Build pipeline
When you run make publish, a lot happens inside the container. This is the
path from your source to a finished artifact. It applies to both templates — in
core you can read every piece of it under .pandoc/.
From make to artifact
make publishruns the engine'spublish.shinside the Keystone image, with yourmanuscript/,assets/,fonts/, and config mounted in.publish.shreadspublish.txt, merges the system and user shortcuts, resolves metadata, and invokes Pandoc on the listed manuscript files, in order, with the right options for the requested format.- Pandoc concatenates those files and parses the Markdown into its document model, then runs Keystone's Lua filters over it (below).
- Pandoc's writer for the format emits the result — XeLaTeX to PDF, the EPUB archive, or a DOCX/ODT built from a styled reference document.
- The artifact lands in
artifacts/, named<project>-<target>[-<edition>]-<date>(the edition segment is set byusing=).
The Lua filters
The heart of the engine is a chain of Lua filters, run in this order. Order matters — each builds on the output of the ones before:
shortcuts.lua— expands shortcut names into handler classes and attributes, so everything downstream sees plain handler elements. System shortcuts ship in the image; yourshortcuts.yamllayers on top. See The shortcut system.keystone.lua— validates and enriches metadata (required fields per target, date, cover image, draft watermark, code theme) and injects the font and style definitions for the format.divs.lua— the dispatcher. It routes every fenced div and span to its handler and emits format-specific output. See Handlers.page-furniture.lua— composes the PDF running headers, footers, and page numbers from your metadata, resolving placeholders like{chapter}. It runs after the handler filters so any handlers inside header text have already rendered.math-check.lua— the guardrail. Stops the build (naming the equation) when one can't convert to your target format, instead of leaking raw LaTeX into the output. See Mathematics.
The EPUB pre-scan
EPUB embeds only the fonts your book actually uses, and Pandoc needs that list
before the main run. For EPUB builds, publish.sh does a quick pre-scan pass
first — expanding shortcuts and walking the document to find referenced font
families — then embeds exactly those fonts in the real build. Other formats skip
this step.
Where it lives
In core, all of this is in your project under .pandoc/: publish.sh and
import.sh, the filters/ directory (the Lua filters and the per-handler
directories under filters/divs/), and metadata/ (the target bundles). In
core-slim the same files live inside the prebuilt image. To change any of it,
use core and see Customizing.