@growth-labs/cms 0.8.19 → 0.8.23

package/dist/ui/screens/podcast-listening-data.d.ts

@@ -0,0 +1,19 @@
+import type { PodcastListening, PodcastListeningEpisode } from '../../providers/types.js';
+export type PodcastSortKey = 'episode' | 'plays' | 'listeners' | 'reached10' | 'reached25' | 'reached50' | 'reached75' | 'reached90' | 'completes' | 'completionRate' | 'totalListeningSeconds';
+/**
+ * Normalize the GET /admin/api/analytics?type=podcastListening body. The route
+ * returns the provider's PodcastListening verbatim; this keeps a malformed
+ * host payload from crashing the screen — broken rows drop, broken numbers
+ * read as 0, and a body that is not a PodcastListening at all yields null
+ * (rendered as the explicit unavailable state, never silent zeros).
+ */
+export declare function normalizePodcastListening(input: unknown): PodcastListening | null;
+/**
+ * Sort episodes for the table. `episode` sorts by display title then slug;
+ * every metric sorts descending-first (the interesting end), then ascending on
+ * the second click.
+ */
+export declare function sortEpisodes(episodes: readonly PodcastListeningEpisode[], key: PodcastSortKey, dir: 'asc' | 'desc'): PodcastListeningEpisode[];
+/** The table's display name: the D1 title, the slug, or the unattributed label. */
+export declare function episodeLabel(episode: Pick<PodcastListeningEpisode, 'slug' | 'title'>): string;
+//# sourceMappingURL=podcast-listening-data.d.ts.map

package/dist/ui/screens/podcast-listening-data.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"podcast-listening-data.d.ts","sourceRoot":"","sources":["../../../src/ui/screens/podcast-listening-data.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAA;AAEzF,MAAM,MAAM,cAAc,GACvB,SAAS,GACT,OAAO,GACP,WAAW,GACX,WAAW,GACX,WAAW,GACX,WAAW,GACX,WAAW,GACX,WAAW,GACX,WAAW,GACX,gBAAgB,GAChB,uBAAuB,CAAA;AAiC1B;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,OAAO,GAAG,gBAAgB,GAAG,IAAI,CA0BjF;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAC3B,QAAQ,EAAE,SAAS,uBAAuB,EAAE,EAC5C,GAAG,EAAE,cAAc,EACnB,GAAG,EAAE,KAAK,GAAG,MAAM,GACjB,uBAAuB,EAAE,CAiB3B;AAED,mFAAmF;AACnF,wBAAgB,YAAY,CAAC,OAAO,EAAE,IAAI,CAAC,uBAAuB,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,MAAM,CAG7F"}

package/dist/ui/screens/podcast-listening-data.js

@@ -0,0 +1,98 @@
+/** Defensive read of one metric: a non-finite value renders as 0, not NaN. */
+function num(value) {
+    const n = typeof value === 'number' ? value : Number(value);
+    return Number.isFinite(n) ? n : 0;
+}
+function normalizeEpisode(input) {
+    if (!input || typeof input !== 'object')
+        return null;
+    const row = input;
+    const slug = typeof row.slug === 'string' ? row.slug : '';
+    const hasListening = typeof row.totalListeningSeconds === 'number';
+    const listening = hasListening ? num(row.totalListeningSeconds) : null;
+    const listeners = num(row.listeners);
+    return {
+        slug,
+        ...(typeof row.title === 'string' && row.title.length > 0 ? { title: row.title } : {}),
+        plays: num(row.plays),
+        listeners,
+        reached10: num(row.reached10),
+        reached25: num(row.reached25),
+        reached50: num(row.reached50),
+        reached75: num(row.reached75),
+        reached90: num(row.reached90),
+        completes: num(row.completes),
+        completionRate: num(row.completionRate),
+        totalListeningSeconds: listening,
+        avgListeningSecondsPerListener: listening !== null && listeners > 0 ? listening / listeners : null,
+    };
+}
+/**
+ * Normalize the GET /admin/api/analytics?type=podcastListening body. The route
+ * returns the provider's PodcastListening verbatim; this keeps a malformed
+ * host payload from crashing the screen — broken rows drop, broken numbers
+ * read as 0, and a body that is not a PodcastListening at all yields null
+ * (rendered as the explicit unavailable state, never silent zeros).
+ */
+export function normalizePodcastListening(input) {
+    if (!input || typeof input !== 'object')
+        return null;
+    const body = input;
+    if (!Array.isArray(body.episodes))
+        return null;
+    const episodes = body.episodes
+        .map(normalizeEpisode)
+        .filter((e) => e !== null);
+    const totalsRow = body.totals;
+    const totals = totalsRow ?? {};
+    const rangeRow = body.range;
+    return {
+        episodes,
+        totals: {
+            episodes: num(totals.episodes),
+            plays: num(totals.plays),
+            listeners: num(totals.listeners),
+            completes: num(totals.completes),
+            completionRate: num(totals.completionRate),
+            totalListeningSeconds: typeof totals.totalListeningSeconds === 'number' ? num(totals.totalListeningSeconds) : null,
+        },
+        range: {
+            from: typeof rangeRow?.from === 'string' ? rangeRow.from : '',
+            to: typeof rangeRow?.to === 'string' ? rangeRow.to : '',
+        },
+    };
+}
+/**
+ * Sort episodes for the table. `episode` sorts by display title then slug;
+ * every metric sorts descending-first (the interesting end), then ascending on
+ * the second click.
+ */
+export function sortEpisodes(episodes, key, dir) {
+    const factor = dir === 'asc' ? 1 : -1;
+    return [...episodes].sort((a, b) => {
+        if (key === 'episode') {
+            const cmp = episodeLabel(a).localeCompare(episodeLabel(b));
+            return factor * cmp;
+        }
+        const av = a[key];
+        const bv = b[key];
+        // Unmeasured listening time always sinks to the bottom regardless of
+        // direction — it is an unknown, not a small number.
+        if (av === null && bv === null)
+            return episodeLabel(a).localeCompare(episodeLabel(b));
+        if (av === null)
+            return 1;
+        if (bv === null)
+            return -1;
+        if (av === bv)
+            return episodeLabel(a).localeCompare(episodeLabel(b));
+        return factor * (av - bv);
+    });
+}
+/** The table's display name: the D1 title, the slug, or the unattributed label. */
+export function episodeLabel(episode) {
+    if (episode.slug === 'unattributed')
+        return '(unattributed episodes)';
+    return episode.title && episode.title.length > 0 ? episode.title : episode.slug;
+}
+//# sourceMappingURL=podcast-listening-data.js.map

package/dist/ui/screens/podcast-listening-data.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"podcast-listening-data.js","sourceRoot":"","sources":["../../../src/ui/screens/podcast-listening-data.ts"],"names":[],"mappings":"AAeA,8EAA8E;AAC9E,SAAS,GAAG,CAAC,KAAc;IAC1B,MAAM,CAAC,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IAC3D,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;AAClC,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACvC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAA;IACpD,MAAM,GAAG,GAAG,KAAgC,CAAA;IAC5C,MAAM,IAAI,GAAG,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAA;IACzD,MAAM,YAAY,GAAG,OAAO,GAAG,CAAC,qBAAqB,KAAK,QAAQ,CAAA;IAClE,MAAM,SAAS,GAAG,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IACtE,MAAM,SAAS,GAAG,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;IACpC,OAAO;QACN,IAAI;QACJ,GAAG,CAAC,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtF,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC;QACrB,SAAS;QACT,SAAS,EAAE,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC;QAC7B,SAAS,EAAE,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC;QAC7B,SAAS,EAAE,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC;QAC7B,SAAS,EAAE,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC;QAC7B,SAAS,EAAE,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC;QAC7B,SAAS,EAAE,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC;QAC7B,cAAc,EAAE,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC;QACvC,qBAAqB,EAAE,SAAS;QAChC,8BAA8B,EAC7B,SAAS,KAAK,IAAI,IAAI,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI;KACnE,CAAA;AACF,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,yBAAyB,CAAC,KAAc;IACvD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAA;IACpD,MAAM,IAAI,GAAG,KAAgC,CAAA;IAC7C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAA;IAC9C,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ;SAC5B,GAAG,CAAC,gBAAgB,CAAC;SACrB,MAAM,CAAC,CAAC,CAAC,EAAgC,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAA;IACzD,MAAM,SAAS,GAAG,IAAI,CAAC,MAA6C,CAAA;IACpE,MAAM,MAAM,GAAG,SAAS,IAAI,EAAE,CAAA;IAC9B,MAAM,QAAQ,GAAG,IAAI,CAAC,KAA4C,CAAA;IAClE,OAAO;QACN,QAAQ;QACR,MAAM,EAAE;YACP,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC;YAC9B,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC;YACxB,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC;YAChC,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC;YAChC,cAAc,EAAE,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC;YAC1C,qBAAqB,EACpB,OAAO,MAAM,CAAC,qBAAqB,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,IAAI;SAC5F;QACD,KAAK,EAAE;YACN,IAAI,EAAE,OAAO,QAAQ,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE;YAC7D,EAAE,EAAE,OAAO,QAAQ,EAAE,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE;SACvD;KACD,CAAA;AACF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAC3B,QAA4C,EAC5C,GAAmB,EACnB,GAAmB;IAEnB,MAAM,MAAM,GAAG,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACrC,OAAO,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QAClC,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACvB,MAAM,GAAG,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAA;YAC1D,OAAO,MAAM,GAAG,GAAG,CAAA;QACpB,CAAC;QACD,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,CAAA;QACjB,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,CAAA;QACjB,qEAAqE;QACrE,oDAAoD;QACpD,IAAI,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,IAAI;YAAE,OAAO,YAAY,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAA;QACrF,IAAI,EAAE,KAAK,IAAI;YAAE,OAAO,CAAC,CAAA;QACzB,IAAI,EAAE,KAAK,IAAI;YAAE,OAAO,CAAC,CAAC,CAAA;QAC1B,IAAI,EAAE,KAAK,EAAE;YAAE,OAAO,YAAY,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAA;QACpE,OAAO,MAAM,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC,CAAA;IAC1B,CAAC,CAAC,CAAA;AACH,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,YAAY,CAAC,OAAwD;IACpF,IAAI,OAAO,CAAC,IAAI,KAAK,cAAc;QAAE,OAAO,yBAAyB,CAAA;IACrE,OAAO,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAA;AAChF,CAAC"}

package/dist/ui/screens/registry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../../src/ui/screens/registry.tsx"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,0BAA0B,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAA;AACnG,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAA;AA4B7D,wBAAgB,gBAAgB,CAAC,EAChC,yBAAgC,EAChC,iBAAsB,EACtB,YAAY,EACZ,sBAA2B,EAC3B,QAAQ,GACR,GAAE;IACF,yBAAyB,CAAC,EAAE,OAAO,CAAA;IACnC,iBAAiB,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAC1D,YAAY,CAAC,EAAE,mBAAmB,CAAA;IAClC,sBAAsB,CAAC,EAAE,0BAA0B,EAAE,CAAA;IACrD,QAAQ,CAAC,EAAE,MAAM,CAAA;CACZ,GAAG,cAAc,CA0BtB;AAED,eAAO,MAAM,UAAU,EAAE,cAAmC,CAAA"}
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../../src/ui/screens/registry.tsx"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,0BAA0B,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAA;AACnG,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAA;AA6B7D,wBAAgB,gBAAgB,CAAC,EAChC,yBAAgC,EAChC,iBAAsB,EACtB,YAAY,EACZ,sBAA2B,EAC3B,QAAQ,GACR,GAAE;IACF,yBAAyB,CAAC,EAAE,OAAO,CAAA;IACnC,iBAAiB,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAC1D,YAAY,CAAC,EAAE,mBAAmB,CAAA;IAClC,sBAAsB,CAAC,EAAE,0BAA0B,EAAE,CAAA;IACrD,QAAQ,CAAC,EAAE,MAAM,CAAA;CACZ,GAAG,cAAc,CA2BtB;AAED,eAAO,MAAM,UAAU,EAAE,cAAmC,CAAA"}

package/dist/ui/screens/registry.js

@@ -7,6 +7,7 @@ import { ContentInsightsScreen } from './ContentInsightsScreen.js';
 import { ContentRoute } from './ContentRoute.js';
 import { DashboardScreen } from './DashboardScreen.js';
 import { MediaScreen } from './MediaScreen.js';
+import { PodcastListeningScreen } from './PodcastListeningScreen.js';
 import { SettingsScreen } from './SettingsScreen.js';
 import { SocialShareScreen } from './SocialShareScreen.js';
 import { SubscriptionsScreen } from './SubscriptionsScreen.js';
@@ -31,6 +32,7 @@ export function createCmsScreens({ allowInlineAuthorCreation = true, primaryCate
         calendar: () => _jsx(CalendarRoute, {}),
         media: () => _jsx(MediaScreen, {}),
         analytics: () => _jsx(AnalyticsScreen, {}),
+        podcasts: () => _jsx(PodcastListeningScreen, {}),
         authors: () => _jsx(AuthorsScreen, {}),
         topics: () => _jsx(TopicsScreen, {}),
         subscriptions: () => _jsx(SubscriptionsScreen, {}),

package/dist/ui/screens/registry.js.map

@@ -1 +1 @@
-{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../../src/ui/screens/registry.tsx"],"names":[],"mappings":";AAeA,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAA;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AACtD,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AACpD,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAA;AAClE,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAChD,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AACtD,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAC9C,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AACpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAA;AAC1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AAC9D,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAA;AAClE,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAEhD,uEAAuE;AACvE,2EAA2E;AAC3E,+EAA+E;AAC/E,SAAS,cAAc;IACtB,MAAM,EAAE,QAAQ,EAAE,GAAG,aAAa,EAAE,CAAA;IACpC,OAAO,KAAC,eAAe,IAAC,OAAO,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAI,CAAA;AAC/D,CAAC;AAED,SAAS,aAAa;IACrB,MAAM,EAAE,QAAQ,EAAE,GAAG,aAAa,EAAE,CAAA;IACpC,OAAO,KAAC,cAAc,IAAC,OAAO,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAI,CAAA;AAC9D,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,EAChC,yBAAyB,GAAG,IAAI,EAChC,iBAAiB,GAAG,EAAE,EACtB,YAAY,EACZ,sBAAsB,GAAG,EAAE,EAC3B,QAAQ,MAOL,EAAE;IACL,OAAO;QACN,OAAO,EAAE,GAAG,EAAE,CAAC,CACd,KAAC,YAAY,IACZ,yBAAyB,EAAE,yBAAyB,EACpD,iBAAiB,EAAE,iBAAiB,EACpC,YAAY,EAAE,YAAY,EAC1B,sBAAsB,EAAE,sBAAsB,GAC7C,CACF;QACD,kBAAkB,EAAE,GAAG,EAAE,CAAC,KAAC,qBAAqB,KAAG;QACnD,SAAS,EAAE,GAAG,EAAE,CAAC,KAAC,cAAc,KAAG;QACnC,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAC,aAAa,KAAG;QACjC,KAAK,EAAE,GAAG,EAAE,CAAC,KAAC,WAAW,KAAG;QAC5B,SAAS,EAAE,GAAG,EAAE,CAAC,KAAC,eAAe,KAAG;QACpC,OAAO,EAAE,GAAG,EAAE,CAAC,KAAC,aAAa,KAAG;QAChC,MAAM,EAAE,GAAG,EAAE,CAAC,KAAC,YAAY,KAAG;QAC9B,aAAa,EAAE,GAAG,EAAE,CAAC,KAAC,mBAAmB,KAAG;QAC5C,GAAG,CAAC,QAAQ;YACX,CAAC,CAAC,EAAE,kBAAkB,EAAE,GAAG,EAAE,CAAC,KAAC,qBAAqB,IAAC,QAAQ,EAAE,QAAQ,GAAI,EAAE;YAC7E,CAAC,CAAC,EAAE,CAAC;QACN,cAAc,EAAE,GAAG,EAAE,CAAC,CACrB,KAAC,iBAAiB,IAAC,yBAAyB,EAAE,yBAAyB,GAAI,CAC3E;QACD,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAC,cAAc,KAAG;KAClC,CAAA;AACF,CAAC;AAED,MAAM,CAAC,MAAM,UAAU,GAAmB,gBAAgB,EAAE,CAAA"}
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../../src/ui/screens/registry.tsx"],"names":[],"mappings":";AAeA,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAA;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AACtD,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AACpD,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAA;AAClE,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAChD,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AACtD,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAC9C,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAA;AACpE,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AACpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAA;AAC1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AAC9D,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAA;AAClE,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAEhD,uEAAuE;AACvE,2EAA2E;AAC3E,+EAA+E;AAC/E,SAAS,cAAc;IACtB,MAAM,EAAE,QAAQ,EAAE,GAAG,aAAa,EAAE,CAAA;IACpC,OAAO,KAAC,eAAe,IAAC,OAAO,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAI,CAAA;AAC/D,CAAC;AAED,SAAS,aAAa;IACrB,MAAM,EAAE,QAAQ,EAAE,GAAG,aAAa,EAAE,CAAA;IACpC,OAAO,KAAC,cAAc,IAAC,OAAO,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAI,CAAA;AAC9D,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,EAChC,yBAAyB,GAAG,IAAI,EAChC,iBAAiB,GAAG,EAAE,EACtB,YAAY,EACZ,sBAAsB,GAAG,EAAE,EAC3B,QAAQ,MAOL,EAAE;IACL,OAAO;QACN,OAAO,EAAE,GAAG,EAAE,CAAC,CACd,KAAC,YAAY,IACZ,yBAAyB,EAAE,yBAAyB,EACpD,iBAAiB,EAAE,iBAAiB,EACpC,YAAY,EAAE,YAAY,EAC1B,sBAAsB,EAAE,sBAAsB,GAC7C,CACF;QACD,kBAAkB,EAAE,GAAG,EAAE,CAAC,KAAC,qBAAqB,KAAG;QACnD,SAAS,EAAE,GAAG,EAAE,CAAC,KAAC,cAAc,KAAG;QACnC,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAC,aAAa,KAAG;QACjC,KAAK,EAAE,GAAG,EAAE,CAAC,KAAC,WAAW,KAAG;QAC5B,SAAS,EAAE,GAAG,EAAE,CAAC,KAAC,eAAe,KAAG;QACpC,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAC,sBAAsB,KAAG;QAC1C,OAAO,EAAE,GAAG,EAAE,CAAC,KAAC,aAAa,KAAG;QAChC,MAAM,EAAE,GAAG,EAAE,CAAC,KAAC,YAAY,KAAG;QAC9B,aAAa,EAAE,GAAG,EAAE,CAAC,KAAC,mBAAmB,KAAG;QAC5C,GAAG,CAAC,QAAQ;YACX,CAAC,CAAC,EAAE,kBAAkB,EAAE,GAAG,EAAE,CAAC,KAAC,qBAAqB,IAAC,QAAQ,EAAE,QAAQ,GAAI,EAAE;YAC7E,CAAC,CAAC,EAAE,CAAC;QACN,cAAc,EAAE,GAAG,EAAE,CAAC,CACrB,KAAC,iBAAiB,IAAC,yBAAyB,EAAE,yBAAyB,GAAI,CAC3E;QACD,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAC,cAAc,KAAG;KAClC,CAAA;AACF,CAAC;AAED,MAAM,CAAC,MAAM,UAAU,GAAmB,gBAAgB,EAAE,CAAA"}

package/docs/foundry-publish.md

@@ -64,6 +64,214 @@ GET returns HTTP 404 with `{ "error": "not_found" }` when the external id is abs
 
 POST has no request body. It moves an item back to `draft` through the native CMS lifecycle handler and returns the same four-field receipt shape. Repeating the request while already draft is idempotent.
 
+## v2 body, `POST /publish` and adoption (opt-in, per publication)
+
+Draft-only is the default and stays byte-identical to the v1 contract above. A
+publication opts in through the route's config, which the Astro adapter reads
+from `locals.cmsHooks.foundryPublish`:
+
+```ts
+locals.cmsHooks = {
+  ...locals.cmsHooks,
+  foundryPublish: {
+    autoPublish: true, // only the literal `true` opts in
+    canonicalHost: 'warfronts.pub', // REQUIRED when opted in: lowercase, no scheme, no port
+    surfaces: (ctx) => [sitemapSurface, feedSurface, markdownTwinSurface], // the LIVE surfaces
+    requiredSurfaceNames: ['seo-discovery'], // optional, forwarded to publishOne
+    bridgeSourceNamespace: 'warfronts', // the archive bridge's source_id namespace (adoption)
+    scheduling: 'publishOne', // only if the site's scheduler projects through publishOne
+  },
+}
+```
+
+With the flag off (omitted, `false`, or anything but `true`):
+
+- every existing request takes the v1 path, byte-for-byte;
+- a body carrying `schemaVersion: 2` is refused as today (`400 invalid_request`);
+- `POST .../publish` returns `409 published_requires_approval` (404 for an unknown id).
+
+With the flag on, v1 bodies still take the v1 path unchanged. Only a body
+declaring `"schemaVersion": 2` takes the v2 path.
+
+### Host-bound signatures on opted-in publications
+
+The Foundry HMAC secret is one value shared by every site. An opted-in
+publication therefore verifies every `/api/cms/foundry/*` verb (PUT, GET,
+publish, unpublish) against a host-bound string, newline-joined, with no
+trailing newline:
+
+```text
+foundry-cms-v2
+METHOD
+HOST
+PATH
+TIMESTAMP
+sha256hex(raw_body)
+```
+
+- `HOST` is the configured `foundryPublish.canonicalHost`, never the request's
+  Host header. A request signed for another site, the legacy dot form, or a
+  dot-joined host-bound string is `401`.
+- An opted-in publication without a valid `canonicalHost` answers
+  `503 GL_CMS_FOUNDRY_HOST_UNCONFIGURED` on every verb; it never falls back to
+  the unbound form.
+- Publications that do not opt in keep the legacy `method.path.timestamp.sha256`
+  string described above, byte-for-byte.
+- Foundry's signer is `SignPublishRequestV2` (fulcrum-labs/foundry
+  `articlechain`). This route verifies with `@growth-labs/foundry-signing`, the
+  one shared implementation, whose golden vectors (`/fixtures`) the route tests
+  import.
+
+### v2 PUT
+
+```json
+{
+  "schemaVersion": 2,
+  "slug": "exact-canonical-slug",
+  "title": "Article title",
+  "body_html": "<p>Complete article HTML.</p>",
+  "hero_image_key": "articles/<id>/hero.jpg",
+  "publishAt": "2026-10-01T09:00:00Z",
+  "author": "Byline",
+  "desk": "analysis",
+  "tags": ["drones"],
+  "description": "The dek.",
+  "visibility": "free",
+  "adoptSourceId": "warfronts:articles/military/<file>.md"
+}
+```
+
+The schema is strict and exported as `FoundryArticleV2Schema` from
+`@growth-labs/cms/foundry-emit`.
+
+- `slug`, `title` and `body_html` are required.
+- `slug` is used verbatim and must already be canonical (`slugify(slug) === slug`,
+  3–512 characters). It is never derived and never suffixed: a slug held by
+  another item is `409 slug_conflict`.
+- `hero_image_key` (a relative object key, stored as `hero_image_id` exactly as the
+  bridge import stores it) and `hero_image_url` (https) are mutually exclusive.
+- `description` fills `description` and `excerpt`, `author` fills `byline`, and
+  `desk` fills the primary category.
+- `publishAt` is carried on the draft (`publish_at`) for `POST /publish` to act on.
+
+A v2 PUT never publishes. It writes a draft, or, on an opted-in publication, edits
+a **published** item in place. That write is a CAS on `status = 'published'`, and
+the live revision does not move until `POST /publish` resyncs it. Scheduled,
+review and archived items stay human-owned: a changed PUT is
+`409 published_requires_approval`.
+
+Every v2 PUT, publish and GET response is the four-field receipt plus
+`request_sha256`: the lowercase hex SHA-256 of the exact bytes of the last
+accepted v2 PUT body, the value the route stores. An identical repeat PUT returns
+the existing receipt.
+
+### `POST /api/cms/foundry/articles/:external_id/publish`
+
+HMAC-signed like the others, with an empty body. It returns the receipt (plus
+`request_sha256`).
+
+- **Draft** with `publish_at` in the future: scheduled through the native schedule
+  action (`state: "scheduled"`), but only when the publication declares
+  `foundryPublish.scheduling: 'publishOne'`, meaning its scheduler publishes
+  scheduled items through `publishOne` with the live surfaces. Otherwise the
+  request is refused with `409 scheduling_requires_surface_scheduler`: the legacy
+  scheduled sweep (`engine/cron.ts` `runScheduledPublish`) publishes with no
+  surfaces, and that gap must surface at the request, not after the fact.
+- **Draft**, otherwise: published through `publishOne` with the publication's live
+  surfaces, so the `.md` twin, sitemap and feed are projected. The publication
+  time is the draft's `publishAt`, else now.
+- **Every** publish, schedule or resync acts on the working copy only while it is
+  still exactly what Foundry's last v2 PUT wrote; this applies to drafts and to
+  published items alike.
+- **Published** item whose working copy changed since its live revision: re-runs
+  `publishOne` (the resync), keeping the original publication time. The guard:
+  every v2 PUT records a History revision (`created_by: foundry`, tag
+  `foundry.put:<request_sha256>`), and the item's `canonical_version` must still
+  equal that revision's. A human edit since then is `409 human_edit_pending`,
+  with nothing written, until Foundry sends a new PUT or a human publishes.
+  Human-initiated writes outside the editor form (editor-triggered AI meta
+  description, dek, takeaways and OG image, the bulk topic op, and a topic rename)
+  advance `canonical_version` as an editor save does. The automatic enrichment a
+  publish triggers (the pre-commit dek, takeaways, FAQ and host enrichment) does
+  not. A person pulling an item (native unpublish, unschedule, or set-status to
+  draft or review) is a canonical edit too, so Foundry never republishes an
+  article a person pulled until it sends a new PUT. Foundry's own `/unpublish`
+  is not, so Foundry can unpublish and republish its own item. "Foundry's own" is
+  decided by an internal marker the HMAC-verified route sets on the contexts it
+  builds, never by a subject or user id. Tag rename and delete are canonical
+  edits to every tagged item too.
+- `POST /publish` takes no body: any body bytes, or a non-zero `Content-Length`,
+  is `400 invalid_request`.
+- Idempotent: a published item whose live revision is current, or a scheduled
+  item, returns its existing receipt.
+- The route never passes `allowNoSurfaces`. Absent, empty or failing surfaces
+  refuse with `503 GL_CMS_FOUNDRY_PUBLISH_UNCONFIGURED` before anything is written.
+- The publish runs the **native publish action itself**. Only its commit step is
+  swapped, from `publishContent` + `createRevision` to `publishOne` with the live
+  surfaces, through the internal `publishCommit` seam. So the readiness hook, the
+  body guard, dek generation (or the dek-failure notification), the tag check, the
+  activity log, takeaways and FAQ dispatch (first publish only), and the
+  `content.published` webhook run exactly as for an editor's publish, and its
+  refusals keep the native shapes.
+- An exception thrown inside the publication is `502 publish_failed` (or `422
+  publish_validation_failed` from the kernel's own guard). It leaves the item and
+  its receipt unchanged, so a retry re-runs it.
+- `unpublish` remains the undo.
+
+### One-time adoption of bridge-imported items
+
+When no item is bound to `foundry:<external_id>` yet, a v2 PUT first looks for an
+existing item:
+
+- by exact `source_id` when the body carries `adoptSourceId`;
+- otherwise by the verbatim slug.
+
+Only a bridge-imported article that no external id owns can be adopted, and
+only under the publication's declared bridge namespace
+(`foundryPublish.bridgeSourceNamespace`, so `source_id` = `<namespace>:<relpath>`,
+as a channel repo's `scripts/archive-import/compiler.mjs` `buildSourceId` writes
+it). Any other source is `409 adoption_source_not_bridge`; with no namespace
+declared, nothing is adoptable. Exactly one match is bound to `foundry:<external_id>` in one
+D1 transaction together with a `foundry.adopted` row in `cms_activity_log`, and
+the receipt carries an `adoption` object (`content_id`, `from_source_id`,
+`matched_by`). A draft or published match is then written as above. A scheduled,
+review or archived match is bound and answered with
+`409 published_requires_approval` plus the `adoption` object.
+
+| Response | When |
+| --- | --- |
+| `409 adoption_ambiguous` | `adoptSourceId` and the slug name two different items |
+| `409 adoption_conflict` | the match is deleted, not an article, already bound to another external id, not bridge-imported, or the bind lost a race |
+| `409 slug_conflict` | the slug is held by an item the request did not identify |
+
+### content-emit.json (`foundry-emit` bin)
+
+`foundry-emit --app <id> --source-sha <sha> --out <file> [--in <archive.json>]`
+reads an app compiler's ContentArchiveInput (`{ items }`, or compileArchive's
+`{ archive, receipt }`) from `--in` or stdin. It writes:
+
+```json
+{ "schemaVersion": 1, "app": "warfronts", "sourceSha": "<sha>",
+  "items": [
+    { "path": "articles/x.md", "videoId": "abc", "retire": false,
+      "requestSha256": "<hex>", "request": "{\"schemaVersion\":2,...}" },
+    { "path": "articles/old.md", "videoId": "def", "retire": true }
+  ] }
+```
+
+- It covers the whole archive; any item that cannot be emitted fails the run.
+- `retire` is the compiler's carry of frontmatter `status: archived`. A retire item
+  omits `request` and `requestSha256`.
+- `request` is a JSON **string**, the exact PUT body, so re-indenting the envelope
+  never changes its bytes.
+- `requestSha256` is the SHA-256 of its UTF-8 bytes. When foundryd PUTs exactly
+  those bytes, the route stores and echoes the same value as `request_sha256`.
+
+The mapper is exported as `toFoundryArticleV2(item)`, and the envelope builder as
+`buildContentEmit(archive, { app, sourceSha })`.
+
+No migration is needed for v2.
+
 ## Cloudflare binding
 
 ```toml

package/migrations/0033_survey_answer_labels.sql

@@ -0,0 +1,15 @@
+-- Owner-side classification of written survey answers (2026-10-02). Only the
+-- CMS owner ever sees an answer that is not labeled 'general': technical and
+-- unlabeled comments are withheld from every other role by the survey routes.
+-- No FK to a survey table: surveys live in the reporting upstream, so the key
+-- references provider-issued ids only.
+CREATE TABLE survey_answer_labels (
+  survey_id TEXT NOT NULL,
+  response_id TEXT NOT NULL,
+  question_id TEXT NOT NULL,
+  label TEXT NOT NULL CHECK (label IN ('technical','general')),
+  source TEXT NOT NULL CHECK (source IN ('owner','auto','import')),
+  labeled_by TEXT,
+  labeled_at INTEGER NOT NULL,
+  PRIMARY KEY (survey_id, response_id, question_id)
+);

package/package.json

@@ -1,9 +1,10 @@
 {
   "name": "@growth-labs/cms",
-  "version": "0.8.19",
+  "version": "0.8.23",
   "type": "module",
   "bin": {
-    "growth-labs-cms-migrations": "./dist/cli/migrations.js"
+    "growth-labs-cms-migrations": "./dist/cli/migrations.js",
+    "foundry-emit": "./dist/cli/foundry-emit.js"
   },
   "types": "./dist/index.d.ts",
   "exports": {
@@ -31,6 +32,10 @@
       "types": "./dist/integration/index.d.ts",
       "import": "./dist/integration/index.js"
     },
+    "./foundry-emit": {
+      "types": "./dist/foundry-emit.d.ts",
+      "import": "./dist/foundry-emit.js"
+    },
     "./migration-vendor": {
       "types": "./dist/migration-vendor.d.ts",
       "import": "./dist/migration-vendor.js"
@@ -128,7 +133,8 @@
     "@tiptap/suggestion": "3.30.5",
     "@tiptap/y-tiptap": "^3.0.9",
     "yjs": "^13.6.32",
-    "zod": "^3.24.0"
+    "zod": "^3.24.0",
+    "@growth-labs/foundry-signing": "^0.1.0"
   },
   "devDependencies": {
     "@puckeditor/core": "0.23.0",

package/src/cli/foundry-emit.ts

@@ -0,0 +1,85 @@
+#!/usr/bin/env node
+// foundry-emit --app <id> --source-sha <sha> --out <file> [--in <archive.json>]
+//
+// Reads an app compiler's ContentArchiveInput (`{ items }`, or compileArchive's
+// `{ archive, receipt }`) from --in or stdin and writes content-emit.json: the
+// whole archive as the exact v2 PUT bodies foundryd sends (see
+// buildContentEmit in ../foundry-emit.ts).
+import { readFileSync, realpathSync, renameSync, writeFileSync } from 'node:fs'
+import { pathToFileURL } from 'node:url'
+import type { ContentArchiveInput } from '../engine/publication.js'
+import { buildContentEmit, type ContentEmit } from '../foundry-emit.js'
+
+const USAGE = 'Usage: foundry-emit --app <id> --source-sha <sha> --out <file> [--in <archive.json>]'
+
+interface EmitArgs {
+	app: string
+	sourceSha: string
+	out: string
+	in?: string
+}
+
+export function parseEmitArgs(argv: string[]): EmitArgs {
+	const values: Record<string, string> = {}
+	for (let index = 0; index < argv.length; index += 2) {
+		const flag = argv[index]
+		const value = argv[index + 1]
+		if (!['--app', '--source-sha', '--out', '--in'].includes(flag ?? '')) {
+			throw new Error(`unknown argument ${flag}\n${USAGE}`)
+		}
+		if (!value || value.startsWith('--')) throw new Error(`${flag} requires a value\n${USAGE}`)
+		values[(flag as string).slice(2)] = value
+	}
+	for (const required of ['app', 'source-sha', 'out']) {
+		if (!values[required]) throw new Error(`--${required} is required\n${USAGE}`)
+	}
+	return {
+		app: values.app as string,
+		sourceSha: values['source-sha'] as string,
+		out: values.out as string,
+		...(values.in ? { in: values.in } : {}),
+	}
+}
+
+function archiveFrom(raw: string): ContentArchiveInput {
+	const parsed = JSON.parse(raw) as { items?: unknown; archive?: { items?: unknown } }
+	if (Array.isArray(parsed.items)) return parsed as ContentArchiveInput
+	if (parsed.archive && Array.isArray(parsed.archive.items)) {
+		return parsed.archive as ContentArchiveInput
+	}
+	throw new Error('input is not a ContentArchiveInput: no items array')
+}
+
+export async function runFoundryEmit(
+	argv: string[],
+	io: { readStdin: () => string } = { readStdin: () => readFileSync(0, 'utf8') },
+): Promise<ContentEmit> {
+	const args = parseEmitArgs(argv)
+	const raw = args.in ? readFileSync(args.in, 'utf8') : io.readStdin()
+	const emit = await buildContentEmit(archiveFrom(raw), {
+		app: args.app,
+		sourceSha: args.sourceSha,
+	})
+	// Written whole or not at all: a reader never sees a truncated emit.
+	const temporary = `${args.out}.tmp-${process.pid}`
+	writeFileSync(temporary, `${JSON.stringify(emit, null, 2)}\n`)
+	renameSync(temporary, args.out)
+	return emit
+}
+
+// An installed bin runs through a node_modules/.bin symlink, so compare real paths.
+if (process.argv[1] && import.meta.url === pathToFileURL(realpathSync(process.argv[1])).href) {
+	runFoundryEmit(process.argv.slice(2))
+		.then((emit) => {
+			const retired = emit.items.filter((item) => item.retire).length
+			console.log(
+				`foundry-emit: wrote ${emit.items.length} items (${retired} retire) for ${emit.app}@${emit.sourceSha}`,
+			)
+		})
+		.catch((error: unknown) => {
+			process.stderr.write(
+				`foundry-emit: ${error instanceof Error ? error.message : String(error)}\n`,
+			)
+			process.exitCode = 1
+		})
+}

package/src/engine/fronts-publish-intent.ts

@@ -47,7 +47,11 @@ import {
 	podcastPublishBlocker,
 	validPodcastSourceUrl,
 } from './podcast-source.js'
-import { frontsVideoSourceGeneration, videoSourceIngestableOverHttps } from './video-source.js'
+import {
+	frontsVideoSourceGeneration,
+	videoSourceIngestableOverHttps,
+	videoSourceUrlIngestableOverHttps,
+} from './video-source.js'
 
 /** The CMS's own name for the record this intent describes. */
 export const FRONTS_PUBLISH_INTENT_SOURCE = 'masthead'
@@ -71,6 +75,7 @@ export type FrontsPublishIntentErrorCode =
 	| 'missing_article_body'
 	| 'video_media_not_ready'
 	| 'video_source_duration_unavailable'
+	| 'video_source_not_ingestable'
 	| 'missing_podcast_audio'
 	| PodcastPublishBlockerCode
 
@@ -779,6 +784,23 @@ async function videoSourceRef(
 		!/^[A-Za-z0-9][A-Za-z0-9._:-]{0,127}$/.test(correlation)
 	)
 		return null
+	// A URL with a query, fragment, userinfo or non-https scheme passes
+	// validPodcastSourceUrl above but is refused by Foundry's media probe
+	// ("artifact ingest probe source URL is invalid"), which fails without
+	// telling the CMS — the HomeFronts 2026-10-01T18:05Z incident, where the
+	// video sat scheduled-but-never-prepared with no incomplete entry. Raise
+	// it loudly here instead of handing the URL to Foundry; consumers catch
+	// this per item, so the feed's other items are unaffected.
+	if (
+		found.processing_source_kind === 'http_url' &&
+		!videoSourceUrlIngestableOverHttps(found.processing_source_url)
+	) {
+		throw new FrontsPublishIntentError(
+			'video_source_not_ingestable',
+			row.id,
+			'Video source URL is not a plain HTTPS URL Foundry can ingest (no query string or fragment); re-capture the source with its direct /download link.',
+		)
+	}
 	if (
 		typeof found.duration_seconds !== 'number' ||
 		!Number.isFinite(found.duration_seconds) ||