ * watched it be replaced by the act of publishing.
+ *
+ * The guard is `wasFirstPublish`, which this step already computed for the
+ * event payload and did not apply to the write.
+ *
+ * A document that should genuinely be re-dated is re-dated by editing the
+ * field, which now survives.
+ *
+ * Sets `context.bypassPublishingServer = true` on the Payload update so the
+ * status-write blocking hook recognizes this as a sanctioned write. Any
+ * other path that tries to flip `_status` will be rejected by the hook.
+ *
+ * When `actor.enforceAccessAs` is set the write runs as that user with
+ * `overrideAccess: false`, so Payload rejects an editor who lacks update
+ * access on the collection. Bypassing the hook is not bypassing access
+ * control.
+ *
+ * The event is emitted after the write and cannot fail the step: once
+ * `_status` is `published` the publish has happened, and reporting failure
+ * would send an editor back to re-publish live content.
+ *
+ * The write respects Payload's document locks. Without `overrideLock: false` the
+ * Local API's default applies, which is to override — so an agent publishing
+ * over MCP would push a document live while an editor had it open in the admin
+ * and was part-way through revising it, silently. A lock only blocks when it is
+ * held by *somebody else* and has been touched within its duration (five minutes
+ * by default), so an editor publishing their own open document still passes, and
+ * an abandoned tab stops blocking on its own.
+ *
+ * A field Payload refuses is a failed *step*, not a thrown error. The write is
+ * the first thing in the whole pipeline that enforces `required` — a draft
+ * write does not, which is the point of drafts — so an empty required field
+ * inside a block reaches here and nowhere earlier. Thrown, it left the
+ * transport to explain itself: the admin got a bare message and the MCP tool
+ * got an exception, when Payload had already said exactly which paths were
+ * wrong. Returned as issues, it travels the same road as every other block —
+ * onto the fields in the admin, into the tool's result, into the audit row.
+ */
+export declare const executeStep: PipelineStep;
+//# sourceMappingURL=execute.d.ts.map

package/dist/publishing/pipeline/steps/execute.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"execute.d.ts","sourceRoot":"","sources":["../../../../src/publishing/pipeline/steps/execute.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAiB,YAAY,EAAE,MAAM,aAAa,CAAA;AAE9D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgDG;AACH,eAAO,MAAM,WAAW,EAAE,YAwEzB,CAAA"}

package/dist/publishing/pipeline/steps/execute.js

@@ -0,0 +1,161 @@
+import { sendEventSafely } from '../../events.js';
+/**
+ * Performs the actual publish: writes `_status: 'published'`, stamps the
+ * publishedAt field on a first publish, then fires `content/page.published`
+ * with metadata subscribers can react to (revalidation, integrations, etc.).
+ *
+ * `publishedAt` is set only when the document does not already have one. It
+ * means "when this went live", which is what a listing sorts on and what a
+ * template prints on the page — so re-publishing an edit must not move it. It
+ * did: every publish overwrote the field with the current time, which sent an
+ * edited article to the top of its index and printed today's date on a piece
+ * written months ago. An editor who typed the original date into the sidebar
+ * watched it be replaced by the act of publishing.
+ *
+ * The guard is `wasFirstPublish`, which this step already computed for the
+ * event payload and did not apply to the write.
+ *
+ * A document that should genuinely be re-dated is re-dated by editing the
+ * field, which now survives.
+ *
+ * Sets `context.bypassPublishingServer = true` on the Payload update so the
+ * status-write blocking hook recognizes this as a sanctioned write. Any
+ * other path that tries to flip `_status` will be rejected by the hook.
+ *
+ * When `actor.enforceAccessAs` is set the write runs as that user with
+ * `overrideAccess: false`, so Payload rejects an editor who lacks update
+ * access on the collection. Bypassing the hook is not bypassing access
+ * control.
+ *
+ * The event is emitted after the write and cannot fail the step: once
+ * `_status` is `published` the publish has happened, and reporting failure
+ * would send an editor back to re-publish live content.
+ *
+ * The write respects Payload's document locks. Without `overrideLock: false` the
+ * Local API's default applies, which is to override — so an agent publishing
+ * over MCP would push a document live while an editor had it open in the admin
+ * and was part-way through revising it, silently. A lock only blocks when it is
+ * held by *somebody else* and has been touched within its duration (five minutes
+ * by default), so an editor publishing their own open document still passes, and
+ * an abandoned tab stops blocking on its own.
+ *
+ * A field Payload refuses is a failed *step*, not a thrown error. The write is
+ * the first thing in the whole pipeline that enforces `required` — a draft
+ * write does not, which is the point of drafts — so an empty required field
+ * inside a block reaches here and nowhere earlier. Thrown, it left the
+ * transport to explain itself: the admin got a bare message and the MCP tool
+ * got an exception, when Payload had already said exactly which paths were
+ * wrong. Returned as issues, it travels the same road as every other block —
+ * onto the fields in the admin, into the tool's result, into the audit row.
+ */
+export const executeStep = async (ctx) => {
+    const now = new Date().toISOString();
+    const previousPublishedAt = typeof ctx.document[ctx.collection.publishedAtField] === 'string'
+        ? ctx.document[ctx.collection.publishedAtField]
+        : null;
+    const wasFirstPublish = previousPublishedAt === null;
+    try {
+        await ctx.payload.update({
+            collection: ctx.collection.slug,
+            id: ctx.documentId,
+            data: {
+                _status: 'published',
+                ...(wasFirstPublish ? { [ctx.collection.publishedAtField]: now } : {}),
+                // A schedule is spent once the document is live, whoever published it.
+                // Left behind, it outlives the publish: unpublish the page later and it
+                // is a draft with a past date — which the scheduled-publish backstop
+                // exists to find, and would put back up.
+                ...(ctx.document[ctx.collection.scheduledPublishField] != null
+                    ? { [ctx.collection.scheduledPublishField]: null }
+                    : {}),
+            },
+            ...(ctx.actor.enforceAccessAs
+                ? { user: ctx.actor.enforceAccessAs, overrideAccess: false }
+                : {}),
+            overrideLock: false,
+            context: { bypassPublishingServer: true },
+        });
+    }
+    catch (error) {
+        // Somebody is in the document. Not a failure to investigate — a state that
+        // resolves itself, and one the caller can act on: wait, or ask them.
+        if (isLocked(error)) {
+            return {
+                pass: false,
+                code: 'document-locked',
+                reason: 'Somebody is editing this document right now',
+                suggestion: 'A lock is released when the editor closes the document, and expires on its own a few minutes after they stop. Try again, or ask them to finish.',
+            };
+        }
+        const issues = fieldIssues(error);
+        // Only a field rejection is an answer. A database or access failure is
+        // not, and rethrowing keeps it out of the diagnostics an editor reads as
+        // "fix these fields".
+        if (!issues)
+            throw error;
+        return {
+            pass: false,
+            code: 'field-validation-failed',
+            reason: `${issues.length} field${issues.length === 1 ? '' : 's'} the collection will not accept`,
+            issues,
+            suggestion: 'These are required by the collection rather than by a policy check, so they must be filled before this document can be published.',
+        };
+    }
+    // The write has landed. From here the publish has happened, so nothing
+    // below may turn it back into a failure.
+    const warning = await sendEventSafely(ctx.inngest, {
+        name: 'content/page.published',
+        data: {
+            collection: ctx.collection.slug,
+            id: ctx.documentId,
+            slug: String(ctx.document[ctx.collection.slugField] ?? ctx.documentId),
+            publishedBy: ctx.actor.user?.id ?? 'system',
+            previousPublishedAt,
+            isFirstPublish: wasFirstPublish,
+        },
+    });
+    return { pass: true, ...(warning ? { warnings: [warning] } : {}) };
+};
+/**
+ * Payload's `ValidationError` as issues, or `undefined` for anything else.
+ *
+ * Read structurally rather than with `instanceof`. The class would work in the
+ * ordinary install and fail in the one that matters — two copies of `payload`
+ * resolved under one tree make `instanceof` false for an error that is one in
+ * every other respect, and the failure mode is a silent rethrow of something
+ * an editor could have fixed. The shape is stable: `data.errors` is a list of
+ * `{ path, message }`, and the paths are already dotted form paths.
+ */
+function fieldIssues(error) {
+    if (!error || typeof error !== 'object')
+        return undefined;
+    const data = error.data;
+    if (!data || typeof data !== 'object')
+        return undefined;
+    const errors = data.errors;
+    if (!Array.isArray(errors) || errors.length === 0)
+        return undefined;
+    const issues = [];
+    for (const entry of errors) {
+        if (!entry || typeof entry !== 'object')
+            return undefined;
+        const { path, message } = entry;
+        if (typeof path !== 'string' || typeof message !== 'string')
+            return undefined;
+        issues.push({ field: path, message, severity: 'error' });
+    }
+    return issues;
+}
+/**
+ * Payload's `Locked`, read structurally for the same reason as `fieldIssues`
+ * below it: two copies of `payload` under one tree make `instanceof` false for
+ * an error that is one in every other respect. 423 is the status the class
+ * carries, and the name is the belt to its braces.
+ */
+function isLocked(error) {
+    if (!error || typeof error !== 'object')
+        return false;
+    const { status, name } = error;
+    return status === 423 || name === 'Locked';
+}
+//# sourceMappingURL=execute.js.map

package/dist/publishing/pipeline/steps/execute.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"execute.js","sourceRoot":"","sources":["../../../../src/publishing/pipeline/steps/execute.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAA;AAGjD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgDG;AACH,MAAM,CAAC,MAAM,WAAW,GAAiB,KAAK,EAAE,GAAG,EAAE,EAAE;IACrD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IACpC,MAAM,mBAAmB,GACvB,OAAO,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,gBAAgB,CAAC,KAAK,QAAQ;QAC/D,CAAC,CAAE,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,gBAAgB,CAAY;QAC3D,CAAC,CAAC,IAAI,CAAA;IACV,MAAM,eAAe,GAAG,mBAAmB,KAAK,IAAI,CAAA;IAEpD,IAAI,CAAC;QACH,MAAM,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC;YACvB,UAAU,EAAE,GAAG,CAAC,UAAU,CAAC,IAAI;YAC/B,EAAE,EAAE,GAAG,CAAC,UAAU;YAClB,IAAI,EAAE;gBACJ,OAAO,EAAE,WAAW;gBACpB,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACtE,uEAAuE;gBACvE,wEAAwE;gBACxE,qEAAqE;gBACrE,yCAAyC;gBACzC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,qBAAqB,CAAC,IAAI,IAAI;oBAC5D,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,qBAAqB,CAAC,EAAE,IAAI,EAAE;oBAClD,CAAC,CAAC,EAAE,CAAC;aACR;YACD,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,eAAe;gBAC3B,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,eAAe,EAAE,cAAc,EAAE,KAAK,EAAE;gBAC5D,CAAC,CAAC,EAAE,CAAC;YACP,YAAY,EAAE,KAAK;YACnB,OAAO,EAAE,EAAE,sBAAsB,EAAE,IAAI,EAAE;SAC1C,CAAC,CAAA;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,2EAA2E;QAC3E,qEAAqE;QACrE,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACpB,OAAO;gBACL,IAAI,EAAE,KAAK;gBACX,IAAI,EAAE,iBAAiB;gBACvB,MAAM,EAAE,6CAA6C;gBACrD,UAAU,EACR,iJAAiJ;aACpJ,CAAA;QACH,CAAC;QAED,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,CAAA;QACjC,uEAAuE;QACvE,yEAAyE;QACzE,sBAAsB;QACtB,IAAI,CAAC,MAAM;YAAE,MAAM,KAAK,CAAA;QACxB,OAAO;YACL,IAAI,EAAE,KAAK;YACX,IAAI,EAAE,yBAAyB;YAC/B,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,SAAS,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,iCAAiC;YAChG,MAAM;YACN,UAAU,EACR,mIAAmI;SACtI,CAAA;IACH,CAAC;IAED,uEAAuE;IACvE,yCAAyC;IACzC,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,GAAG,CAAC,OAAO,EAAE;QACjD,IAAI,EAAE,wBAAwB;QAC9B,IAAI,EAAE;YACJ,UAAU,EAAE,GAAG,CAAC,UAAU,CAAC,IAAI;YAC/B,EAAE,EAAE,GAAG,CAAC,UAAU;YAClB,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC;YACtE,WAAW,EAAE,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,IAAI,QAAQ;YAC3C,mBAAmB;YACnB,cAAc,EAAE,eAAe;SAChC;KACF,CAAC,CAAA;IAEF,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAA;AACpE,CAAC,CAAA;AAED;;;;;;;;;GASG;AACH,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAA;IACzD,MAAM,IAAI,GAAI,KAA4B,CAAC,IAAI,CAAA;IAC/C,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAA;IACvD,MAAM,MAAM,GAAI,IAA6B,CAAC,MAAM,CAAA;IACpD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAA;IAEnE,MAAM,MAAM,GAAoB,EAAE,CAAA;IAClC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAA;QACzD,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,KAA8C,CAAA;QACxE,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,OAAO,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAA;QAC7E,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAA;IAC1D,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED;;;;;GAKG;AACH,SAAS,QAAQ,CAAC,KAAc;IAC9B,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAA;IACrD,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,KAA6C,CAAA;IACtE,OAAO,MAAM,KAAK,GAAG,IAAI,IAAI,KAAK,QAAQ,CAAA;AAC5C,CAAC"}

package/dist/publishing/pipeline/steps/exist.d.ts

@@ -0,0 +1,9 @@
+import type { PipelineStep } from '../types.js';
+/**
+ * Verifies the document exists and isn't already published with no
+ * outstanding draft changes. The publish operation should be idempotent
+ * but not silent — re-publishing a clean document returns a clear "already
+ * published" response so callers can distinguish that from success.
+ */
+export declare const existStep: PipelineStep;
+//# sourceMappingURL=exist.d.ts.map

package/dist/publishing/pipeline/steps/exist.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"exist.d.ts","sourceRoot":"","sources":["../../../../src/publishing/pipeline/steps/exist.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAE/C;;;;;GAKG;AACH,eAAO,MAAM,SAAS,EAAE,YAgBvB,CAAA"}

package/dist/publishing/pipeline/steps/exist.js

@@ -0,0 +1,31 @@
+/**
+ * Verifies the document exists and isn't already published with no
+ * outstanding draft changes. The publish operation should be idempotent
+ * but not silent — re-publishing a clean document returns a clear "already
+ * published" response so callers can distinguish that from success.
+ */
+export const existStep = async (ctx) => {
+    if (!ctx.document || Object.keys(ctx.document).length === 0) {
+        return { pass: false, code: 'not-found', reason: 'Document not found' };
+    }
+    const isPublished = ctx.document['_status'] === 'published';
+    if (isPublished && !hasUnpublishedChanges(ctx.document, ctx.collection.publishedAtField)) {
+        return {
+            pass: false,
+            code: 'already-published',
+            reason: 'Document is already published with no unpublished changes',
+            suggestion: 'Make a draft change first, then publish.',
+        };
+    }
+    return { pass: true };
+};
+function hasUnpublishedChanges(doc, publishedAtField) {
+    const updatedRaw = doc['updatedAt'];
+    const publishedRaw = doc[publishedAtField];
+    const updatedAt = typeof updatedRaw === 'string' ? Date.parse(updatedRaw) : 0;
+    const publishedAt = typeof publishedRaw === 'string' ? Date.parse(publishedRaw) : 0;
+    if (Number.isNaN(updatedAt) || Number.isNaN(publishedAt))
+        return true;
+    return updatedAt > publishedAt;
+}
+//# sourceMappingURL=exist.js.map

package/dist/publishing/pipeline/steps/exist.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"exist.js","sourceRoot":"","sources":["../../../../src/publishing/pipeline/steps/exist.ts"],"names":[],"mappings":"AAEA;;;;;GAKG;AACH,MAAM,CAAC,MAAM,SAAS,GAAiB,KAAK,EAAE,GAAG,EAAE,EAAE;IACnD,IAAI,CAAC,GAAG,CAAC,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5D,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAA;IACzE,CAAC;IAED,MAAM,WAAW,GAAG,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,KAAK,WAAW,CAAA;IAC3D,IAAI,WAAW,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACzF,OAAO;YACL,IAAI,EAAE,KAAK;YACX,IAAI,EAAE,mBAAmB;YACzB,MAAM,EAAE,2DAA2D;YACnE,UAAU,EAAE,0CAA0C;SACvD,CAAA;IACH,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;AACvB,CAAC,CAAA;AAED,SAAS,qBAAqB,CAC5B,GAA4B,EAC5B,gBAAwB;IAExB,MAAM,UAAU,GAAG,GAAG,CAAC,WAAW,CAAC,CAAA;IACnC,MAAM,YAAY,GAAG,GAAG,CAAC,gBAAgB,CAAC,CAAA;IAC1C,MAAM,SAAS,GAAG,OAAO,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IAC7E,MAAM,WAAW,GAAG,OAAO,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACnF,IAAI,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC;QAAE,OAAO,IAAI,CAAA;IACrE,OAAO,SAAS,GAAG,WAAW,CAAA;AAChC,CAAC"}

package/dist/publishing/pipeline/steps/required-fields.d.ts

@@ -0,0 +1,9 @@
+import type { PipelineStep } from '../types.js';
+/**
+ * Verifies SEO title/description, slug, and any per-collection required
+ * fields are populated. SEO requirements are non-negotiable: a published
+ * page without title and description hurts share previews, search results,
+ * and accessibility cards.
+ */
+export declare const requiredFieldsStep: PipelineStep;
+//# sourceMappingURL=required-fields.d.ts.map

package/dist/publishing/pipeline/steps/required-fields.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"required-fields.d.ts","sourceRoot":"","sources":["../../../../src/publishing/pipeline/steps/required-fields.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAiB,YAAY,EAAE,MAAM,aAAa,CAAA;AAE9D;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB,EAAE,YAiDhC,CAAA"}

package/dist/publishing/pipeline/steps/required-fields.js

@@ -0,0 +1,63 @@
+/**
+ * Verifies SEO title/description, slug, and any per-collection required
+ * fields are populated. SEO requirements are non-negotiable: a published
+ * page without title and description hurts share previews, search results,
+ * and accessibility cards.
+ */
+export const requiredFieldsStep = async (ctx) => {
+    const issues = [];
+    const seo = ctx.document[ctx.collection.seoField];
+    if (!nonEmptyString(seo?.['title'])) {
+        issues.push({
+            field: `${ctx.collection.seoField}.title`,
+            message: 'SEO title is required',
+            severity: 'error',
+        });
+    }
+    if (!nonEmptyString(seo?.['description'])) {
+        issues.push({
+            field: `${ctx.collection.seoField}.description`,
+            message: 'SEO description is required',
+            severity: 'error',
+        });
+    }
+    if (!nonEmptyString(ctx.document[ctx.collection.slugField])) {
+        issues.push({
+            field: ctx.collection.slugField,
+            message: 'Slug is required',
+            severity: 'error',
+        });
+    }
+    for (const required of ctx.collection.requiredFields ?? []) {
+        const value = getPath(ctx.document, required.path);
+        if (value === null || value === undefined || value === '') {
+            issues.push({
+                field: required.path,
+                message: required.message,
+                severity: 'error',
+            });
+        }
+    }
+    if (issues.length > 0) {
+        return {
+            pass: false,
+            code: 'required-fields-missing',
+            reason: `${issues.length} required field${issues.length === 1 ? '' : 's'} missing`,
+            issues,
+            suggestion: 'Fill in the missing fields and try again.',
+        };
+    }
+    return { pass: true };
+};
+function nonEmptyString(value) {
+    return typeof value === 'string' && value.trim() !== '';
+}
+function getPath(obj, path) {
+    return path.split('.').reduce((acc, segment) => {
+        if (acc && typeof acc === 'object') {
+            return acc[segment];
+        }
+        return undefined;
+    }, obj);
+}
+//# sourceMappingURL=required-fields.js.map

package/dist/publishing/pipeline/steps/required-fields.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"required-fields.js","sourceRoot":"","sources":["../../../../src/publishing/pipeline/steps/required-fields.ts"],"names":[],"mappings":"AAEA;;;;;GAKG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAiB,KAAK,EAAE,GAAG,EAAE,EAAE;IAC5D,MAAM,MAAM,GAAoB,EAAE,CAAA;IAClC,MAAM,GAAG,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAwC,CAAA;IAExF,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;QACpC,MAAM,CAAC,IAAI,CAAC;YACV,KAAK,EAAE,GAAG,GAAG,CAAC,UAAU,CAAC,QAAQ,QAAQ;YACzC,OAAO,EAAE,uBAAuB;YAChC,QAAQ,EAAE,OAAO;SAClB,CAAC,CAAA;IACJ,CAAC;IACD,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC;QAC1C,MAAM,CAAC,IAAI,CAAC;YACV,KAAK,EAAE,GAAG,GAAG,CAAC,UAAU,CAAC,QAAQ,cAAc;YAC/C,OAAO,EAAE,6BAA6B;YACtC,QAAQ,EAAE,OAAO;SAClB,CAAC,CAAA;IACJ,CAAC;IAED,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;QAC5D,MAAM,CAAC,IAAI,CAAC;YACV,KAAK,EAAE,GAAG,CAAC,UAAU,CAAC,SAAS;YAC/B,OAAO,EAAE,kBAAkB;YAC3B,QAAQ,EAAE,OAAO;SAClB,CAAC,CAAA;IACJ,CAAC;IAED,KAAK,MAAM,QAAQ,IAAI,GAAG,CAAC,UAAU,CAAC,cAAc,IAAI,EAAE,EAAE,CAAC;QAC3D,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAA;QAClD,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;YAC1D,MAAM,CAAC,IAAI,CAAC;gBACV,KAAK,EAAE,QAAQ,CAAC,IAAI;gBACpB,OAAO,EAAE,QAAQ,CAAC,OAAO;gBACzB,QAAQ,EAAE,OAAO;aAClB,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,OAAO;YACL,IAAI,EAAE,KAAK;YACX,IAAI,EAAE,yBAAyB;YAC/B,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,kBAAkB,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,UAAU;YAClF,MAAM;YACN,UAAU,EAAE,2CAA2C;SACxD,CAAA;IACH,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;AACvB,CAAC,CAAA;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,CAAA;AACzD,CAAC;AAED,SAAS,OAAO,CAAC,GAA4B,EAAE,IAAY;IACzD,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAU,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE;QACtD,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YACnC,OAAQ,GAA+B,CAAC,OAAO,CAAC,CAAA;QAClD,CAAC;QACD,OAAO,SAAS,CAAA;IAClB,CAAC,EAAE,GAAG,CAAC,CAAA;AACT,CAAC"}

package/dist/publishing/pipeline/types.d.ts

@@ -0,0 +1,72 @@
+import type { Inngest } from 'inngest';
+import type { Payload, TypedUser } from 'payload';
+import type { AuthenticatedUser } from '../../plugin-contract/mcp.js';
+import type { AccessibilityIssue, PublishingPluginOptions, ResolvedCollection } from '../options.js';
+export interface PipelineActor {
+    user: AuthenticatedUser | null;
+    apiKeyName: string;
+    sessionId?: string | undefined;
+    /**
+     * When set, Payload reads and writes inside the pipeline run as this user
+     * with `overrideAccess: false`, so the collection's own access control
+     * applies. **Both channels set it**, and anything that does not is running
+     * unauthorized writes.
+     *
+     * This used to end "the MCP path leaves it unset because the API key is its
+     * own trust boundary." It is not one. `plugin-mcp` generates a per-key
+     * checkbox for every tool and **all 27 default to `true`**
+     * (`createApiKeysCollection.js:4-15`); the `requiredScope` each tool
+     * declares is read by nothing anywhere in the tree; and the key document
+     * itself carries no `roles` field, so every role check denies while
+     * Payload's `defaultAccess` — `Boolean(user)` — allows. A key was therefore
+     * a bearer credential that could publish, unpublish, roll back or schedule
+     * any document in any collection with nothing consulted. Audit 04 F-02.
+     *
+     * `tools/actor.ts` is what sets it now, and refuses when there is no
+     * identity to set it to.
+     */
+    enforceAccessAs?: TypedUser | undefined;
+}
+export interface PipelineMeta {
+    userPrompt?: string | undefined;
+    reasoning?: string | undefined;
+    changesSummary?: string | undefined;
+}
+export interface PipelineContext {
+    payload: Payload;
+    inngest: Inngest;
+    options: PublishingPluginOptions;
+    collection: ResolvedCollection;
+    document: Record<string, unknown>;
+    documentId: string;
+    actor: PipelineActor;
+    meta?: PipelineMeta | undefined;
+}
+export type PipelineIssue = AccessibilityIssue & {
+    rule?: string;
+};
+export interface PipelineStepResult {
+    pass: boolean;
+    reason?: string;
+    code?: string;
+    issues?: PipelineIssue[];
+    suggestion?: string;
+    /**
+     * Non-fatal problems. The step did what it was asked to; something
+     * adjacent to it did not. Warnings never fail a step.
+     */
+    warnings?: string[];
+}
+export type PipelineStep = (context: PipelineContext) => Promise<PipelineStepResult>;
+export interface PipelineResult {
+    success: boolean;
+    failedAt?: string;
+    reason?: string;
+    code?: string;
+    issues?: PipelineIssue[];
+    suggestion?: string;
+    publishedAt?: string;
+    /** Non-fatal problems collected across the steps that ran. */
+    warnings?: string[];
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/publishing/pipeline/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/publishing/pipeline/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACtC,OAAO,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAA;AACjD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAA;AACrE,OAAO,KAAK,EACV,kBAAkB,EAClB,uBAAuB,EACvB,kBAAkB,EACnB,MAAM,eAAe,CAAA;AAEtB,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,iBAAiB,GAAG,IAAI,CAAA;IAC9B,UAAU,EAAE,MAAM,CAAA;IAClB,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC9B;;;;;;;;;;;;;;;;;;OAkBG;IACH,eAAe,CAAC,EAAE,SAAS,GAAG,SAAS,CAAA;CACxC;AAED,MAAM,WAAW,YAAY;IAC3B,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC/B,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC9B,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CACpC;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,OAAO,CAAA;IAChB,OAAO,EAAE,OAAO,CAAA;IAChB,OAAO,EAAE,uBAAuB,CAAA;IAChC,UAAU,EAAE,kBAAkB,CAAA;IAC9B,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACjC,UAAU,EAAE,MAAM,CAAA;IAClB,KAAK,EAAE,aAAa,CAAA;IACpB,IAAI,CAAC,EAAE,YAAY,GAAG,SAAS,CAAA;CAChC;AAED,MAAM,MAAM,aAAa,GAAG,kBAAkB,GAAG;IAAE,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,CAAA;AAElE,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,OAAO,CAAA;IACb,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,MAAM,CAAC,EAAE,aAAa,EAAE,CAAA;IACxB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAA;CACpB;AAED,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,EAAE,eAAe,KAAK,OAAO,CAAC,kBAAkB,CAAC,CAAA;AAEpF,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,OAAO,CAAA;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,MAAM,CAAC,EAAE,aAAa,EAAE,CAAA;IACxB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,8DAA8D;IAC9D,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAA;CACpB"}

package/dist/publishing/pipeline/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/publishing/pipeline/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/publishing/pipeline/types.ts"],"names":[],"mappings":""}

package/dist/publishing/plugin.d.ts

@@ -0,0 +1,4 @@
+import type { CorePlugin } from '../plugin-contract/index.js';
+import { type PublishingPluginOptions } from './options.js';
+export declare const publishingPlugin: CorePlugin<PublishingPluginOptions>;
+//# sourceMappingURL=plugin.d.ts.map

package/dist/publishing/plugin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../../src/publishing/plugin.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAA;AAI7D,OAAO,EAAE,KAAK,uBAAuB,EAAsC,MAAM,cAAc,CAAA;AAmB/F,eAAO,MAAM,gBAAgB,EAAE,UAAU,CAAC,uBAAuB,CA8H9D,CAAA"}