@growth-labs/cms 0.5.27 → 0.5.30

package/dist/engine/publication-receipt/receipt.d.ts

@@ -0,0 +1,316 @@
+import { z } from 'zod';
+export declare const SITE_PUBLICATION_RECEIPT_SCHEMA: "site.publication.receipt.v1";
+export declare const SITE_PUBLICATION_RECEIPT_AUDIENCE: "foundry:site-publication-receipt";
+export declare const publicationProbeSchema: z.ZodObject<{
+    /** What was probed, e.g. `html` or `markdown`. */
+    kind: z.ZodEnum<["html", "markdown"]>;
+    url: z.ZodString;
+    status: z.ZodNumber;
+    /** SHA-256 of the exact bytes observed, so Foundry can compare. */
+    digest: z.ZodString;
+}, "strict", z.ZodTypeAny, {
+    status: number;
+    kind: "html" | "markdown";
+    url: string;
+    digest: string;
+}, {
+    status: number;
+    kind: "html" | "markdown";
+    url: string;
+    digest: string;
+}>;
+export declare const publicationProjectionCountsSchema: z.ZodObject<{
+    seo: z.ZodNumber;
+    search: z.ZodNumber;
+    sitemap: z.ZodNumber;
+    feed: z.ZodNumber;
+}, "strict", z.ZodTypeAny, {
+    search: number;
+    seo: number;
+    sitemap: number;
+    feed: number;
+}, {
+    search: number;
+    seo: number;
+    sitemap: number;
+    feed: number;
+}>;
+export declare const sitePublicationReceiptBodySchema: z.ZodEffects<z.ZodObject<{
+    schema: z.ZodLiteral<"site.publication.receipt.v1">;
+    audience: z.ZodLiteral<"foundry:site-publication-receipt">;
+    /** Success and failure are both signed; a silent failure is unverifiable. */
+    outcome: z.ZodEnum<["success", "failure"]>;
+    /** Identity of the publishing property (the site). */
+    property: z.ZodObject<{
+        id: z.ZodString;
+        origin: z.ZodString;
+    }, "strict", z.ZodTypeAny, {
+        id: string;
+        origin: string;
+    }, {
+        id: string;
+        origin: string;
+    }>;
+    /** Identity of the thing published, stable across revisions. */
+    content: z.ZodObject<{
+        stableId: z.ZodString;
+        slug: z.ZodString;
+        revisionId: z.ZodString;
+    }, "strict", z.ZodTypeAny, {
+        slug: string;
+        revisionId: string;
+        stableId: string;
+    }, {
+        slug: string;
+        revisionId: string;
+        stableId: string;
+    }>;
+    /** What produced it. */
+    source: z.ZodObject<{
+        commit: z.ZodString;
+        foundryHandoffId: z.ZodString;
+        foundryRunId: z.ZodString;
+    }, "strict", z.ZodTypeAny, {
+        commit: string;
+        foundryHandoffId: string;
+        foundryRunId: string;
+    }, {
+        commit: string;
+        foundryHandoffId: string;
+        foundryRunId: string;
+    }>;
+    /** Logical database identity — never a connection string or credential. */
+    database: z.ZodObject<{
+        logicalId: z.ZodString;
+    }, "strict", z.ZodTypeAny, {
+        logicalId: string;
+    }, {
+        logicalId: string;
+    }>;
+    /** Hash of the public media manifest, not the media itself. */
+    publicMediaManifestHash: z.ZodString;
+    projections: z.ZodObject<{
+        seo: z.ZodNumber;
+        search: z.ZodNumber;
+        sitemap: z.ZodNumber;
+        feed: z.ZodNumber;
+    }, "strict", z.ZodTypeAny, {
+        search: number;
+        seo: number;
+        sitemap: number;
+        feed: number;
+    }, {
+        search: number;
+        seo: number;
+        sitemap: number;
+        feed: number;
+    }>;
+    probes: z.ZodArray<z.ZodObject<{
+        /** What was probed, e.g. `html` or `markdown`. */
+        kind: z.ZodEnum<["html", "markdown"]>;
+        url: z.ZodString;
+        status: z.ZodNumber;
+        /** SHA-256 of the exact bytes observed, so Foundry can compare. */
+        digest: z.ZodString;
+    }, "strict", z.ZodTypeAny, {
+        status: number;
+        kind: "html" | "markdown";
+        url: string;
+        digest: string;
+    }, {
+        status: number;
+        kind: "html" | "markdown";
+        url: string;
+        digest: string;
+    }>, "many">;
+    /** How to undo this publication. */
+    rollback: z.ZodObject<{
+        pointer: z.ZodString;
+    }, "strict", z.ZodTypeAny, {
+        pointer: string;
+    }, {
+        pointer: string;
+    }>;
+    /** Replay identity. Supplied by the caller and persisted, never generated here. */
+    nonce: z.ZodString;
+    issuedAt: z.ZodString;
+    /** Present only when `outcome` is `failure`, and bounded. */
+    failureReason: z.ZodOptional<z.ZodString>;
+}, "strict", z.ZodTypeAny, {
+    rollback: {
+        pointer: string;
+    };
+    source: {
+        commit: string;
+        foundryHandoffId: string;
+        foundryRunId: string;
+    };
+    content: {
+        slug: string;
+        revisionId: string;
+        stableId: string;
+    };
+    audience: "foundry:site-publication-receipt";
+    schema: "site.publication.receipt.v1";
+    outcome: "success" | "failure";
+    property: {
+        id: string;
+        origin: string;
+    };
+    database: {
+        logicalId: string;
+    };
+    publicMediaManifestHash: string;
+    projections: {
+        search: number;
+        seo: number;
+        sitemap: number;
+        feed: number;
+    };
+    probes: {
+        status: number;
+        kind: "html" | "markdown";
+        url: string;
+        digest: string;
+    }[];
+    nonce: string;
+    issuedAt: string;
+    failureReason?: string | undefined;
+}, {
+    rollback: {
+        pointer: string;
+    };
+    source: {
+        commit: string;
+        foundryHandoffId: string;
+        foundryRunId: string;
+    };
+    content: {
+        slug: string;
+        revisionId: string;
+        stableId: string;
+    };
+    audience: "foundry:site-publication-receipt";
+    schema: "site.publication.receipt.v1";
+    outcome: "success" | "failure";
+    property: {
+        id: string;
+        origin: string;
+    };
+    database: {
+        logicalId: string;
+    };
+    publicMediaManifestHash: string;
+    projections: {
+        search: number;
+        seo: number;
+        sitemap: number;
+        feed: number;
+    };
+    probes: {
+        status: number;
+        kind: "html" | "markdown";
+        url: string;
+        digest: string;
+    }[];
+    nonce: string;
+    issuedAt: string;
+    failureReason?: string | undefined;
+}>, {
+    rollback: {
+        pointer: string;
+    };
+    source: {
+        commit: string;
+        foundryHandoffId: string;
+        foundryRunId: string;
+    };
+    content: {
+        slug: string;
+        revisionId: string;
+        stableId: string;
+    };
+    audience: "foundry:site-publication-receipt";
+    schema: "site.publication.receipt.v1";
+    outcome: "success" | "failure";
+    property: {
+        id: string;
+        origin: string;
+    };
+    database: {
+        logicalId: string;
+    };
+    publicMediaManifestHash: string;
+    projections: {
+        search: number;
+        seo: number;
+        sitemap: number;
+        feed: number;
+    };
+    probes: {
+        status: number;
+        kind: "html" | "markdown";
+        url: string;
+        digest: string;
+    }[];
+    nonce: string;
+    issuedAt: string;
+    failureReason?: string | undefined;
+}, {
+    rollback: {
+        pointer: string;
+    };
+    source: {
+        commit: string;
+        foundryHandoffId: string;
+        foundryRunId: string;
+    };
+    content: {
+        slug: string;
+        revisionId: string;
+        stableId: string;
+    };
+    audience: "foundry:site-publication-receipt";
+    schema: "site.publication.receipt.v1";
+    outcome: "success" | "failure";
+    property: {
+        id: string;
+        origin: string;
+    };
+    database: {
+        logicalId: string;
+    };
+    publicMediaManifestHash: string;
+    projections: {
+        search: number;
+        seo: number;
+        sitemap: number;
+        feed: number;
+    };
+    probes: {
+        status: number;
+        kind: "html" | "markdown";
+        url: string;
+        digest: string;
+    }[];
+    nonce: string;
+    issuedAt: string;
+    failureReason?: string | undefined;
+}>;
+export type SitePublicationReceiptBody = z.infer<typeof sitePublicationReceiptBodySchema>;
+export declare class PublicationReceiptError extends Error {
+    readonly code: 'invalid_body' | 'invalid_key';
+    constructor(code: PublicationReceiptError['code'], message: string);
+}
+/**
+ * Validate a receipt body and return its canonical RFC 8785 form.
+ *
+ * Validation happens before canonicalization on purpose: signing an unvalidated
+ * body would produce a verifiable signature over a malformed claim, which is
+ * strictly worse than refusing, because downstream would trust it.
+ */
+export declare function canonicalizeReceiptBody(body: unknown): {
+    body: SitePublicationReceiptBody;
+    canonical: string;
+};
+//# sourceMappingURL=receipt.d.ts.map

package/dist/engine/publication-receipt/receipt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"receipt.d.ts","sourceRoot":"","sources":["../../../src/engine/publication-receipt/receipt.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAGvB,eAAO,MAAM,+BAA+B,EAAG,6BAAsC,CAAA;AACrF,eAAO,MAAM,iCAAiC,EAAG,kCAA2C,CAAA;AAoB5F,eAAO,MAAM,sBAAsB;IAEjC,kDAAkD;;;;IAIlD,mEAAmE;;;;;;;;;;;;EAG3D,CAAA;AAEV,eAAO,MAAM,iCAAiC;;;;;;;;;;;;;;;EAOpC,CAAA;AAEV,eAAO,MAAM,gCAAgC;;;IAK3C,6EAA6E;;IAG7E,sDAAsD;;;;;;;;;;;IAGtD,gEAAgE;;;;;;;;;;;;;;IAShE,wBAAwB;;;;;;;;;;;;;;IASxB,2EAA2E;;;;;;;;IAG3E,+DAA+D;;;;;;;;;;;;;;;;;;;QAlD/D,kDAAkD;;;;QAIlD,mEAAmE;;;;;;;;;;;;;IAoDnE,oCAAoC;;;;;;;;IAGpC,mFAAmF;;;IAInF,6DAA6D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAmB5D,CAAA;AAEH,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gCAAgC,CAAC,CAAA;AAEzF,qBAAa,uBAAwB,SAAQ,KAAK;IACjD,QAAQ,CAAC,IAAI,EAAE,cAAc,GAAG,aAAa,CAAA;gBAEjC,IAAI,EAAE,uBAAuB,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,MAAM;CAKlE;AAED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,OAAO,GAAG;IACvD,IAAI,EAAE,0BAA0B,CAAA;IAChC,SAAS,EAAE,MAAM,CAAA;CACjB,CAcA"}

package/dist/engine/publication-receipt/receipt.js

@@ -0,0 +1,131 @@
+// `site.publication.receipt.v1` — the signed handoff receipt (#342).
+//
+// A receipt is the site's terminal, non-repudiable statement about one
+// publication attempt. Foundry must be able to verify it without trusting the
+// transport and without re-querying the site, so everything it needs to judge
+// the claim is inside the signed body.
+//
+// The site persists the canonical bytes and signature exactly once BEFORE
+// network delivery; a retry resends those stored bytes verbatim. That is why
+// nothing in the body is derived at sign time — the nonce and timestamps are
+// inputs, not defaults. A schema that generated its own nonce would produce a
+// different receipt on every retry and break replay-safety by construction.
+import { z } from 'zod';
+import { canonicalJson } from './canonical-json.js';
+export const SITE_PUBLICATION_RECEIPT_SCHEMA = 'site.publication.receipt.v1';
+export const SITE_PUBLICATION_RECEIPT_AUDIENCE = 'foundry:site-publication-receipt';
+/** Lowercase hex SHA-256. */
+const sha256Hex = z.string().regex(/^[0-9a-f]{64}$/, 'expected lowercase hex sha-256');
+/** A bounded identifier: printable ASCII, no whitespace, capped. */
+const identifier = z
+    .string()
+    .min(1)
+    .max(256)
+    .regex(/^[\x21-\x7e]+$/, 'expected a bounded printable identifier');
+/** RFC 3339 UTC instant, seconds precision, `Z` only — no local offsets. */
+const instant = z
+    .string()
+    .regex(/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}Z$/, 'expected an RFC 3339 UTC instant');
+/** A count that must stay bounded so a receipt cannot carry unbounded claims. */
+const boundedCount = z.number().int().min(0).max(1_000_000);
+export const publicationProbeSchema = z
+    .object({
+    /** What was probed, e.g. `html` or `markdown`. */
+    kind: z.enum(['html', 'markdown']),
+    url: z.string().url().max(2048),
+    status: z.number().int().min(100).max(599),
+    /** SHA-256 of the exact bytes observed, so Foundry can compare. */
+    digest: sha256Hex,
+})
+    .strict();
+export const publicationProjectionCountsSchema = z
+    .object({
+    seo: boundedCount,
+    search: boundedCount,
+    sitemap: boundedCount,
+    feed: boundedCount,
+})
+    .strict();
+export const sitePublicationReceiptBodySchema = z
+    .object({
+    schema: z.literal(SITE_PUBLICATION_RECEIPT_SCHEMA),
+    audience: z.literal(SITE_PUBLICATION_RECEIPT_AUDIENCE),
+    /** Success and failure are both signed; a silent failure is unverifiable. */
+    outcome: z.enum(['success', 'failure']),
+    /** Identity of the publishing property (the site). */
+    property: z.object({ id: identifier, origin: z.string().url().max(2048) }).strict(),
+    /** Identity of the thing published, stable across revisions. */
+    content: z
+        .object({
+        stableId: identifier,
+        slug: identifier,
+        revisionId: identifier,
+    })
+        .strict(),
+    /** What produced it. */
+    source: z
+        .object({
+        commit: z.string().regex(/^[0-9a-f]{40}$/, 'expected a full git sha'),
+        foundryHandoffId: identifier,
+        foundryRunId: identifier,
+    })
+        .strict(),
+    /** Logical database identity — never a connection string or credential. */
+    database: z.object({ logicalId: identifier }).strict(),
+    /** Hash of the public media manifest, not the media itself. */
+    publicMediaManifestHash: sha256Hex,
+    projections: publicationProjectionCountsSchema,
+    probes: z.array(publicationProbeSchema).max(16),
+    /** How to undo this publication. */
+    rollback: z.object({ pointer: identifier }).strict(),
+    /** Replay identity. Supplied by the caller and persisted, never generated here. */
+    nonce: identifier,
+    issuedAt: instant,
+    /** Present only when `outcome` is `failure`, and bounded. */
+    failureReason: z.string().min(1).max(512).optional(),
+})
+    .strict()
+    .superRefine((body, ctx) => {
+    if (body.outcome === 'failure' && body.failureReason === undefined) {
+        ctx.addIssue({
+            code: z.ZodIssueCode.custom,
+            path: ['failureReason'],
+            message: 'a failure receipt must state its reason',
+        });
+    }
+    if (body.outcome === 'success' && body.failureReason !== undefined) {
+        ctx.addIssue({
+            code: z.ZodIssueCode.custom,
+            path: ['failureReason'],
+            message: 'a success receipt must not carry a failure reason',
+        });
+    }
+});
+export class PublicationReceiptError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.name = 'PublicationReceiptError';
+        this.code = code;
+    }
+}
+/**
+ * Validate a receipt body and return its canonical RFC 8785 form.
+ *
+ * Validation happens before canonicalization on purpose: signing an unvalidated
+ * body would produce a verifiable signature over a malformed claim, which is
+ * strictly worse than refusing, because downstream would trust it.
+ */
+export function canonicalizeReceiptBody(body) {
+    const parsed = sitePublicationReceiptBodySchema.safeParse(body);
+    if (!parsed.success) {
+        throw new PublicationReceiptError('invalid_body', `Receipt body failed validation: ${parsed.error.issues
+            .map((issue) => `${issue.path.join('.')}: ${issue.message}`)
+            .join('; ')}`);
+    }
+    return {
+        body: parsed.data,
+        canonical: canonicalJson(parsed.data),
+    };
+}
+//# sourceMappingURL=receipt.js.map

package/dist/engine/publication-receipt/receipt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"receipt.js","sourceRoot":"","sources":["../../../src/engine/publication-receipt/receipt.ts"],"names":[],"mappings":"AAAA,qEAAqE;AACrE,EAAE;AACF,uEAAuE;AACvE,8EAA8E;AAC9E,8EAA8E;AAC9E,uCAAuC;AACvC,EAAE;AACF,0EAA0E;AAC1E,6EAA6E;AAC7E,6EAA6E;AAC7E,8EAA8E;AAC9E,4EAA4E;AAE5E,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,EAAE,aAAa,EAAkB,MAAM,qBAAqB,CAAA;AAEnE,MAAM,CAAC,MAAM,+BAA+B,GAAG,6BAAsC,CAAA;AACrF,MAAM,CAAC,MAAM,iCAAiC,GAAG,kCAA2C,CAAA;AAE5F,6BAA6B;AAC7B,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,EAAE,gCAAgC,CAAC,CAAA;AAEtF,oEAAoE;AACpE,MAAM,UAAU,GAAG,CAAC;KAClB,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,GAAG,CAAC;KACR,KAAK,CAAC,gBAAgB,EAAE,yCAAyC,CAAC,CAAA;AAEpE,4EAA4E;AAC5E,MAAM,OAAO,GAAG,CAAC;KACf,MAAM,EAAE;KACR,KAAK,CAAC,wCAAwC,EAAE,kCAAkC,CAAC,CAAA;AAErF,iFAAiF;AACjF,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;AAE3D,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC;KACrC,MAAM,CAAC;IACP,kDAAkD;IAClD,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAClC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC;IAC/B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAC1C,mEAAmE;IACnE,MAAM,EAAE,SAAS;CACjB,CAAC;KACD,MAAM,EAAE,CAAA;AAEV,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC;KAChD,MAAM,CAAC;IACP,GAAG,EAAE,YAAY;IACjB,MAAM,EAAE,YAAY;IACpB,OAAO,EAAE,YAAY;IACrB,IAAI,EAAE,YAAY;CAClB,CAAC;KACD,MAAM,EAAE,CAAA;AAEV,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC;KAC/C,MAAM,CAAC;IACP,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,+BAA+B,CAAC;IAClD,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,iCAAiC,CAAC;IAEtD,6EAA6E;IAC7E,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IAEvC,sDAAsD;IACtD,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;IAEnF,gEAAgE;IAChE,OAAO,EAAE,CAAC;SACR,MAAM,CAAC;QACP,QAAQ,EAAE,UAAU;QACpB,IAAI,EAAE,UAAU;QAChB,UAAU,EAAE,UAAU;KACtB,CAAC;SACD,MAAM,EAAE;IAEV,wBAAwB;IACxB,MAAM,EAAE,CAAC;SACP,MAAM,CAAC;QACP,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,EAAE,yBAAyB,CAAC;QACrE,gBAAgB,EAAE,UAAU;QAC5B,YAAY,EAAE,UAAU;KACxB,CAAC;SACD,MAAM,EAAE;IAEV,2EAA2E;IAC3E,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IAEtD,+DAA+D;IAC/D,uBAAuB,EAAE,SAAS;IAElC,WAAW,EAAE,iCAAiC;IAC9C,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IAE/C,oCAAoC;IACpC,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IAEpD,mFAAmF;IACnF,KAAK,EAAE,UAAU;IACjB,QAAQ,EAAE,OAAO;IAEjB,6DAA6D;IAC7D,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;CACpD,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;IAC1B,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,IAAI,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;QACpE,GAAG,CAAC,QAAQ,CAAC;YACZ,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,IAAI,EAAE,CAAC,eAAe,CAAC;YACvB,OAAO,EAAE,yCAAyC;SAClD,CAAC,CAAA;IACH,CAAC;IACD,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,IAAI,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;QACpE,GAAG,CAAC,QAAQ,CAAC;YACZ,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,IAAI,EAAE,CAAC,eAAe,CAAC;YACvB,OAAO,EAAE,mDAAmD;SAC5D,CAAC,CAAA;IACH,CAAC;AACF,CAAC,CAAC,CAAA;AAIH,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IACxC,IAAI,CAAgC;IAE7C,YAAY,IAAqC,EAAE,OAAe;QACjE,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAA;QACrC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;IACjB,CAAC;CACD;AAED;;;;;;GAMG;AACH,MAAM,UAAU,uBAAuB,CAAC,IAAa;IAIpD,MAAM,MAAM,GAAG,gCAAgC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;IAC/D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACrB,MAAM,IAAI,uBAAuB,CAChC,cAAc,EACd,mCAAmC,MAAM,CAAC,KAAK,CAAC,MAAM;aACpD,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;aAC3D,IAAI,CAAC,IAAI,CAAC,EAAE,CACd,CAAA;IACF,CAAC;IACD,OAAO;QACN,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,SAAS,EAAE,aAAa,CAAC,MAAM,CAAC,IAA4B,CAAC;KAC7D,CAAA;AACF,CAAC"}

package/dist/engine/publication-receipt/signature.d.ts

@@ -0,0 +1,36 @@
+import { SITE_PUBLICATION_RECEIPT_AUDIENCE, type SitePublicationReceiptBody } from './receipt.js';
+export interface SignedPublicationReceipt {
+    body: SitePublicationReceiptBody;
+    /** The exact bytes that were signed. Persist these, not a re-serialization. */
+    canonical: string;
+    /** Lowercase hex SHA-256 of `canonical`. */
+    bodyHash: string;
+    /** Base64url, unpadded. */
+    signature: string;
+    /** Key id the verifier should select. */
+    kid: string;
+    audience: typeof SITE_PUBLICATION_RECEIPT_AUDIENCE;
+}
+/**
+ * Validate, canonicalize and sign a receipt body.
+ *
+ * Deterministic: the same body and key always produce the same bytes and the
+ * same signature, which is what makes "retries resend byte-identical bytes"
+ * achievable. Nothing is generated here — the nonce and `issuedAt` come from
+ * the caller, who is responsible for persisting them once.
+ */
+export declare function signPublicationReceipt(body: unknown, key: CryptoKey, kid: string): Promise<SignedPublicationReceipt>;
+/**
+ * Verify a receipt as Foundry would: re-canonicalize the body from scratch and
+ * check the signature over THOSE bytes.
+ *
+ * Deliberately ignores any `canonical` string supplied alongside the receipt. A
+ * verifier that trusts the sender's canonical form would accept a signature
+ * over bytes that do not match the body it then acts on — which is the whole
+ * attack canonicalization exists to prevent.
+ */
+export declare function verifyPublicationReceipt(receipt: {
+    body: unknown;
+    signature: string;
+}, key: CryptoKey): Promise<boolean>;
+//# sourceMappingURL=signature.d.ts.map

package/dist/engine/publication-receipt/signature.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"signature.d.ts","sourceRoot":"","sources":["../../../src/engine/publication-receipt/signature.ts"],"names":[],"mappings":"AASA,OAAO,EAGN,iCAAiC,EACjC,KAAK,0BAA0B,EAE/B,MAAM,cAAc,CAAA;AAErB,MAAM,WAAW,wBAAwB;IACxC,IAAI,EAAE,0BAA0B,CAAA;IAChC,+EAA+E;IAC/E,SAAS,EAAE,MAAM,CAAA;IACjB,4CAA4C;IAC5C,QAAQ,EAAE,MAAM,CAAA;IAChB,2BAA2B;IAC3B,SAAS,EAAE,MAAM,CAAA;IACjB,yCAAyC;IACzC,GAAG,EAAE,MAAM,CAAA;IACX,QAAQ,EAAE,OAAO,iCAAiC,CAAA;CAClD;AAwBD;;;;;;;GAOG;AACH,wBAAsB,sBAAsB,CAC3C,IAAI,EAAE,OAAO,EACb,GAAG,EAAE,SAAS,EACd,GAAG,EAAE,MAAM,GACT,OAAO,CAAC,wBAAwB,CAAC,CAcnC;AAED;;;;;;;;GAQG;AACH,wBAAsB,wBAAwB,CAC7C,OAAO,EAAE;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,EAC7C,GAAG,EAAE,SAAS,GACZ,OAAO,CAAC,OAAO,CAAC,CAmBlB"}

package/dist/engine/publication-receipt/signature.js

@@ -0,0 +1,79 @@
+// Ed25519 signature envelope for `site.publication.receipt.v1` (#342).
+//
+// Signs the RFC 8785 canonical bytes of the receipt body, so the signature is
+// over exactly what Foundry will re-canonicalize and compare — not over a
+// re-serialization that might differ in key order.
+//
+// crypto.subtle only; never node:crypto. The package runs in Workers.
+import { canonicalJsonSha256 } from './canonical-json.js';
+import { canonicalizeReceiptBody, PublicationReceiptError, SITE_PUBLICATION_RECEIPT_AUDIENCE, sitePublicationReceiptBodySchema, } from './receipt.js';
+function toBase64Url(bytes) {
+    let binary = '';
+    for (const byte of bytes)
+        binary += String.fromCharCode(byte);
+    return btoa(binary).replace(/\+/g, '-').replace(/\//g, '_').replace(/=+$/, '');
+}
+function fromBase64Url(value) {
+    if (!/^[A-Za-z0-9_-]+$/.test(value)) {
+        throw new PublicationReceiptError('invalid_body', 'Signature is not unpadded base64url');
+    }
+    const padded = value.replace(/-/g, '+').replace(/_/g, '/');
+    const binary = atob(padded + '='.repeat((4 - (padded.length % 4)) % 4));
+    const bytes = new Uint8Array(binary.length);
+    for (let index = 0; index < binary.length; index += 1)
+        bytes[index] = binary.charCodeAt(index);
+    return bytes;
+}
+/** ArrayBuffer-backed copy — TextEncoder output is not a `BufferSource`. */
+function encode(value) {
+    return Uint8Array.from(new TextEncoder().encode(value));
+}
+/**
+ * Validate, canonicalize and sign a receipt body.
+ *
+ * Deterministic: the same body and key always produce the same bytes and the
+ * same signature, which is what makes "retries resend byte-identical bytes"
+ * achievable. Nothing is generated here — the nonce and `issuedAt` come from
+ * the caller, who is responsible for persisting them once.
+ */
+export async function signPublicationReceipt(body, key, kid) {
+    if (key.type !== 'private') {
+        throw new PublicationReceiptError('invalid_key', 'Signing requires an Ed25519 private key');
+    }
+    const { body: validated, canonical } = canonicalizeReceiptBody(body);
+    const signature = await globalThis.crypto.subtle.sign({ name: 'Ed25519' }, key, encode(canonical));
+    return {
+        body: validated,
+        canonical,
+        bodyHash: await canonicalJsonSha256(validated),
+        signature: toBase64Url(new Uint8Array(signature)),
+        kid,
+        audience: SITE_PUBLICATION_RECEIPT_AUDIENCE,
+    };
+}
+/**
+ * Verify a receipt as Foundry would: re-canonicalize the body from scratch and
+ * check the signature over THOSE bytes.
+ *
+ * Deliberately ignores any `canonical` string supplied alongside the receipt. A
+ * verifier that trusts the sender's canonical form would accept a signature
+ * over bytes that do not match the body it then acts on — which is the whole
+ * attack canonicalization exists to prevent.
+ */
+export async function verifyPublicationReceipt(receipt, key) {
+    const parsed = sitePublicationReceiptBodySchema.safeParse(receipt.body);
+    if (!parsed.success)
+        return false;
+    if (parsed.data.audience !== SITE_PUBLICATION_RECEIPT_AUDIENCE)
+        return false;
+    let signatureBytes;
+    try {
+        signatureBytes = fromBase64Url(receipt.signature);
+    }
+    catch {
+        return false;
+    }
+    const { canonical } = canonicalizeReceiptBody(parsed.data);
+    return await globalThis.crypto.subtle.verify({ name: 'Ed25519' }, key, Uint8Array.from(signatureBytes), encode(canonical));
+}
+//# sourceMappingURL=signature.js.map

package/dist/engine/publication-receipt/signature.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signature.js","sourceRoot":"","sources":["../../../src/engine/publication-receipt/signature.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,EAAE;AACF,8EAA8E;AAC9E,0EAA0E;AAC1E,mDAAmD;AACnD,EAAE;AACF,sEAAsE;AAEtE,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAA;AACzD,OAAO,EACN,uBAAuB,EACvB,uBAAuB,EACvB,iCAAiC,EAEjC,gCAAgC,GAChC,MAAM,cAAc,CAAA;AAerB,SAAS,WAAW,CAAC,KAAiB;IACrC,IAAI,MAAM,GAAG,EAAE,CAAA;IACf,KAAK,MAAM,IAAI,IAAI,KAAK;QAAE,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAA;IAC7D,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;AAC/E,CAAC;AAED,SAAS,aAAa,CAAC,KAAa;IACnC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,uBAAuB,CAAC,cAAc,EAAE,qCAAqC,CAAC,CAAA;IACzF,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;IAC1D,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;IACvE,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IAC3C,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC;QAAE,KAAK,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAA;IAC9F,OAAO,KAAK,CAAA;AACb,CAAC;AAED,4EAA4E;AAC5E,SAAS,MAAM,CAAC,KAAa;IAC5B,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;AACxD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC3C,IAAa,EACb,GAAc,EACd,GAAW;IAEX,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC5B,MAAM,IAAI,uBAAuB,CAAC,aAAa,EAAE,yCAAyC,CAAC,CAAA;IAC5F,CAAC;IACD,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,uBAAuB,CAAC,IAAI,CAAC,CAAA;IACpE,MAAM,SAAS,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,CAAA;IAClG,OAAO;QACN,IAAI,EAAE,SAAS;QACf,SAAS;QACT,QAAQ,EAAE,MAAM,mBAAmB,CAAC,SAAkB,CAAC;QACvD,SAAS,EAAE,WAAW,CAAC,IAAI,UAAU,CAAC,SAAS,CAAC,CAAC;QACjD,GAAG;QACH,QAAQ,EAAE,iCAAiC;KAC3C,CAAA;AACF,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC7C,OAA6C,EAC7C,GAAc;IAEd,MAAM,MAAM,GAAG,gCAAgC,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IACvE,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,OAAO,KAAK,CAAA;IACjC,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,KAAK,iCAAiC;QAAE,OAAO,KAAK,CAAA;IAE5E,IAAI,cAA0B,CAAA;IAC9B,IAAI,CAAC;QACJ,cAAc,GAAG,aAAa,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;IAClD,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,KAAK,CAAA;IACb,CAAC;IAED,MAAM,EAAE,SAAS,EAAE,GAAG,uBAAuB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IAC1D,OAAO,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAC3C,EAAE,IAAI,EAAE,SAAS,EAAE,EACnB,GAAG,EACH,UAAU,CAAC,IAAI,CAAC,cAAc,CAAC,EAC/B,MAAM,CAAC,SAAS,CAAC,CACjB,CAAA;AACF,CAAC"}

package/dist/engine/publication.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"publication.d.ts","sourceRoot":"","sources":["../../src/engine/publication.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAEX,8BAA8B,EAC9B,WAAW,EACX,iBAAiB,EACjB,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EACN,KAAK,eAAe,EAIpB,MAAM,uBAAuB,CAAA;AAC9B,OAAO,KAAK,EAAE,UAAU,EAAY,MAAM,SAAS,CAAA;AAcnD,MAAM,MAAM,oBAAoB,GAAG,SAAS,GAAG,UAAU,CAAA;AACzD,MAAM,MAAM,uBAAuB,GAAG,SAAS,GAAG,QAAQ,GAAG,OAAO,CAAA;AACpE,MAAM,MAAM,wBAAwB,GAAG,IAAI,GAAG,SAAS,GAAG,QAAQ,CAAA;AAClE,MAAM,MAAM,8BAA8B,GAAG,MAAM,GAAG,WAAW,GAAG,eAAe,CAAA;AAEnF,MAAM,WAAW,yBAAyB;IACzC,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,wBAAwB,CAAA;IAChC,KAAK,CAAC,EAAE,uBAAuB,CAAA;IAC/B,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,UAAU,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,8BAA8B;IAC9C,SAAS,EAAE,oBAAoB,CAAA;IAC/B,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,CAAA;IAClB,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAA;IACjC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACjC,GAAG,EAAE,MAAM,CAAA;IACX,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9B,KAAK,CAAC,EAAE,uBAAuB,CAAA;IAC/B,8DAA8D;IAC9D,MAAM,CAAC,EAAE,WAAW,CAAA;CACpB;AAED,MAAM,WAAW,qBAAqB;IACrC,IAAI,EAAE,MAAM,CAAA;IACZ;;;;OAIG;IACH,OAAO,CAAC,CAAC,KAAK,EAAE,8BAA8B,GAAG,OAAO,CAAC,yBAAyB,GAAG,SAAS,CAAC,CAAA;IAC/F;;;;OAIG;IACH,MAAM,CAAC,CAAC,KAAK,EAAE,8BAA8B,GAAG,OAAO,CAAC,yBAAyB,GAAG,SAAS,CAAC,CAAA;IAC9F,6EAA6E;IAC7E,KAAK,CAAC,CAAC,KAAK,EAAE,8BAA8B,GAAG,OAAO,CAAC,yBAAyB,GAAG,SAAS,CAAC,CAAA;IAC7F,+EAA+E;IAC/E,SAAS,CAAC,CAAC,KAAK,EAAE,8BAA8B,GAAG,OAAO,CAAC,yBAAyB,GAAG,SAAS,CAAC,CAAA;CACjG;AAED,MAAM,WAAW,eAAe;IAC/B,SAAS,EAAE,MAAM,CAAA;IACjB,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,sEAAsE;IACtE,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,QAAQ,CAAC,EAAE,qBAAqB,EAAE,CAAA;IAClC,eAAe,CAAC,EAAE,OAAO,CAAA;IACzB,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAA;IAC/B,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9B,oBAAoB,CAAC,EAAE,MAAM,CAAA;CAC7B;AAED,MAAM,WAAW,iBAAiB;IACjC,MAAM,EAAE,WAAW,CAAA;IACnB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,CAAA;IAClB,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAA;IACjC,WAAW,EAAE,MAAM,CAAA;IACnB,aAAa,EAAE,8BAA8B,CAAA;IAC7C,QAAQ,EAAE,yBAAyB,EAAE,CAAA;IACrC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAA;CAC7B;AAED,MAAM,WAAW,wBAAwB;IACxC,SAAS,EAAE,MAAM,CAAA;IACjB,gBAAgB,EAAE,MAAM,CAAA;IACxB,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,QAAQ,CAAC,EAAE,qBAAqB,EAAE,CAAA;IAClC,eAAe,CAAC,EAAE,OAAO,CAAA;IACzB,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAA;IAC/B,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9B,oBAAoB,CAAC,EAAE,MAAM,CAAA;CAC7B;AAED,MAAM,WAAW,0BAA0B;IAC1C,MAAM,EAAE,aAAa,CAAA;IACrB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,CAAA;IAClB,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAA;IACjC,YAAY,EAAE,MAAM,CAAA;IACpB,aAAa,EAAE,8BAA8B,CAAA;IAC7C,QAAQ,EAAE,yBAAyB,EAAE,CAAA;IACrC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAA;CAC7B;AAED,MAAM,WAAW,6BAA6B;IAC7C,SAAS,EAAE,MAAM,CAAA;IACjB,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,QAAQ,CAAC,EAAE,qBAAqB,EAAE,CAAA;IAClC,oBAAoB,CAAC,EAAE,MAAM,CAAA;CAC7B;AAED,MAAM,WAAW,+BAA+B;IAC/C,MAAM,EAAE,YAAY,GAAG,eAAe,GAAG,SAAS,GAAG,cAAc,CAAA;IACnE,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,CAAA;IAClB,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAA;IACjC,aAAa,EAAE,8BAA8B,CAAA;IAC7C,QAAQ,EAAE,yBAAyB,EAAE,CAAA;IACrC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAA;CAC7B;AAED,MAAM,MAAM,uBAAuB,GAAG,8BAA8B,CAAA;AAEpE,MAAM,WAAW,kBAAkB;IAClC,EAAE,EAAE,MAAM,CAAA;IACV,SAAS,EAAE,oBAAoB,CAAA;IAC/B,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,CAAA;IAClB,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAA;IACjC,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAA;IAChC,KAAK,EAAE,uBAAuB,CAAA;IAC9B,YAAY,EAAE,MAAM,EAAE,CAAA;IACtB,mBAAmB,EAAE,MAAM,EAAE,CAAA;IAC7B,oBAAoB,EAAE,MAAM,EAAE,CAAA;IAC9B,QAAQ,EAAE,yBAAyB,EAAE,CAAA;IACrC,OAAO,EAAE,MAAM,CAAA;IACf,cAAc,EAAE,MAAM,GAAG,IAAI,CAAA;IAC7B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,aAAa,CAAC,EAAE,uBAAuB,CAAA;IACvC,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;CACjB;AAED,MAAM,WAAW,qCAAqC;IACrD,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,MAAM,CAAC,EAAE;QACR,SAAS,EAAE,MAAM,CAAA;QACjB,EAAE,EAAE,MAAM,CAAA;KACV,CAAA;CACD;AAED,qBAAa,8BAA+B,SAAQ,KAAK;IACxD,QAAQ,CAAC,QAAQ,EAAE,yBAAyB,EAAE,CAAA;IAC9C,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;gBAGhC,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,yBAAyB,EAAE,EACrC,SAAS,GAAE,MAAM,GAAG,IAAW;CAOhC;AAED,qBAAa,kCAAmC,SAAQ,KAAK;gBAChD,OAAO,EAAE,MAAM;CAI3B;AAED,qBAAa,2BAA4B,SAAQ,KAAK;IACrD,QAAQ,CAAC,QAAQ,EAAE,yBAAyB,EAAE,CAAA;IAC9C,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;gBAGhC,OAAO,EAAE,MAAM,EACf,QAAQ,GAAE,yBAAyB,EAAO,EAC1C,SAAS,GAAE,MAAM,GAAG,IAAW;CAOhC;AAED,qBAAa,wBAAyB,SAAQ,KAAK;gBACtC,OAAO,EAAE,MAAM;CAI3B;AAuBD,MAAM,WAAW,mBAAmB;IACnC,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,KAAK,CAAC,EAAE,kBAAkB,EAAE,CAAA;CAC5B;AAED,MAAM,WAAW,kBAAkB;IAClC,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,IAAI,CAAC,EAAE,WAAW,CAAA;IAClB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACvB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACtB,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC/B,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,UAAU,CAAC,EAAE,iBAAiB,CAAA;IAC9B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAChC,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC7B,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B,IAAI,CAAC,EAAE,MAAM,EAAE,CAAA;IACf,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,QAAQ,CAAC,EAAE,eAAe,CAAA;IAC1B,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CACzB;AAED,MAAM,WAAW,2BAA2B;IAC3C,sBAAsB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACtC,mBAAmB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACnC,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAA;IAC/B,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,YAAY,CAAC,EAAE,MAAM,CAAA;CACrB;AAED,MAAM,WAAW,mBAAmB;IACnC,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,SAAS,GAAG,YAAY,GAAG,MAAM,CAAA;IACvC,QAAQ,CAAC,EAAE,MAAM,CAAA;CACjB;AAED,MAAM,WAAW,kBAAkB;IAClC,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IACpB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACpB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAA;CACjB;AAED,MAAM,WAAW,0BAA0B;IAC1C,OAAO,EAAE,mBAAmB,EAAE,CAAA;IAC9B,OAAO,EAAE,kBAAkB,EAAE,CAAA;IAC7B,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,MAAM,CAAA;IACd,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,IAAI,EAAE,OAAO,CAAA;IACb,UAAU,EAAE;QACX,MAAM,EAAE,MAAM,CAAA;QACd,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;QACzB,SAAS,EAAE,MAAM,CAAA;QACjB,UAAU,EAAE,MAAM,CAAA;KAClB,CAAA;CACD;AAED,qBAAa,8BAA+B,SAAQ,KAAK;IACxD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;gBAEX,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;CAOxE;AAED,qBAAa,qBAAsB,SAAQ,KAAK;IAE9C,QAAQ,CAAC,IAAI,EAAE,sBAAsB;gBAA5B,IAAI,EAAE,sBAAsB,EACrC,OAAO,EAAE,MAAM;CAKhB;AAuBD,eAAO,MAAM,2CAA2C,QAAS,CAAA;AACjE,eAAO,MAAM,uCAAuC,QAAS,CAAA;AAC7D,eAAO,MAAM,yCAAyC,MAAM,CAAA;AAC5D,eAAO,MAAM,qCAAqC,MAAM,CAAA;AAmOxD,wBAAsB,8BAA8B,CACnD,EAAE,EAAE,UAAU,EACd,OAAO,GAAE,qCAA0C,GACjD,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAqD/B;AAmoCD,wBAAsB,UAAU,CAC/B,EAAE,EAAE,UAAU,EACd,KAAK,EAAE,eAAe,GACpB,OAAO,CAAC,iBAAiB,CAAC,CAoE5B;AAED,wBAAsB,mBAAmB,CACxC,EAAE,EAAE,UAAU,EACd,KAAK,EAAE,wBAAwB,GAC7B,OAAO,CAAC,0BAA0B,CAAC,CAyErC;AAED,wBAAsB,wBAAwB,CAC7C,EAAE,EAAE,UAAU,EACd,KAAK,EAAE,6BAA6B,GAClC,OAAO,CAAC,+BAA+B,CAAC,CA8I1C;AAqRD,wBAAsB,oBAAoB,CACzC,EAAE,EAAE,UAAU,EACd,OAAO,EAAE,mBAAmB,EAC5B,OAAO,GAAE,2BAAgC,GACvC,OAAO,CAAC,0BAA0B,CAAC,CAuGrC"}
+{"version":3,"file":"publication.d.ts","sourceRoot":"","sources":["../../src/engine/publication.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAEX,8BAA8B,EAC9B,WAAW,EACX,iBAAiB,EACjB,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EACN,KAAK,eAAe,EAIpB,MAAM,uBAAuB,CAAA;AAC9B,OAAO,KAAK,EAAE,UAAU,EAAY,MAAM,SAAS,CAAA;AAcnD,MAAM,MAAM,oBAAoB,GAAG,SAAS,GAAG,UAAU,CAAA;AACzD,MAAM,MAAM,uBAAuB,GAAG,SAAS,GAAG,QAAQ,GAAG,OAAO,CAAA;AACpE,MAAM,MAAM,wBAAwB,GAAG,IAAI,GAAG,SAAS,GAAG,QAAQ,CAAA;AAClE,MAAM,MAAM,8BAA8B,GAAG,MAAM,GAAG,WAAW,GAAG,eAAe,CAAA;AAEnF,MAAM,WAAW,yBAAyB;IACzC,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,wBAAwB,CAAA;IAChC,KAAK,CAAC,EAAE,uBAAuB,CAAA;IAC/B,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,UAAU,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,8BAA8B;IAC9C,SAAS,EAAE,oBAAoB,CAAA;IAC/B,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,CAAA;IAClB,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAA;IACjC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACjC,GAAG,EAAE,MAAM,CAAA;IACX,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9B,KAAK,CAAC,EAAE,uBAAuB,CAAA;IAC/B,8DAA8D;IAC9D,MAAM,CAAC,EAAE,WAAW,CAAA;CACpB;AAED,MAAM,WAAW,qBAAqB;IACrC,IAAI,EAAE,MAAM,CAAA;IACZ;;;;OAIG;IACH,OAAO,CAAC,CAAC,KAAK,EAAE,8BAA8B,GAAG,OAAO,CAAC,yBAAyB,GAAG,SAAS,CAAC,CAAA;IAC/F;;;;OAIG;IACH,MAAM,CAAC,CAAC,KAAK,EAAE,8BAA8B,GAAG,OAAO,CAAC,yBAAyB,GAAG,SAAS,CAAC,CAAA;IAC9F,6EAA6E;IAC7E,KAAK,CAAC,CAAC,KAAK,EAAE,8BAA8B,GAAG,OAAO,CAAC,yBAAyB,GAAG,SAAS,CAAC,CAAA;IAC7F,+EAA+E;IAC/E,SAAS,CAAC,CAAC,KAAK,EAAE,8BAA8B,GAAG,OAAO,CAAC,yBAAyB,GAAG,SAAS,CAAC,CAAA;CACjG;AAED,MAAM,WAAW,eAAe;IAC/B,SAAS,EAAE,MAAM,CAAA;IACjB,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,sEAAsE;IACtE,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,QAAQ,CAAC,EAAE,qBAAqB,EAAE,CAAA;IAClC,eAAe,CAAC,EAAE,OAAO,CAAA;IACzB,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAA;IAC/B,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9B,oBAAoB,CAAC,EAAE,MAAM,CAAA;CAC7B;AAED,MAAM,WAAW,iBAAiB;IACjC,MAAM,EAAE,WAAW,CAAA;IACnB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,CAAA;IAClB,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAA;IACjC,WAAW,EAAE,MAAM,CAAA;IACnB,aAAa,EAAE,8BAA8B,CAAA;IAC7C,QAAQ,EAAE,yBAAyB,EAAE,CAAA;IACrC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAA;CAC7B;AAED,MAAM,WAAW,wBAAwB;IACxC,SAAS,EAAE,MAAM,CAAA;IACjB,gBAAgB,EAAE,MAAM,CAAA;IACxB,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,QAAQ,CAAC,EAAE,qBAAqB,EAAE,CAAA;IAClC,eAAe,CAAC,EAAE,OAAO,CAAA;IACzB,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAA;IAC/B,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9B,oBAAoB,CAAC,EAAE,MAAM,CAAA;CAC7B;AAED,MAAM,WAAW,0BAA0B;IAC1C,MAAM,EAAE,aAAa,CAAA;IACrB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,CAAA;IAClB,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAA;IACjC,YAAY,EAAE,MAAM,CAAA;IACpB,aAAa,EAAE,8BAA8B,CAAA;IAC7C,QAAQ,EAAE,yBAAyB,EAAE,CAAA;IACrC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAA;CAC7B;AAED,MAAM,WAAW,6BAA6B;IAC7C,SAAS,EAAE,MAAM,CAAA;IACjB,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,QAAQ,CAAC,EAAE,qBAAqB,EAAE,CAAA;IAClC,oBAAoB,CAAC,EAAE,MAAM,CAAA;CAC7B;AAED,MAAM,WAAW,+BAA+B;IAC/C,MAAM,EAAE,YAAY,GAAG,eAAe,GAAG,SAAS,GAAG,cAAc,CAAA;IACnE,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,CAAA;IAClB,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAA;IACjC,aAAa,EAAE,8BAA8B,CAAA;IAC7C,QAAQ,EAAE,yBAAyB,EAAE,CAAA;IACrC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAA;CAC7B;AAED,MAAM,MAAM,uBAAuB,GAAG,8BAA8B,CAAA;AAEpE,MAAM,WAAW,kBAAkB;IAClC,EAAE,EAAE,MAAM,CAAA;IACV,SAAS,EAAE,oBAAoB,CAAA;IAC/B,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,CAAA;IAClB,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAA;IACjC,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAA;IAChC,KAAK,EAAE,uBAAuB,CAAA;IAC9B,YAAY,EAAE,MAAM,EAAE,CAAA;IACtB,mBAAmB,EAAE,MAAM,EAAE,CAAA;IAC7B,oBAAoB,EAAE,MAAM,EAAE,CAAA;IAC9B,QAAQ,EAAE,yBAAyB,EAAE,CAAA;IACrC,OAAO,EAAE,MAAM,CAAA;IACf,cAAc,EAAE,MAAM,GAAG,IAAI,CAAA;IAC7B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,aAAa,CAAC,EAAE,uBAAuB,CAAA;IACvC,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;CACjB;AAED,MAAM,WAAW,qCAAqC;IACrD,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,MAAM,CAAC,EAAE;QACR,SAAS,EAAE,MAAM,CAAA;QACjB,EAAE,EAAE,MAAM,CAAA;KACV,CAAA;CACD;AAED,qBAAa,8BAA+B,SAAQ,KAAK;IACxD,QAAQ,CAAC,QAAQ,EAAE,yBAAyB,EAAE,CAAA;IAC9C,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;gBAGhC,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,yBAAyB,EAAE,EACrC,SAAS,GAAE,MAAM,GAAG,IAAW;CAOhC;AAED,qBAAa,kCAAmC,SAAQ,KAAK;gBAChD,OAAO,EAAE,MAAM;CAI3B;AAED,qBAAa,2BAA4B,SAAQ,KAAK;IACrD,QAAQ,CAAC,QAAQ,EAAE,yBAAyB,EAAE,CAAA;IAC9C,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;gBAGhC,OAAO,EAAE,MAAM,EACf,QAAQ,GAAE,yBAAyB,EAAO,EAC1C,SAAS,GAAE,MAAM,GAAG,IAAW;CAOhC;AAED,qBAAa,wBAAyB,SAAQ,KAAK;gBACtC,OAAO,EAAE,MAAM;CAI3B;AAuBD,MAAM,WAAW,mBAAmB;IACnC,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,KAAK,CAAC,EAAE,kBAAkB,EAAE,CAAA;CAC5B;AAED,MAAM,WAAW,kBAAkB;IAClC,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,IAAI,CAAC,EAAE,WAAW,CAAA;IAClB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACvB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACtB,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC/B,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,UAAU,CAAC,EAAE,iBAAiB,CAAA;IAC9B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAChC,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC7B,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B,IAAI,CAAC,EAAE,MAAM,EAAE,CAAA;IACf,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,QAAQ,CAAC,EAAE,eAAe,CAAA;IAC1B,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CACzB;AAED,MAAM,WAAW,2BAA2B;IAC3C,sBAAsB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACtC,mBAAmB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACnC,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAA;IAC/B,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,YAAY,CAAC,EAAE,MAAM,CAAA;CACrB;AAED,MAAM,WAAW,mBAAmB;IACnC,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,SAAS,GAAG,YAAY,GAAG,MAAM,CAAA;IACvC,QAAQ,CAAC,EAAE,MAAM,CAAA;CACjB;AAED,MAAM,WAAW,kBAAkB;IAClC,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IACpB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACpB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAA;CACjB;AAED,MAAM,WAAW,0BAA0B;IAC1C,OAAO,EAAE,mBAAmB,EAAE,CAAA;IAC9B,OAAO,EAAE,kBAAkB,EAAE,CAAA;IAC7B,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,MAAM,CAAA;IACd,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,IAAI,EAAE,OAAO,CAAA;IACb,UAAU,EAAE;QACX,MAAM,EAAE,MAAM,CAAA;QACd,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;QACzB,SAAS,EAAE,MAAM,CAAA;QACjB,UAAU,EAAE,MAAM,CAAA;KAClB,CAAA;CACD;AAED,qBAAa,8BAA+B,SAAQ,KAAK;IACxD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;gBAEX,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;CAOxE;AAED,qBAAa,qBAAsB,SAAQ,KAAK;IAE9C,QAAQ,CAAC,IAAI,EAAE,sBAAsB;gBAA5B,IAAI,EAAE,sBAAsB,EACrC,OAAO,EAAE,MAAM;CAKhB;AAuBD,eAAO,MAAM,2CAA2C,QAAS,CAAA;AACjE,eAAO,MAAM,uCAAuC,QAAS,CAAA;AAC7D,eAAO,MAAM,yCAAyC,MAAM,CAAA;AAC5D,eAAO,MAAM,qCAAqC,MAAM,CAAA;AAmOxD,wBAAsB,8BAA8B,CACnD,EAAE,EAAE,UAAU,EACd,OAAO,GAAE,qCAA0C,GACjD,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAqD/B;AAqoCD,wBAAsB,UAAU,CAC/B,EAAE,EAAE,UAAU,EACd,KAAK,EAAE,eAAe,GACpB,OAAO,CAAC,iBAAiB,CAAC,CAoE5B;AAED,wBAAsB,mBAAmB,CACxC,EAAE,EAAE,UAAU,EACd,KAAK,EAAE,wBAAwB,GAC7B,OAAO,CAAC,0BAA0B,CAAC,CAyErC;AAED,wBAAsB,wBAAwB,CAC7C,EAAE,EAAE,UAAU,EACd,KAAK,EAAE,6BAA6B,GAClC,OAAO,CAAC,+BAA+B,CAAC,CA8I1C;AAqRD,wBAAsB,oBAAoB,CACzC,EAAE,EAAE,UAAU,EACd,OAAO,EAAE,mBAAmB,EAC5B,OAAO,GAAE,2BAAgC,GACvC,OAAO,CAAC,0BAA0B,CAAC,CAuGrC"}

package/dist/engine/publication.js

@@ -410,6 +410,8 @@ function assertPublicationSnapshotBodyValid(snapshot, contentId) {
         body_html: typeof bodyHtml === 'string' ? bodyHtml : null,
     }, {
         source: 'publish-one',
+        // #329: source-section defects block at publish, warn on save.
+        blockSourceSectionDefects: true,
         contentId,
         requireBody: true,
     });