@sanoma-ai/connector-ghost 0.0.0-stage → 0.2.0

package/LICENSE

@@ -0,0 +1,105 @@
+# Functional Source License, Version 1.1, ALv2 Future License
+
+## Abbreviation
+
+FSL-1.1-ALv2
+
+## Notice
+
+Copyright 2026 Sanoma-AI
+
+## Terms and Conditions
+
+### Licensor ("We")
+
+The party offering the Software under these Terms and Conditions.
+
+### The Software
+
+The "Software" is each version of the software that we make available under
+these Terms and Conditions, as indicated by our inclusion of these Terms and
+Conditions with the Software.
+
+### License Grant
+
+Subject to your compliance with this License Grant and the Patents,
+Redistribution and Trademark clauses below, we hereby grant you the right to
+use, copy, modify, create derivative works, publicly perform, publicly display
+and redistribute the Software for any Permitted Purpose identified below.
+
+### Permitted Purpose
+
+A Permitted Purpose is any purpose other than a Competing Use. A Competing Use
+means making the Software available to others in a commercial product or
+service that:
+
+1. substitutes for the Software;
+
+2. substitutes for any other product or service we offer using the Software
+   that exists as of the date we make the Software available; or
+
+3. offers the same or substantially similar functionality as the Software.
+
+Permitted Purposes specifically include using the Software:
+
+1. for your internal use and access;
+
+2. for non-commercial education;
+
+3. for non-commercial research; and
+
+4. in connection with professional services that you provide to a licensee
+   using the Software in accordance with these Terms and Conditions.
+
+### Patents
+
+To the extent your use for a Permitted Purpose would necessarily infringe our
+patents, the license grant above includes a license under our patents. If you
+make a claim against any party that the Software infringes or contributes to
+the infringement of any patent, then your patent license to the Software ends
+immediately.
+
+### Redistribution
+
+The Terms and Conditions apply to all copies, modifications and derivatives of
+the Software.
+
+If you redistribute any copies, modifications or derivatives of the Software,
+you must include a copy of or a link to these Terms and Conditions and not
+remove any copyright notices provided in or with the Software.
+
+### Disclaimer
+
+THE SOFTWARE IS PROVIDED "AS IS" AND WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING WITHOUT LIMITATION WARRANTIES OF FITNESS FOR A PARTICULAR
+PURPOSE, MERCHANTABILITY, TITLE OR NON-INFRINGEMENT.
+
+IN NO EVENT WILL WE HAVE ANY LIABILITY TO YOU ARISING OUT OF OR RELATED TO THE
+SOFTWARE, INCLUDING INDIRECT, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES,
+EVEN IF WE HAVE BEEN INFORMED OF THEIR POSSIBILITY IN ADVANCE.
+
+### Trademarks
+
+Except for displaying the License Details and identifying us as the origin of
+the Software, you have no right under these Terms and Conditions to use our
+trademarks, trade names, service marks or product names.
+
+## Grant of Future License
+
+We hereby irrevocably grant you an additional license to use the Software under
+the Apache License, Version 2.0 that is effective on the second anniversary of
+the date we make the Software available. On or after that date, you may use the
+Software under the Apache License, Version 2.0, in which case the following
+will apply:
+
+Licensed under the Apache License, Version 2.0 (the "License"); you may not use
+this file except in compliance with the License.
+
+You may obtain a copy of the License at
+
+http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software distributed
+under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR
+CONDITIONS OF ANY KIND, either express or implied. See the License for the
+specific language governing permissions and limitations under the License.

package/README.md

@@ -1,3 +1,122 @@
-# Temporary Holding Version
+# @sanoma-ai/connector-ghost
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+[Ghost Admin API](https://ghost.org/docs/admin-api/) operations for [`@sanoma-ai/workflows`](https://www.npmjs.com/package/@sanoma-ai/workflows).
+
+## Usage
+
+```sh
+npm install @sanoma-ai/connector-ghost
+```
+
+| Operation            | Effect    | What it does                                             |
+| -------------------- | --------- | -------------------------------------------------------- |
+| `ghost.post.create`  | `write`   | Create a draft post. Drafts are not visible on the site. |
+| `ghost.post.publish` | `publish` | Publish a draft post on the site. Idempotent.            |
+
+```ts
+import { ghost } from "@sanoma-ai/connector-ghost";
+import { defineWorkflow } from "@sanoma-ai/workflows";
+
+defineWorkflow({
+  // ...
+  uses: [ghost.post.create, ghost.post.publish],
+  run: async (ctx, input) => {
+    const post = await ctx.ghost.post.create({ title: input.title, html: input.body, status: "draft" });
+    return ctx.ghost.post.publish({ id: post.id });
+  },
+});
+```
+
+The logo the app shows beside these operations is Ghost's glyph from [simple-icons](https://simpleicons.org/?q=ghost) (CC0), in near-black or white. It is there only to identify the service an operation calls. Ghost is a trademark of Ghost Foundation.
+
+## Driver
+
+`@sanoma-ai/connector-ghost/driver` calls the [Ghost Admin API](https://docs.ghost.org/admin-api/). The `ghost` connector the package root exports carries it, made once per resolved config, and its fake (`withSetup` from `@sanoma-ai/workflows`), so a config names the connector alone and workflows never import the driver (the lint refuses that):
+
+```ts
+import { ghost } from "@sanoma-ai/connector-ghost";
+
+export default defineConfig({ workflows, connectors: [ghost], policy });
+```
+
+`./driver` (`ghostDriver`; `ghostDriver({ timeoutMs })`) and `./fake` (`fakeGhost`) are internal entries, for tests.
+
+- `post.create` posts the HTML with `?source=html`, which Ghost converts to its editor format (lossy; see [Creating a post](https://docs.ghost.org/admin-api/posts/creating-a-post)). A draft's `url` is its preview link; it becomes the public URL when published.
+- `post.publish` reads the post, then saves it with `status: "published"` and the `updated_at` it read, which Ghost requires to refuse a save over someone else's. If someone saved the post in between (`UPDATE_COLLISION`), it reads the post again and tries once more. Publishing sends no newsletter email: Ghost emails a post only when a `newsletter` is named.
+
+### Environment
+
+It reads two environment variables on every call, never when the config loads:
+
+| Variable              | What it is                                                                                    |
+| --------------------- | --------------------------------------------------------------------------------------------- |
+| `GHOST_ADMIN_URL`     | The site's admin URL, such as `https://example.ghost.io` (on Ghost(Pro), the `ghost.io` one). |
+| `GHOST_ADMIN_API_KEY` | A custom integration's Admin API key, `<id>:<secret>`.                                        |
+
+To make the key: in Ghost Admin, **Settings → Integrations → Add custom integration**, name it, and copy its **Admin API key** (not the Content API key). A missing or malformed variable fails the call, naming the variable, and is not retried. The driver declares them in its `env` ([Credentials](https://www.npmjs.com/package/@sanoma-ai/workflows#credentials)), so a worker refuses to start while one is missing or malformed, and the app's connector page shows each one's status and lets you set it.
+
+### Idempotency
+
+Ghost takes no idempotency key, and the runtime never retries `post.create`. If its reply is lost, the run fails and a draft stays in Ghost; the next run makes a new one. A draft is not visible on the site; delete it in Ghost Admin. `post.publish` returns a post that is already published as it is, without saving it, so a retry after a lost reply changes nothing; so too a post Ghost sent as an email only (`status: "sent"`), which is not a draft.
+
+### Errors and retries
+
+A timeout (10 s; `ghostDriver({ timeoutMs })` changes it), a network failure, a 408, a 429 or a 5xx is retryable; any other 4xx is not. A failure carries Ghost's HTTP `status` and, as `vendorCode`, its error `code` when it has one (`UPDATE_COLLISION`) or else its `type` (`ValidationError`, `UnauthorizedError`). Ghost documents no rate limit for the Admin API; Ghost(Pro) may answer 429 to protect itself.
+
+### Plan
+
+You need a Ghost site of your own. Self-hosted Ghost is free and open source (`docker run -p 2368:2368 -e NODE_ENV=development ghost:6-alpine` runs one locally). Ghost(Pro) has a free trial but no free plan, and its Starter plan has no custom integrations or Admin API: you need Publisher or above ([pricing](https://ghost.org/pricing/)).
+
+### Testing the driver
+
+`test/driver.test.ts` replays Ghost's recorded replies (`test/fixtures`) with [`@sanoma-ai/testing/replay`](https://github.com/Sanoma-AI/sanoma/blob/main/packages/testing/README.md#replaying-a-vendors-api), which says what `SANOMA_LIVE` and `SANOMA_RECORD` do: `pnpm vitest run connectors/ghost` needs no site. Live, they create posts titled `sanoma test <timestamp>` on the site, publish some, and delete them at the end:
+
+```sh
+SANOMA_LIVE=1 GHOST_ADMIN_URL=https://example.ghost.io GHOST_ADMIN_API_KEY=<id>:<secret> pnpm vitest run connectors/ghost
+```
+
+A recording keeps only the fields the driver reads (no authors or emails), puts every URL on `https://blog.example.test`, and renumbers ids. The error cases only replay; `update-collision.json` was taken by hand from a local Ghost, since a test cannot make Ghost collide on cue.
+
+## Steps and features
+
+The connector carries steps for [scenarios](https://github.com/Sanoma-AI/sanoma/blob/main/packages/workflows/README.md#steps-a-connector-ships) (`ghostSteps`, attached with `withSetup`), which a company's scenario can use beside the generic steps and other connectors' ones:
+
+| Keyword | Step                                   | What it does                                                                                      |
+| ------- | -------------------------------------- | ------------------------------------------------------------------------------------------------- |
+| Given   | `a Ghost draft titled {string}`        | Seeds a draft through `ghost.post.create`, named `draft` (`$draft.id` in an operation's own test) |
+| Then    | `the Ghost post {string} is published` | The post with that title, seeded or created by the run, was published                             |
+
+`features/post.feature` creates and publishes posts, with these steps and the generic ones for an operation's own test, on the fake and on Ghost's recorded replies (`create.json`, `publish-draft.json` and `publish-again.json`): `test/features.test.ts` runs them with [`describeFeatures`](https://github.com/Sanoma-AI/sanoma/blob/main/packages/testing/README.md#a-connectors-own-features). A scenario tagged `@fake-only` has no recording. The package ships `features/`.
+
+## Testing
+
+`@sanoma-ai/connector-ghost/fake` is an in-memory Ghost, the fake the connector carries: each sandbox run makes one of its own. A test that reads or seeds one attaches it to the connector itself, then checks `state.posts` and `calls`.
+
+```ts
+import { withSetup } from "@sanoma-ai/workflows";
+import { ghost } from "@sanoma-ai/connector-ghost";
+import { fakeGhost } from "@sanoma-ai/connector-ghost/fake";
+
+const fake = fakeGhost();
+const worker = await startWorker({
+  connectors: [withSetup(ghost, { driver: () => fake.driver, fake: () => fake })],
+  /* ... */
+});
+
+// ...run a workflow, then:
+Object.values(fake.state.posts).map((p) => p.status); // ["published"]
+fake.calls.map((c) => c.op); // ["ghost.post.create", "ghost.post.publish"]
+```
+
+A repeated idempotency key gets the first reply and changes nothing, as a real vendor that dedupes would. To test what a workflow does when Ghost misbehaves, set up the next call to an operation before the run makes it:
+
+- `fake.failNext("ghost.post.publish", err?)` throws `err` (default: a retryable `DriverError`).
+- `fake.loseReply("ghost.post.publish")` publishes, then throws, as if the reply was lost.
+- `fake.rateLimit("ghost.post.publish")` throws a `DriverError` with status 429.
+- `const release = fake.hold("ghost.post.publish")` makes the call wait until `release()`.
+
+`fake.reset()` empties it between tests. Pass `{ calls }` with one array to several fakes to see their calls in one order.
+
+[`@sanoma-ai/testing`](https://github.com/Sanoma-AI/sanoma/blob/main/packages/testing/README.md) (in the sanoma repository, not published) has `startTestWorker` and `testDatabaseUrl` to run a test's worker with the fake on a database of its own.
+
+License: FSL-1.1-ALv2.

package/dist/connector.d.ts

@@ -0,0 +1,67 @@
+import { z } from "zod";
+/** A post, as the operations return it. */
+export declare const Post: z.ZodObject<{
+    id: z.ZodString;
+    url: z.ZodString;
+    slug: z.ZodString;
+    status: z.ZodEnum<{
+        draft: "draft";
+        published: "published";
+        scheduled: "scheduled";
+        sent: "sent";
+    }>;
+    publishedAt: z.ZodNullable<z.ZodString>;
+}, z.core.$strip>;
+/** Ghost Admin API: https://ghost.org/docs/admin-api/ */
+export declare const ghostOps: import("@sanoma-ai/workflows").Connector<"ghost", {
+    readonly post: {
+        readonly create: {
+            readonly effect: "write";
+            readonly description: "Create a post. Drafts are not visible on the site.";
+            readonly phrases: {
+                readonly given: "a post titled {title} exists";
+                readonly expect: "a post titled {title} is created";
+            };
+            readonly input: z.ZodObject<{
+                title: z.ZodString;
+                html: z.ZodString;
+                status: z.ZodDefault<z.ZodLiteral<"draft">>;
+            }, z.core.$strip>;
+            readonly output: z.ZodObject<{
+                id: z.ZodString;
+                url: z.ZodString;
+                slug: z.ZodString;
+                status: z.ZodEnum<{
+                    draft: "draft";
+                    published: "published";
+                    scheduled: "scheduled";
+                    sent: "sent";
+                }>;
+                publishedAt: z.ZodNullable<z.ZodString>;
+            }, z.core.$strip>;
+        };
+        readonly publish: {
+            readonly effect: "publish";
+            readonly description: "Publish a draft post on the site. Visible to everyone.";
+            readonly phrases: {
+                readonly expect: "post {id} is published";
+            };
+            readonly idempotent: true;
+            readonly input: z.ZodObject<{
+                id: z.ZodString;
+            }, z.core.$strip>;
+            readonly output: z.ZodObject<{
+                id: z.ZodString;
+                url: z.ZodString;
+                slug: z.ZodString;
+                status: z.ZodEnum<{
+                    draft: "draft";
+                    published: "published";
+                    scheduled: "scheduled";
+                    sent: "sent";
+                }>;
+                publishedAt: z.ZodNullable<z.ZodString>;
+            }, z.core.$strip>;
+        };
+    };
+}>;

package/dist/connector.js

@@ -0,0 +1,43 @@
+import { defineConnector } from "@sanoma-ai/workflows";
+import { z } from "zod";
+/** A post, as the operations return it. */
+export const Post = z.object({
+    id: z.string(),
+    url: z.string(),
+    slug: z.string(),
+    /** `sent`: emailed to a newsletter only, never on the site. */
+    status: z.enum(["draft", "scheduled", "published", "sent"]),
+    publishedAt: z.string().nullable(),
+});
+/**
+ * Ghost's glyph, from simple-icons (https://simpleicons.org/?q=ghost, CC0; drawn from Ghost's
+ * own admin icon), in one colour: Ghost's near-black, white on dark backgrounds. Ghost publishes
+ * no SVG of its own.
+ */
+const glyph = (fill) => `<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path fill="${fill}" d="M12 0C5.373 0 0 5.373 0 12s5.373 12 12 12 12-5.373 12-12S18.627 0 12 0zm.256 2.313c2.47.005 5.116 2.008 5.898 2.962l.244.3c1.64 1.994 3.569 4.34 3.569 6.966 0 3.719-2.98 5.808-6.158 7.508-1.433.766-2.98 1.508-4.748 1.508-4.543 0-8.366-3.569-8.366-8.112 0-.706.17-1.425.342-2.15.122-.515.244-1.033.307-1.549.548-4.539 2.967-6.795 8.422-7.408a4.29 4.29 0 01.49-.026Z"/></svg>`;
+/** Ghost Admin API: https://ghost.org/docs/admin-api/ */
+export const ghostOps = defineConnector("ghost", {
+    post: {
+        create: {
+            effect: "write",
+            description: "Create a post. Drafts are not visible on the site.",
+            phrases: { given: "a post titled {title} exists", expect: "a post titled {title} is created" },
+            input: z.object({ title: z.string().min(1), html: z.string(), status: z.literal("draft").default("draft") }),
+            output: Post,
+        },
+        publish: {
+            effect: "publish",
+            description: "Publish a draft post on the site. Visible to everyone.",
+            phrases: { expect: "post {id} is published" },
+            idempotent: true,
+            input: z.object({ id: z.string() }),
+            output: Post,
+        },
+    },
+}, {
+    title: "Ghost",
+    logo: { svg: glyph("#15171A"), dark: glyph("white") },
+    package: "@sanoma-ai/connector-ghost",
+    homepage: "https://github.com/Sanoma-AI/sanoma/tree/main/connectors/ghost#readme",
+});
+//# sourceMappingURL=connector.js.map

package/dist/connector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connector.js","sourceRoot":"","sources":["../src/connector.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,2CAA2C;AAC3C,MAAM,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3B,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;IACf,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,+DAA+D;IAC/D,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;IAC3D,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACnC,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,KAAK,GAAG,CAAC,IAAY,EAAE,EAAE,CAC7B,2EAA2E,IAAI,4XAA4X,CAAC;AAE9c,yDAAyD;AACzD,MAAM,CAAC,MAAM,QAAQ,GAAG,eAAe,CACrC,OAAO,EACP;IACE,IAAI,EAAE;QACJ,MAAM,EAAE;YACN,MAAM,EAAE,OAAO;YACf,WAAW,EAAE,oDAAoD;YACjE,OAAO,EAAE,EAAE,KAAK,EAAE,8BAA8B,EAAE,MAAM,EAAE,kCAAkC,EAAE;YAC9F,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5G,MAAM,EAAE,IAAI;SACb;QACD,OAAO,EAAE;YACP,MAAM,EAAE,SAAS;YACjB,WAAW,EAAE,wDAAwD;YACrE,OAAO,EAAE,EAAE,MAAM,EAAE,wBAAwB,EAAE;YAC7C,UAAU,EAAE,IAAI;YAChB,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;YACnC,MAAM,EAAE,IAAI;SACb;KACF;CACF,EACD;IACE,KAAK,EAAE,OAAO;IACd,IAAI,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE;IACrD,OAAO,EAAE,4BAA4B;IACrC,QAAQ,EAAE,uEAAuE;CAClF,CACF,CAAC"}

package/dist/driver.d.ts

@@ -0,0 +1,11 @@
+export interface GhostDriverOptions {
+    /** How long one request to Ghost may take, in milliseconds. Default 10 000. */
+    timeoutMs?: number;
+}
+/**
+ * A token for the Admin API, signed with an Admin API key (`<id>:<secret>`), as Ghost asks:
+ * HS256, for `/admin/`, valid five minutes, the longest Ghost accepts.
+ */
+export declare function adminToken(key: string): Promise<string>;
+/** The real Ghost, through the Admin API, with `GHOST_ADMIN_URL` and `GHOST_ADMIN_API_KEY`. See the README. */
+export declare function ghostDriver(options?: GhostDriverOptions): import("@sanoma-ai/workflows").Driver;

package/dist/driver.js

@@ -0,0 +1,151 @@
+import { DriverError, defineDriver, retryableStatus } from "@sanoma-ai/workflows";
+import { SignJWT } from "jose";
+import { z } from "zod";
+import { ghostOps, Post } from "./connector.js";
+/** The minimum API version the driver needs: Ghost 5 and later answer it. */
+const ACCEPT_VERSION = "v5.0";
+/** Ghost's post object, as far as the driver reads it: the connector's `Post`, in Ghost's names. */
+const GhostPost = Post.omit({ publishedAt: true }).extend({
+    published_at: z.string().nullable(),
+    updated_at: z.string(),
+});
+/** Ghost wraps the post it creates, reads or saves in a list of one. */
+const GhostPosts = z.object({ posts: z.tuple([GhostPost]) });
+/** Ghost's error body, `{ errors: [{ message, type, code, context, ... }] }`: the driver reads the first. */
+const GhostErrors = z.object({
+    errors: z.array(z.object({
+        message: z.string(),
+        type: z.string().optional(),
+        code: z.string().nullish(),
+        // Which field failed, and sometimes the message again.
+        context: z.string().nullish(),
+    })),
+});
+const out = (post) => ({
+    id: post.id,
+    url: post.url,
+    slug: post.slug,
+    status: post.status,
+    publishedAt: post.published_at,
+});
+const misconfigured = (message) => new DriverError(`ghost: ${message}`, { retryable: false });
+const ADMIN_API_KEY = /^([0-9a-f]{24}):([0-9a-f]{64})$/i;
+const ADMIN_API_KEY_FORMAT = "<24 hex digits>:<64 hex digits>";
+/** The environment variables the driver reads, on every call. */
+const env = z.object({
+    GHOST_ADMIN_URL: z.url().describe("the site's admin URL, such as https://example.ghost.io"),
+    GHOST_ADMIN_API_KEY: z
+        .string()
+        .regex(ADMIN_API_KEY, `an Admin API key, ${ADMIN_API_KEY_FORMAT}`)
+        .describe("a custom integration's Admin API key, <id>:<secret>"),
+});
+/**
+ * A token for the Admin API, signed with an Admin API key (`<id>:<secret>`), as Ghost asks:
+ * HS256, for `/admin/`, valid five minutes, the longest Ghost accepts.
+ */
+export async function adminToken(key) {
+    const [, id, secret] = ADMIN_API_KEY.exec(key) ?? [];
+    if (!id || !secret) {
+        throw misconfigured(`GHOST_ADMIN_API_KEY is not an Admin API key (${ADMIN_API_KEY_FORMAT})`);
+    }
+    return new SignJWT({})
+        .setProtectedHeader({ alg: "HS256", kid: id, typ: "JWT" })
+        .setIssuedAt()
+        .setExpirationTime("5m")
+        .setAudience("/admin/")
+        .sign(Buffer.from(secret, "hex"));
+}
+/** Reads the credentials, when an operation is called, and returns a function that sends one request. */
+function connect(timeoutMs) {
+    const url = process.env.GHOST_ADMIN_URL;
+    const key = process.env.GHOST_ADMIN_API_KEY;
+    if (!url)
+        throw misconfigured(`GHOST_ADMIN_URL is not set (${env.shape.GHOST_ADMIN_URL.description})`);
+    if (!URL.canParse(url))
+        throw misconfigured("GHOST_ADMIN_URL is not a URL");
+    if (!key)
+        throw misconfigured(`GHOST_ADMIN_API_KEY is not set (${env.shape.GHOST_ADMIN_API_KEY.description})`);
+    const base = `${url.replace(/\/+$/, "")}/ghost/api/admin`;
+    return async (method, path, body) => {
+        // Each request gets its own token: one lasts at most five minutes.
+        const token = await adminToken(key);
+        const where = `${method} ${path}`;
+        let status;
+        let json;
+        try {
+            const res = await fetch(`${base}${path}`, {
+                method,
+                signal: AbortSignal.timeout(timeoutMs),
+                headers: {
+                    Authorization: `Ghost ${token}`,
+                    "Accept-Version": ACCEPT_VERSION,
+                    "Content-Type": "application/json",
+                },
+                ...(body !== undefined && { body: JSON.stringify(body) }),
+            });
+            status = res.status;
+            // A body that is not JSON (a proxy's HTML error page) is no answer to read; a body cut off is.
+            json = await res.json().catch((err) => {
+                if (err instanceof SyntaxError)
+                    return undefined;
+                throw err;
+            });
+        }
+        catch (cause) {
+            // No answer: the request may or may not have reached Ghost.
+            const why = cause.name === "TimeoutError" ? `no reply in ${timeoutMs} ms` : "the request failed";
+            throw new DriverError(`ghost: ${where}: ${why}`, { retryable: true, cause });
+        }
+        if (status < 200 || status >= 300) {
+            const err = GhostErrors.safeParse(json).data?.errors[0];
+            const detail = err?.context && err.context !== err.message ? ` ${err.context}` : "";
+            const message = err ? `${err.message}${detail}` : `HTTP ${status}`;
+            throw new DriverError(`ghost: ${where}: ${message}`, {
+                retryable: retryableStatus(status),
+                status,
+                vendorCode: err?.code ?? err?.type,
+            });
+        }
+        const parsed = GhostPosts.safeParse(json);
+        if (!parsed.success) {
+            throw new DriverError(`ghost: ${where}: the reply is not a post; is GHOST_ADMIN_URL the site's admin URL?`, {
+                retryable: false,
+                status,
+                cause: parsed.error,
+            });
+        }
+        return parsed.data.posts[0];
+    };
+}
+/** The real Ghost, through the Admin API, with `GHOST_ADMIN_URL` and `GHOST_ADMIN_API_KEY`. See the README. */
+export function ghostDriver(options = {}) {
+    const timeoutMs = options.timeoutMs ?? 10_000;
+    return defineDriver(ghostOps, {
+        post: {
+            create: async ({ title, html, status }) => {
+                const send = connect(timeoutMs);
+                return out(await send("POST", "/posts/?source=html", { posts: [{ title, html, status }] }));
+            },
+            publish: async ({ id }) => {
+                const send = connect(timeoutMs);
+                const path = `/posts/${encodeURIComponent(id)}/`;
+                const save = async () => {
+                    const post = await send("GET", path);
+                    // Published already, or sent as an email only: it is no draft to publish.
+                    if (post.status === "published" || post.status === "sent")
+                        return post;
+                    return send("PUT", path, { posts: [{ status: "published", updated_at: post.updated_at }] });
+                };
+                // Ghost refuses a save whose `updated_at` is not the post's latest (UPDATE_COLLISION):
+                // someone saved it in between. Read it again and save once more.
+                const post = await save().catch((err) => {
+                    if (err instanceof DriverError && err.vendorCode === "UPDATE_COLLISION")
+                        return save();
+                    throw err;
+                });
+                return out(post);
+            },
+        },
+    }, { env });
+}
+//# sourceMappingURL=driver.js.map

package/dist/driver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"driver.js","sourceRoot":"","sources":["../src/driver.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAClF,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAC/B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAehD,6EAA6E;AAC7E,MAAM,cAAc,GAAG,MAAM,CAAC;AAE9B,oGAAoG;AACpG,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;IACxD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;CACvB,CAAC,CAAC;AAGH,wEAAwE;AACxE,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC;AAE7D,6GAA6G;AAC7G,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3B,MAAM,EAAE,CAAC,CAAC,KAAK,CACb,CAAC,CAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;QACnB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC3B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE;QAC1B,uDAAuD;QACvD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE;KAC9B,CAAC,CACH;CACF,CAAC,CAAC;AAEH,MAAM,GAAG,GAAG,CAAC,IAAe,EAAE,EAAE,CAAC,CAAC;IAChC,EAAE,EAAE,IAAI,CAAC,EAAE;IACX,GAAG,EAAE,IAAI,CAAC,GAAG;IACb,IAAI,EAAE,IAAI,CAAC,IAAI;IACf,MAAM,EAAE,IAAI,CAAC,MAAM;IACnB,WAAW,EAAE,IAAI,CAAC,YAAY;CAC/B,CAAC,CAAC;AAEH,MAAM,aAAa,GAAG,CAAC,OAAe,EAAE,EAAE,CAAC,IAAI,WAAW,CAAC,UAAU,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;AAEtG,MAAM,aAAa,GAAG,kCAAkC,CAAC;AACzD,MAAM,oBAAoB,GAAG,iCAAiC,CAAC;AAE/D,iEAAiE;AACjE,MAAM,GAAG,GAAG,CAAC,CAAC,MAAM,CAAC;IACnB,eAAe,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,wDAAwD,CAAC;IAC3F,mBAAmB,EAAE,CAAC;SACnB,MAAM,EAAE;SACR,KAAK,CAAC,aAAa,EAAE,qBAAqB,oBAAoB,EAAE,CAAC;SACjE,QAAQ,CAAC,qDAAqD,CAAC;CACnE,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,GAAW;IAC1C,MAAM,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;IACrD,IAAI,CAAC,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;QACnB,MAAM,aAAa,CAAC,gDAAgD,oBAAoB,GAAG,CAAC,CAAC;IAC/F,CAAC;IACD,OAAO,IAAI,OAAO,CAAC,EAAE,CAAC;SACnB,kBAAkB,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;SACzD,WAAW,EAAE;SACb,iBAAiB,CAAC,IAAI,CAAC;SACvB,WAAW,CAAC,SAAS,CAAC;SACtB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;AACtC,CAAC;AAED,yGAAyG;AACzG,SAAS,OAAO,CAAC,SAAiB;IAChC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;IACxC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;IAC5C,IAAI,CAAC,GAAG;QAAE,MAAM,aAAa,CAAC,+BAA+B,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC,WAAW,GAAG,CAAC,CAAC;IACvG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,MAAM,aAAa,CAAC,8BAA8B,CAAC,CAAC;IAC5E,IAAI,CAAC,GAAG;QAAE,MAAM,aAAa,CAAC,mCAAmC,GAAG,CAAC,KAAK,CAAC,mBAAmB,CAAC,WAAW,GAAG,CAAC,CAAC;IAC/G,MAAM,IAAI,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,kBAAkB,CAAC;IAE1D,OAAO,KAAK,EAAE,MAA8B,EAAE,IAAY,EAAE,IAAc,EAAsB,EAAE;QAChG,mEAAmE;QACnE,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,GAAG,CAAC,CAAC;QACpC,MAAM,KAAK,GAAG,GAAG,MAAM,IAAI,IAAI,EAAE,CAAC;QAClC,IAAI,MAAc,CAAC;QACnB,IAAI,IAAa,CAAC;QAClB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,GAAG,IAAI,EAAE,EAAE;gBACxC,MAAM;gBACN,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC;gBACtC,OAAO,EAAE;oBACP,aAAa,EAAE,SAAS,KAAK,EAAE;oBAC/B,gBAAgB,EAAE,cAAc;oBAChC,cAAc,EAAE,kBAAkB;iBACnC;gBACD,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;aAC1D,CAAC,CAAC;YACH,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;YACpB,+FAA+F;YAC/F,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;gBAC7C,IAAI,GAAG,YAAY,WAAW;oBAAE,OAAO,SAAS,CAAC;gBACjD,MAAM,GAAG,CAAC;YACZ,CAAC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,4DAA4D;YAC5D,MAAM,GAAG,GAAI,KAAe,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC,CAAC,eAAe,SAAS,KAAK,CAAC,CAAC,CAAC,oBAAoB,CAAC;YAC5G,MAAM,IAAI,WAAW,CAAC,UAAU,KAAK,KAAK,GAAG,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/E,CAAC;QACD,IAAI,MAAM,GAAG,GAAG,IAAI,MAAM,IAAI,GAAG,EAAE,CAAC;YAClC,MAAM,GAAG,GAAG,WAAW,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;YACxD,MAAM,MAAM,GAAG,GAAG,EAAE,OAAO,IAAI,GAAG,CAAC,OAAO,KAAK,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpF,MAAM,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,OAAO,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC,QAAQ,MAAM,EAAE,CAAC;YACnE,MAAM,IAAI,WAAW,CAAC,UAAU,KAAK,KAAK,OAAO,EAAE,EAAE;gBACnD,SAAS,EAAE,eAAe,CAAC,MAAM,CAAC;gBAClC,MAAM;gBACN,UAAU,EAAE,GAAG,EAAE,IAAI,IAAI,GAAG,EAAE,IAAI;aACnC,CAAC,CAAC;QACL,CAAC;QACD,MAAM,MAAM,GAAG,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,IAAI,WAAW,CAAC,UAAU,KAAK,qEAAqE,EAAE;gBAC1G,SAAS,EAAE,KAAK;gBAChB,MAAM;gBACN,KAAK,EAAE,MAAM,CAAC,KAAK;aACpB,CAAC,CAAC;QACL,CAAC;QACD,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC9B,CAAC,CAAC;AACJ,CAAC;AAED,+GAA+G;AAC/G,MAAM,UAAU,WAAW,CAAC,OAAO,GAAuB,EAAE;IAC1D,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,MAAM,CAAC;IAC9C,OAAO,YAAY,CACjB,QAAQ,EACR;QACE,IAAI,EAAE;YACJ,MAAM,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE;gBACxC,MAAM,IAAI,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;gBAChC,OAAO,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,qBAAqB,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;YAC9F,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE;gBACxB,MAAM,IAAI,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;gBAChC,MAAM,IAAI,GAAG,UAAU,kBAAkB,CAAC,EAAE,CAAC,GAAG,CAAC;gBACjD,MAAM,IAAI,GAAG,KAAK,IAAI,EAAE;oBACtB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;oBACrC,0EAA0E;oBAC1E,IAAI,IAAI,CAAC,MAAM,KAAK,WAAW,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM;wBAAE,OAAO,IAAI,CAAC;oBACvE,OAAO,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,EAAE,CAAC,CAAC;gBAC9F,CAAC,CAAC;gBACF,uFAAuF;gBACvF,iEAAiE;gBACjE,MAAM,IAAI,GAAG,MAAM,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;oBAC/C,IAAI,GAAG,YAAY,WAAW,IAAI,GAAG,CAAC,UAAU,KAAK,kBAAkB;wBAAE,OAAO,IAAI,EAAE,CAAC;oBACvF,MAAM,GAAG,CAAC;gBACZ,CAAC,CAAC,CAAC;gBACH,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC;YACnB,CAAC;SACF;KACF,EACD,EAAE,GAAG,EAAE,CACR,CAAC;AACJ,CAAC"}

package/dist/fake.d.ts

@@ -0,0 +1,18 @@
+import { type FakeOptions } from "@sanoma-ai/workflows/fake";
+export interface FakeGhostPost {
+    id: string;
+    title: string;
+    html: string;
+    slug: string;
+    status: "draft" | "scheduled" | "published";
+    publishedAt: string | null;
+}
+export interface FakeGhostState extends Record<string, unknown> {
+    seq: number;
+    posts: Record<string, FakeGhostPost>;
+}
+/**
+ * An in-memory Ghost for tests: posts live in `state.posts`, and their URLs are on
+ * `blog.example.test`.
+ */
+export declare function fakeGhost(options?: FakeOptions): import("@sanoma-ai/workflows/fake").Fake<FakeGhostState, "ghost.post.create" | "ghost.post.publish">;

package/dist/fake.js

@@ -0,0 +1,43 @@
+import { DriverError } from "@sanoma-ai/workflows";
+import { defineFake } from "@sanoma-ai/workflows/fake";
+import { ghostOps } from "./connector.js";
+const out = (p) => ({
+    id: p.id,
+    url: `https://blog.example.test/${p.slug}/`,
+    slug: p.slug,
+    status: p.status,
+    publishedAt: p.publishedAt,
+});
+/**
+ * An in-memory Ghost for tests: posts live in `state.posts`, and their URLs are on
+ * `blog.example.test`.
+ */
+export function fakeGhost(options = {}) {
+    return defineFake(ghostOps, {
+        initial: () => ({ seq: 0, posts: {} }),
+        ops: (state) => ({
+            post: {
+                create: async ({ title, html, status }) => {
+                    const id = `post_${String(++state.seq).padStart(4, "0")}`;
+                    const slug = title
+                        .toLowerCase()
+                        .replace(/[^a-z0-9]+/g, "-")
+                        .replace(/^-|-$/g, "");
+                    state.posts[id] = { id, title, html, slug, status, publishedAt: null };
+                    return out(state.posts[id]);
+                },
+                publish: async ({ id }) => {
+                    const post = state.posts[id];
+                    if (!post)
+                        throw new DriverError(`ghost: no post ${id}`, { retryable: false, status: 404 });
+                    if (post.status !== "published") {
+                        post.status = "published";
+                        post.publishedAt = new Date().toISOString();
+                    }
+                    return out(post);
+                },
+            },
+        }),
+    }, options);
+}
+//# sourceMappingURL=fake.js.map

package/dist/fake.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fake.js","sourceRoot":"","sources":["../src/fake.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAAE,UAAU,EAAoB,MAAM,2BAA2B,CAAC;AACzE,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAgB1C,MAAM,GAAG,GAAG,CAAC,CAAgB,EAAE,EAAE,CAAC,CAAC;IACjC,EAAE,EAAE,CAAC,CAAC,EAAE;IACR,GAAG,EAAE,6BAA6B,CAAC,CAAC,IAAI,GAAG;IAC3C,IAAI,EAAE,CAAC,CAAC,IAAI;IACZ,MAAM,EAAE,CAAC,CAAC,MAAM;IAChB,WAAW,EAAE,CAAC,CAAC,WAAW;CAC3B,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,UAAU,SAAS,CAAC,OAAO,GAAgB,EAAE;IACjD,OAAO,UAAU,CACf,QAAQ,EACR;QACE,OAAO,EAAE,GAAmB,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;QACtD,GAAG,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YACf,IAAI,EAAE;gBACJ,MAAM,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE;oBACxC,MAAM,EAAE,GAAG,QAAQ,MAAM,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;oBAC1D,MAAM,IAAI,GAAG,KAAK;yBACf,WAAW,EAAE;yBACb,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;yBAC3B,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;oBACzB,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;oBACvE,OAAO,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;gBAC9B,CAAC;gBACD,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE;oBACxB,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;oBAC7B,IAAI,CAAC,IAAI;wBAAE,MAAM,IAAI,WAAW,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;oBAC5F,IAAI,IAAI,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;wBAChC,IAAI,CAAC,MAAM,GAAG,WAAW,CAAC;wBAC1B,IAAI,CAAC,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;oBAC9C,CAAC;oBACD,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC;gBACnB,CAAC;aACF;SACF,CAAC;KACH,EACD,OAAO,CACR,CAAC;AACJ,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,58 @@
+export { Post } from "./connector.ts";
+/**
+ * Ghost Admin API posts: `post.create` and `post.publish`. It carries its live driver
+ * (`ghostDriver`), which reads its credentials when called, its fake (`fakeGhost`), of which
+ * each sandbox run makes its own, and its steps for Gherkin tests (`ghostSteps`).
+ */
+export declare const ghost: import("@sanoma-ai/workflows").Connector<"ghost", {
+    readonly post: {
+        readonly create: {
+            readonly effect: "write";
+            readonly description: "Create a post. Drafts are not visible on the site.";
+            readonly phrases: {
+                readonly given: "a post titled {title} exists";
+                readonly expect: "a post titled {title} is created";
+            };
+            readonly input: import("zod").ZodObject<{
+                title: import("zod").ZodString;
+                html: import("zod").ZodString;
+                status: import("zod").ZodDefault<import("zod").ZodLiteral<"draft">>;
+            }, import("zod/v4/core").$strip>;
+            readonly output: import("zod").ZodObject<{
+                id: import("zod").ZodString;
+                url: import("zod").ZodString;
+                slug: import("zod").ZodString;
+                status: import("zod").ZodEnum<{
+                    draft: "draft";
+                    published: "published";
+                    scheduled: "scheduled";
+                    sent: "sent";
+                }>;
+                publishedAt: import("zod").ZodNullable<import("zod").ZodString>;
+            }, import("zod/v4/core").$strip>;
+        };
+        readonly publish: {
+            readonly effect: "publish";
+            readonly description: "Publish a draft post on the site. Visible to everyone.";
+            readonly phrases: {
+                readonly expect: "post {id} is published";
+            };
+            readonly idempotent: true;
+            readonly input: import("zod").ZodObject<{
+                id: import("zod").ZodString;
+            }, import("zod/v4/core").$strip>;
+            readonly output: import("zod").ZodObject<{
+                id: import("zod").ZodString;
+                url: import("zod").ZodString;
+                slug: import("zod").ZodString;
+                status: import("zod").ZodEnum<{
+                    draft: "draft";
+                    published: "published";
+                    scheduled: "scheduled";
+                    sent: "sent";
+                }>;
+                publishedAt: import("zod").ZodNullable<import("zod").ZodString>;
+            }, import("zod/v4/core").$strip>;
+        };
+    };
+}>;

package/dist/index.js

@@ -0,0 +1,13 @@
+import { withSetup } from "@sanoma-ai/workflows";
+import { ghostOps } from "./connector.js";
+import { ghostDriver } from "./driver.js";
+import { fakeGhost } from "./fake.js";
+import { ghostSteps } from "./steps.js";
+export { Post } from "./connector.js";
+/**
+ * Ghost Admin API posts: `post.create` and `post.publish`. It carries its live driver
+ * (`ghostDriver`), which reads its credentials when called, its fake (`fakeGhost`), of which
+ * each sandbox run makes its own, and its steps for Gherkin tests (`ghostSteps`).
+ */
+export const ghost = withSetup(ghostOps, { driver: ghostDriver, fake: fakeGhost, steps: ghostSteps });
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAExC,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAEtC;;;;GAIG;AACH,MAAM,CAAC,MAAM,KAAK,GAAG,SAAS,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC"}

package/dist/steps.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Ghost's steps for Gherkin tests: a draft on the blog before the run (named `draft`, so an
+ * operation's own test can use `$draft.id`), and a post the run published, found by its title
+ * among the drafts seeded and created.
+ */
+export declare const ghostSteps: import("@sanoma-ai/workflows").Steps;

package/dist/steps.js

@@ -0,0 +1,27 @@
+import { defineSteps } from "@sanoma-ai/workflows";
+import { ghostOps } from "./connector.js";
+const { create, publish } = ghostOps.post;
+/**
+ * Ghost's steps for Gherkin tests: a draft on the blog before the run (named `draft`, so an
+ * operation's own test can use `$draft.id`), and a post the run published, found by its title
+ * among the drafts seeded and created.
+ */
+export const ghostSteps = defineSteps("ghost", ({ given, then }) => {
+    given("a Ghost draft titled {string}", (title) => ({ op: create, input: { title }, as: "draft" }));
+    then("the Ghost post {string} is published", (title) => ({
+        op: publish,
+        called: true,
+        check: (run) => {
+            const ids = run
+                .made(create)
+                .filter((c) => c.input.title === title)
+                .map((c) => c.output.id);
+            if (ids.length === 0)
+                return `no Ghost post titled "${title}" was drafted`;
+            if (run.calls(publish).some((c) => ids.includes(c.input.id)))
+                return undefined;
+            return `the Ghost post "${title}" (${ids.join(", ")}) was not published`;
+        },
+    }));
+});
+//# sourceMappingURL=steps.js.map

package/dist/steps.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"steps.js","sourceRoot":"","sources":["../src/steps.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAE1C,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC;AAE1C;;;;GAIG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,WAAW,CAAC,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE;IACjE,KAAK,CAAC,+BAA+B,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;IAC3G,IAAI,CAAC,sCAAsC,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,CAAC;QAC/D,EAAE,EAAE,OAAO;QACX,MAAM,EAAE,IAAI;QACZ,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE;YACb,MAAM,GAAG,GAAG,GAAG;iBACZ,IAAI,CAAC,MAAM,CAAC;iBACZ,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC;iBACtC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC3B,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,yBAAyB,KAAK,eAAe,CAAC;YAC3E,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBAAE,OAAO,SAAS,CAAC;YAC/E,OAAO,mBAAmB,KAAK,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,qBAAqB,CAAC;QAC3E,CAAC;KACF,CAAC,CAAC,CAAC;AACN,CAAC,CAAC,CAAC"}

package/features/post.feature

@@ -0,0 +1,33 @@
+Feature: Ghost posts
+  Drafts are created, then published. Each scenario runs on the fake and on Ghost's recorded
+  replies (test/fixtures/, named after the scenario), unless tagged @fake-only.
+
+  Scenario: Create
+    When ghost.post.create is called with
+      | title | Launch         |
+      | html  | <p>Hello</p>   |
+    Then it returns
+      | status | draft |
+
+  Scenario: Publish draft
+    Given a Ghost draft titled "Launch"
+    When ghost.post.publish is called with
+      | id | $draft.id |
+    Then it returns
+      | status | published |
+    And the Ghost post "Launch" is published
+
+  Scenario: Publish again
+    Given a Ghost draft titled "Launch"
+    When ghost.post.publish is called with
+      | id | $draft.id |
+    And ghost.post.publish is called with
+      | id | $draft.id |
+    Then it returns
+      | status | published |
+
+  @fake-only
+  Scenario: Publish a post that is not there
+    When ghost.post.publish is called with
+      | id | missing |
+    Then it fails with status 404

package/package.json

@@ -1,6 +1,66 @@
 {
   "name": "@sanoma-ai/connector-ghost",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
+  "version": "0.2.0",
+  "description": "Ghost Admin API operations for Sanoma workflows",
+  "keywords": [
+    "blog",
+    "connector",
+    "ghost",
+    "sanoma"
+  ],
+  "homepage": "https://github.com/Sanoma-AI/sanoma/tree/main/connectors/ghost#readme",
+  "bugs": "https://github.com/Sanoma-AI/sanoma/issues",
+  "license": "FSL-1.1-ALv2",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/Sanoma-AI/sanoma.git",
+    "directory": "connectors/ghost"
+  },
+  "files": [
+    "dist",
+    "features",
+    "README.md",
+    "LICENSE"
+  ],
+  "type": "module",
+  "sideEffects": false,
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    },
+    "./fake": {
+      "types": "./dist/fake.d.ts",
+      "default": "./dist/fake.js"
+    },
+    "./driver": {
+      "types": "./dist/driver.d.ts",
+      "default": "./dist/driver.js"
+    }
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "dependencies": {
+    "jose": "^6.2.12"
+  },
+  "devDependencies": {
+    "msw": "^3.0.2",
+    "zod": "^4.6.5",
+    "@sanoma-ai/workflows": "0.2.0"
+  },
+  "peerDependencies": {
+    "@sanoma-ai/workflows": "^0.2.0",
+    "zod": "^4"
+  },
+  "engines": {
+    "node": ">=24"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json",
+    "clean": "rm -rf dist",
+    "watch": "tsc -p tsconfig.build.json --watch --preserveWatchOutput"
+  }
 }