@gobing-ai/knowledge-kit 0.0.21 → 0.0.22

package/plugins/publishings/substack-pub/dist/index.js

@@ -21781,6 +21781,22 @@ var ResultSchema = exports_external.object({
   error: exports_external.string().optional(),
   metadata: exports_external.record(exports_external.string(), exports_external.unknown()).optional()
 });
+var TargetOutcomeSchema = exports_external.object({
+  target: exports_external.string(),
+  ok: exports_external.boolean(),
+  status: exports_external.enum(["published", "failed", "skipped"]),
+  url: exports_external.string().optional(),
+  id: exports_external.string().optional(),
+  error: exports_external.string().optional(),
+  durationMs: exports_external.number().optional(),
+  metadata: exports_external.record(exports_external.string(), exports_external.unknown()).optional()
+});
+var AggregateResultSchema = exports_external.object({
+  ok: exports_external.boolean(),
+  summary: exports_external.object({ total: exports_external.number(), succeeded: exports_external.number(), failed: exports_external.number(), skipped: exports_external.number() }),
+  targets: exports_external.array(TargetOutcomeSchema),
+  metadata: exports_external.record(exports_external.string(), exports_external.unknown()).optional()
+});
 var DocListSchema = exports_external.array(DocSchema);
 var omniVoiceGenContentSchema = ContentSchema.extend({
   format: exports_external.literal("audio"),
@@ -21809,14 +21825,15 @@ var PluginKindSchema = exports_external.enum(PLUGIN_KINDS);
 // ../../packages/kk-core/src/manifest.ts
 init_zod();
 var OperationIOSchema = exports_external.enum(["doc-list", "markdown"]);
-var PluginManifestSchema = exports_external.object({
+var PluginOperationSchema = exports_external.object({ input: OperationIOSchema, output: OperationIOSchema });
+var PluginManifestSchema = exports_external.looseObject({
   name: exports_external.string().min(1),
   kind: PluginKindSchema,
   entry: exports_external.string().min(1),
   version: exports_external.string().optional(),
   description: exports_external.string().optional(),
-  operations: exports_external.record(exports_external.string(), exports_external.object({ input: OperationIOSchema, output: OperationIOSchema })).optional()
-}).passthrough();
+  operations: exports_external.record(exports_external.string(), PluginOperationSchema).optional()
+});
 // ../../node_modules/.bun/@gobing-ai+ts-runtime@0.4.39/node_modules/@gobing-ai/ts-runtime/dist/index.js
 init_file_system_node();
 init_config();
@@ -21843,42 +21860,78 @@ function echoError(message, target = defaultStderrTarget ?? processStream("stder
 if (false) {}
 // ../../packages/publish-harness/src/index.ts
 import { homedir } from "os";
-import { join } from "path";
+import { join, resolve } from "path";
+
+class FakeTransportCore {
+  callLogs = [];
+  nextResult;
+  setNextResult(result) {
+    this.nextResult = result;
+  }
+  async publish(payload, defaultResult) {
+    this.callLogs.push({
+      timestamp: new Date().toISOString(),
+      payload
+    });
+    return this.nextResult ?? defaultResult;
+  }
+  getCallLogs() {
+    return this.callLogs;
+  }
+  reset() {
+    this.callLogs = [];
+    this.nextResult = undefined;
+  }
+}
+
+class FakeFileCliTransport {
+  kind = "file-cli";
+  core = new FakeTransportCore;
+  setNextResult(result) {
+    this.core.setNextResult(result);
+  }
+  async publish(payload) {
+    return this.core.publish(payload, {
+      ok: true,
+      target: "fake-file-cli",
+      url: "https://example.com/published-post",
+      id: "fake-id-123",
+      message: "Published offline via FakeFileCliTransport"
+    });
+  }
+  getCallLogs() {
+    return this.core.getCallLogs();
+  }
+  reset() {
+    this.core.reset();
+  }
+}
+
 class FakeBrowserTransport {
   kind = "browser";
   driver;
-  callLogs;
-  nextResult;
+  core = new FakeTransportCore;
   constructor(driver = "agent") {
     this.driver = driver;
-    this.callLogs = [];
   }
   setNextResult(result) {
-    this.nextResult = result;
+    this.core.setNextResult(result);
   }
   async publish(payload) {
-    this.callLogs.push({
-      timestamp: new Date().toISOString(),
-      payload
-    });
-    if (this.nextResult) {
-      return this.nextResult;
-    }
-    return {
+    return this.core.publish(payload, {
       ok: true,
       target: "fake-browser",
       url: "https://example.com/browser-draft",
       id: "fake-browser-id-123",
       message: "Published offline via FakeBrowserTransport",
       metadata: { driver: this.driver }
-    };
+    });
   }
   getCallLogs() {
-    return this.callLogs;
+    return this.core.getCallLogs();
   }
   reset() {
-    this.callLogs = [];
-    this.nextResult = undefined;
+    this.core.reset();
   }
 }
 function resolveBrowserProfileDir(channel, override) {
@@ -21887,7 +21940,7 @@ function resolveBrowserProfileDir(channel, override) {
     if (trimmed.startsWith("~/")) {
       return join(homedir(), trimmed.slice(2));
     }
-    return trimmed;
+    return resolve(trimmed);
   }
   return join(homedir(), ".config", "kk", "browser-profiles", channel);
 }

package/plugins/publishings/surfdash-pub/dist/index.js

@@ -21776,78 +21776,78 @@ __export(exports_src, {
   FakeBrowserTransport: () => FakeBrowserTransport
 });
 import { homedir } from "os";
-import { join } from "path";
+import { join, resolve } from "path";
 
-class FakeFileCliTransport {
-  kind = "file-cli";
-  callLogs;
+class FakeTransportCore {
+  callLogs = [];
   nextResult;
-  constructor() {
-    this.callLogs = [];
-  }
   setNextResult(result) {
     this.nextResult = result;
   }
-  async publish(payload) {
+  async publish(payload, defaultResult) {
     this.callLogs.push({
       timestamp: new Date().toISOString(),
       payload
     });
-    if (this.nextResult) {
-      return this.nextResult;
-    }
-    return {
+    return this.nextResult ?? defaultResult;
+  }
+  getCallLogs() {
+    return this.callLogs;
+  }
+  reset() {
+    this.callLogs = [];
+    this.nextResult = undefined;
+  }
+}
+
+class FakeFileCliTransport {
+  kind = "file-cli";
+  core = new FakeTransportCore;
+  setNextResult(result) {
+    this.core.setNextResult(result);
+  }
+  async publish(payload) {
+    return this.core.publish(payload, {
       ok: true,
       target: "fake-file-cli",
       url: "https://example.com/published-post",
       id: "fake-id-123",
       message: "Published offline via FakeFileCliTransport"
-    };
+    });
   }
   getCallLogs() {
-    return this.callLogs;
+    return this.core.getCallLogs();
   }
   reset() {
-    this.callLogs = [];
-    this.nextResult = undefined;
+    this.core.reset();
   }
 }
 
 class FakeBrowserTransport {
   kind = "browser";
   driver;
-  callLogs;
-  nextResult;
+  core = new FakeTransportCore;
   constructor(driver = "agent") {
     this.driver = driver;
-    this.callLogs = [];
   }
   setNextResult(result) {
-    this.nextResult = result;
+    this.core.setNextResult(result);
   }
   async publish(payload) {
-    this.callLogs.push({
-      timestamp: new Date().toISOString(),
-      payload
-    });
-    if (this.nextResult) {
-      return this.nextResult;
-    }
-    return {
+    return this.core.publish(payload, {
       ok: true,
       target: "fake-browser",
       url: "https://example.com/browser-draft",
       id: "fake-browser-id-123",
       message: "Published offline via FakeBrowserTransport",
       metadata: { driver: this.driver }
-    };
+    });
   }
   getCallLogs() {
-    return this.callLogs;
+    return this.core.getCallLogs();
   }
   reset() {
-    this.callLogs = [];
-    this.nextResult = undefined;
+    this.core.reset();
   }
 }
 function resolveBrowserProfileDir(channel, override) {
@@ -21856,12 +21856,12 @@ function resolveBrowserProfileDir(channel, override) {
     if (trimmed.startsWith("~/")) {
       return join(homedir(), trimmed.slice(2));
     }
-    return trimmed;
+    return resolve(trimmed);
   }
   return join(homedir(), ".config", "kk", "browser-profiles", channel);
 }
 async function trySelectors(page, selectors, options = {}) {
-  const timeout = options.timeout ?? 5000;
+  const timeout = options.timeout ?? 2000;
   const visible = options.visible ?? true;
   for (const selector of selectors) {
     try {
@@ -21871,7 +21871,7 @@ async function trySelectors(page, selectors, options = {}) {
         continue;
       }
       if (visible) {
-        const isVisible = await locator.isVisible({ timeout: Math.min(timeout, 2000) }).catch(() => false);
+        const isVisible = await locator.isVisible({ timeout }).catch(() => false);
         if (!isVisible) {
           continue;
         }
@@ -21902,7 +21902,7 @@ var init_src = () => {};
 // ../../plugins/publishings/surfdash-pub/src/index.ts
 import { existsSync as existsSync2, readFileSync as readFileSync2 } from "fs";
 import { copyFile, cp, writeFile } from "fs/promises";
-import { dirname as dirname2, isAbsolute, join as join2, resolve, sep } from "path";
+import { dirname as dirname2, extname, isAbsolute, join as join2, resolve as resolve2, sep } from "path";
 import { parseArgs } from "util";
 
 // ../../packages/kk-core/src/kinds.ts
@@ -21939,6 +21939,22 @@ var ResultSchema = exports_external.object({
   error: exports_external.string().optional(),
   metadata: exports_external.record(exports_external.string(), exports_external.unknown()).optional()
 });
+var TargetOutcomeSchema = exports_external.object({
+  target: exports_external.string(),
+  ok: exports_external.boolean(),
+  status: exports_external.enum(["published", "failed", "skipped"]),
+  url: exports_external.string().optional(),
+  id: exports_external.string().optional(),
+  error: exports_external.string().optional(),
+  durationMs: exports_external.number().optional(),
+  metadata: exports_external.record(exports_external.string(), exports_external.unknown()).optional()
+});
+var AggregateResultSchema = exports_external.object({
+  ok: exports_external.boolean(),
+  summary: exports_external.object({ total: exports_external.number(), succeeded: exports_external.number(), failed: exports_external.number(), skipped: exports_external.number() }),
+  targets: exports_external.array(TargetOutcomeSchema),
+  metadata: exports_external.record(exports_external.string(), exports_external.unknown()).optional()
+});
 var DocListSchema = exports_external.array(DocSchema);
 var omniVoiceGenContentSchema = ContentSchema.extend({
   format: exports_external.literal("audio"),
@@ -21967,14 +21983,15 @@ var PluginKindSchema = exports_external.enum(PLUGIN_KINDS);
 // ../../packages/kk-core/src/manifest.ts
 init_zod();
 var OperationIOSchema = exports_external.enum(["doc-list", "markdown"]);
-var PluginManifestSchema = exports_external.object({
+var PluginOperationSchema = exports_external.object({ input: OperationIOSchema, output: OperationIOSchema });
+var PluginManifestSchema = exports_external.looseObject({
   name: exports_external.string().min(1),
   kind: PluginKindSchema,
   entry: exports_external.string().min(1),
   version: exports_external.string().optional(),
   description: exports_external.string().optional(),
-  operations: exports_external.record(exports_external.string(), exports_external.object({ input: OperationIOSchema, output: OperationIOSchema })).optional()
-}).passthrough();
+  operations: exports_external.record(exports_external.string(), PluginOperationSchema).optional()
+});
 // ../../node_modules/.bun/@gobing-ai+ts-runtime@0.4.39/node_modules/@gobing-ai/ts-runtime/dist/index.js
 init_file_system_node();
 init_config();
@@ -22003,6 +22020,7 @@ if (false) {}
 var TARGET = "surfdash";
 var OPERATIONS = ["publish", "scaffold-locale", "sync"];
 var SCAFFOLD_LOCALES = ["en", "ja"];
+var COVER_EXTS = new Set([".png", ".jpg", ".jpeg", ".webp", ".gif"]);
 function slugify2(str) {
   return str.toLowerCase().replace(/[^\w\s-]/g, "").trim().replace(/[\s_]+/g, "-");
 }
@@ -22046,6 +22064,13 @@ ${content.body.trim()}
 function fail(error51) {
   return ResultSchema.parse({ ok: false, target: TARGET, error: error51 });
 }
+async function writePublishResult(outputPath, result) {
+  const outDir = dirname2(outputPath);
+  if (outDir && outDir !== ".") {
+    await createNodeFileSystem().ensureDir(outDir);
+  }
+  await createNodeFileSystem().writeFile(outputPath, JSON.stringify(result, null, 2));
+}
 function resolveOperation(options) {
   const raw = options.operation ?? "publish";
   if (typeof raw !== "string" || !OPERATIONS.includes(raw)) {
@@ -22065,8 +22090,8 @@ function resolvePostPath(options) {
   return { postPath };
 }
 function postPathOutsideRoot(postPath, surfdashRoot) {
-  const root = resolve(surfdashRoot);
-  if (!resolve(postPath).startsWith(root + sep)) {
+  const root = resolve2(surfdashRoot);
+  if (!resolve2(postPath).startsWith(root + sep)) {
     return `options.postPath must resolve inside the surfdash checkout (${root}): ${postPath}`;
   }
   return;
@@ -22090,7 +22115,7 @@ function deriveLocaleDraftPath(postPath, locale) {
 }
 function resolveSurfdashRoot() {
   const postsurfingBin = process.env.POSTSURFING_BIN ?? "postsurfing";
-  return process.env.SURFDASH_ROOT ?? (postsurfingBin.includes("/") ? resolve(dirname2(dirname2(postsurfingBin))) : undefined);
+  return process.env.SURFDASH_ROOT ?? (postsurfingBin.includes("/") ? resolve2(dirname2(dirname2(postsurfingBin))) : undefined);
 }
 async function spawnCli(cmd, cwd) {
   const proc = Bun.spawn(cmd, {
@@ -22206,16 +22231,13 @@ async function scaffoldLocale(options) {
 function normalizeLocaleFrontmatter(markdown) {
   const lines = markdown.split(`
 `);
-  const inFrontmatter = lines[0]?.trim() === "---";
-  for (let i = 1;inFrontmatter && i < lines.length; i++) {
-    if (lines[i]?.trim() === "---")
-      break;
-    if (/^canonical\s*:/.test(lines[i] ?? ""))
-      lines[i] = "";
-    else if (/^draft\s*:/.test(lines[i] ?? ""))
-      lines[i] = "draft: false";
-  }
-  return lines.filter((line) => line !== "").join(`
+  if (lines[0]?.trim() !== "---")
+    return markdown;
+  const close = lines.findIndex((l, i) => i > 0 && l.trim() === "---");
+  if (close < 0)
+    return markdown;
+  const head = lines.slice(1, close).filter((l) => !/^canonical\s*:/.test(l)).map((l) => /^draft\s*:/.test(l) ? "draft: false" : l);
+  return [lines[0], ...head, ...lines.slice(close)].join(`
 `);
 }
 async function syncPost(options) {
@@ -22266,14 +22288,25 @@ async function publishPost(payload) {
   const dateStamp = runDate || today;
   const titleSlug = slugify2(payload.content.title ?? "");
   const slug = titleSlug ? `${dateStamp}-${titleSlug}` : `${dateStamp}-post`;
-  const postDir = join2(surfdashRoot, "content", "posts", "articles", locale, slug);
+  if (runDate !== "" && !/^\d{8}$/.test(runDate)) {
+    return fail(`metadata.runDate must be YYYYMMDD, got '${runDate}'`);
+  }
+  const articlesRoot = resolve2(surfdashRoot, "content", "posts", "articles");
+  const localeRoot = resolve2(articlesRoot, locale);
+  const postDir = resolve2(localeRoot, slug);
+  if (dirname2(localeRoot) !== articlesRoot || dirname2(postDir) !== localeRoot) {
+    return fail(`post path escapes ${articlesRoot}`);
+  }
+  const coverPath = payload.content.metadata?.coverImage;
+  if (typeof coverPath === "string" && existsSync2(coverPath) && !COVER_EXTS.has(extname(coverPath).toLowerCase())) {
+    return fail(`metadata.coverImage must be one of ${[...COVER_EXTS].join(", ")}`);
+  }
   await createNodeFileSystem().ensureDir(postDir);
   let imageFrontmatter;
-  const coverPath = payload.content.metadata?.coverImage;
   if (typeof coverPath === "string" && existsSync2(coverPath)) {
     const assetsDir = join2(postDir, "assets");
     await createNodeFileSystem().ensureDir(assetsDir);
-    const coverName = `cover${coverPath.slice(coverPath.lastIndexOf("."))}`;
+    const coverName = `cover${extname(coverPath).toLowerCase()}`;
     await copyFile(coverPath, join2(assetsDir, coverName));
     imageFrontmatter = `./assets/${coverName}`;
   }
@@ -22342,16 +22375,20 @@ function getPublishTransport() {
 async function processPublishIO(inputPath, outputPath, transport = getPublishTransport()) {
   await createNodeFileSystem().deleteFile(outputPath);
   const rawInput = await createNodeFileSystem().readFile(inputPath);
-  const raw = JSON.parse(rawInput);
-  const content = ContentSchema.parse(raw);
+  let raw;
+  let content;
+  try {
+    raw = JSON.parse(rawInput);
+    content = ContentSchema.parse(raw);
+  } catch (error51) {
+    const message = `Invalid Content input: ${error51 instanceof Error ? error51.message : String(error51)}`;
+    await writePublishResult(outputPath, fail(message));
+    throw new Error(message);
+  }
   const options = raw.options !== undefined && typeof raw.options === "object" && raw.options !== null ? raw.options : undefined;
   const result = await transport.publish({ content, options });
   const validatedResult = ResultSchema.parse(result);
-  const outDir = dirname2(outputPath);
-  if (outDir && outDir !== ".") {
-    await createNodeFileSystem().ensureDir(outDir);
-  }
-  await createNodeFileSystem().writeFile(outputPath, JSON.stringify(validatedResult, null, 2));
+  await writePublishResult(outputPath, validatedResult);
   if (!validatedResult.ok) {
     throw new Error(validatedResult.error ?? "Publish failed");
   }

package/plugins/publishings/surfdash-pub/src/index.ts

@@ -1,6 +1,6 @@
 import { existsSync, readFileSync } from 'node:fs';
 import { copyFile, cp, writeFile } from 'node:fs/promises';
-import { dirname, isAbsolute, join, resolve, sep } from 'node:path';
+import { dirname, extname, isAbsolute, join, resolve, sep } from 'node:path';
 import { parseArgs } from 'node:util';
 import { type Content, ContentSchema, type Result, ResultSchema } from '@gobing-ai/kk-core';
 import type { PublishTransport, PublishTransportPayload } from '@gobing-ai/publish-harness';
@@ -18,6 +18,9 @@ type Operation = (typeof OPERATIONS)[number];
 const SCAFFOLD_LOCALES = ['en', 'ja'] as const;
 type ScaffoldLocale = (typeof SCAFFOLD_LOCALES)[number];
 
+/** Cover-image extensions accepted from `metadata.coverImage` (R4): anything else is rejected, not copied. */
+const COVER_EXTS = new Set(['.png', '.jpg', '.jpeg', '.webp', '.gif']);
+
 /** Target-specific options carried on the invoke payload's `options` channel. */
 interface SurfdashPubOptions {
     operation?: unknown;
@@ -113,6 +116,19 @@ function fail(error: string): Result {
     return ResultSchema.parse({ ok: false, target: TARGET, error });
 }
 
+/**
+ * Writes a Result JSON to `outputPath`, creating the directory as needed. Shared by the success
+ * path and the invalid-input path so a malformed payload still produces the spec §2.5 `ok:false`
+ * Result artifact (R7).
+ */
+async function writePublishResult(outputPath: string, result: Result): Promise<void> {
+    const outDir = dirname(outputPath);
+    if (outDir && outDir !== '.') {
+        await createNodeFileSystem().ensureDir(outDir);
+    }
+    await createNodeFileSystem().writeFile(outputPath, JSON.stringify(result, null, 2));
+}
+
 /** Parses and routes `options.operation`; unknown or misplaced values fail loud. */
 function resolveOperation(options: SurfdashPubOptions): { operation: Operation } | { error: string } {
     const raw = options.operation ?? 'publish';
@@ -359,14 +375,19 @@ async function scaffoldLocale(options: SurfdashPubOptions): Promise<Result> {
  * for the agent prompt; safe because sync always runs after the agent's edit.
  */
 export function normalizeLocaleFrontmatter(markdown: string): string {
+    // Frontmatter-only rewrite (R3). The previous implementation filtered empty lines across the
+    // WHOLE document, deleting every blank line in the body — that is the sync corruption. Only
+    // the head between the opening and closing `---` is rewritten here; `split`/`join` on '\n'
+    // round-trips the rest of the document byte-for-byte.
     const lines = markdown.split('\n');
-    const inFrontmatter = lines[0]?.trim() === '---';
-    for (let i = 1; inFrontmatter && i < lines.length; i++) {
-        if (lines[i]?.trim() === '---') break;
-        if (/^canonical\s*:/.test(lines[i] ?? '')) lines[i] = '';
-        else if (/^draft\s*:/.test(lines[i] ?? '')) lines[i] = 'draft: false';
-    }
-    return lines.filter((line) => line !== '').join('\n');
+    if (lines[0]?.trim() !== '---') return markdown;
+    const close = lines.findIndex((l, i) => i > 0 && l.trim() === '---');
+    if (close < 0) return markdown;
+    const head = lines
+        .slice(1, close)
+        .filter((l) => !/^canonical\s*:/.test(l))
+        .map((l) => (/^draft\s*:/.test(l) ? 'draft: false' : l));
+    return [lines[0], ...head, ...lines.slice(close)].join('\n');
 }
 
 async function syncPost(options: SurfdashPubOptions): Promise<Result> {
@@ -435,17 +456,32 @@ async function publishPost(payload: PublishTransportPayload): Promise<Result> {
     const dateStamp = runDate || today;
     const titleSlug = slugify(payload.content.title ?? '');
     const slug = titleSlug ? `${dateStamp}-${titleSlug}` : `${dateStamp}-post`;
-    const postDir = join(surfdashRoot, 'content', 'posts', 'articles', locale, slug);
+    // Validate before touching disk (R4): a `metadata.runDate` or slug that escapes the articles
+    // tree would write a post outside it, and a non-image `coverImage` would be copied into a post
+    // that pushPostGit then publishes to a public repo.
+    if (runDate !== '' && !/^\d{8}$/.test(runDate)) {
+        return fail(`metadata.runDate must be YYYYMMDD, got '${runDate}'`);
+    }
+    const articlesRoot = resolve(surfdashRoot, 'content', 'posts', 'articles');
+    const localeRoot = resolve(articlesRoot, locale);
+    const postDir = resolve(localeRoot, slug);
+    if (dirname(localeRoot) !== articlesRoot || dirname(postDir) !== localeRoot) {
+        return fail(`post path escapes ${articlesRoot}`);
+    }
+    const coverPath = payload.content.metadata?.coverImage;
+    if (typeof coverPath === 'string' && existsSync(coverPath) && !COVER_EXTS.has(extname(coverPath).toLowerCase())) {
+        return fail(`metadata.coverImage must be one of ${[...COVER_EXTS].join(', ')}`);
+    }
+
     await createNodeFileSystem().ensureDir(postDir);
 
     // Cover image: metadata.coverImage (absolute local path) is copied into the post's
     // assets dir and referenced relatively — the surfdash PostSchema accepts ./assets/<file>.
     let imageFrontmatter: string | undefined;
-    const coverPath = payload.content.metadata?.coverImage;
     if (typeof coverPath === 'string' && existsSync(coverPath)) {
         const assetsDir = join(postDir, 'assets');
         await createNodeFileSystem().ensureDir(assetsDir);
-        const coverName = `cover${coverPath.slice(coverPath.lastIndexOf('.'))}`;
+        const coverName = `cover${extname(coverPath).toLowerCase()}`;
         await copyFile(coverPath, join(assetsDir, coverName));
         imageFrontmatter = `./assets/${coverName}`;
     }
@@ -552,8 +588,18 @@ export async function processPublishIO(
 ): Promise<void> {
     await createNodeFileSystem().deleteFile(outputPath);
     const rawInput = await createNodeFileSystem().readFile(inputPath);
-    const raw = JSON.parse(rawInput) as Record<string, unknown>;
-    const content = ContentSchema.parse(raw);
+    // A malformed payload must yield the spec §2.5 `ok:false` Result and a non-zero exit, not an
+    // uncaught SyntaxError (R7 — the other publishers were built from a template with this catch).
+    let raw: Record<string, unknown>;
+    let content: Content;
+    try {
+        raw = JSON.parse(rawInput) as Record<string, unknown>;
+        content = ContentSchema.parse(raw);
+    } catch (error: unknown) {
+        const message = `Invalid Content input: ${error instanceof Error ? error.message : String(error)}`;
+        await writePublishResult(outputPath, fail(message));
+        throw new Error(message);
+    }
     const options =
         raw.options !== undefined && typeof raw.options === 'object' && raw.options !== null
             ? (raw.options as Record<string, unknown>)
@@ -562,12 +608,7 @@ export async function processPublishIO(
     const result = await transport.publish({ content, options });
     const validatedResult = ResultSchema.parse(result);
 
-    const outDir = dirname(outputPath);
-    if (outDir && outDir !== '.') {
-        await createNodeFileSystem().ensureDir(outDir);
-    }
-
-    await createNodeFileSystem().writeFile(outputPath, JSON.stringify(validatedResult, null, 2));
+    await writePublishResult(outputPath, validatedResult);
 
     if (!validatedResult.ok) {
         throw new Error(validatedResult.error ?? 'Publish failed');