@ampless/backend 1.0.0-beta.79 → 1.0.0-beta.80

package/dist/index.d.ts

@@ -170,6 +170,7 @@ declare function amplessAuthConfig(opts?: AmplessAuthConfigOpts): Parameters<typ
  * Build the ampless S3 bucket configuration as a plain options object
  * suitable for `defineStorage(...)`. Access map:
  *   - `public/media/*`   — guest read, admin/editor full
+ *   - `public/static/*`  — guest read, admin/editor full (static-bundle posts)
  *   - `public/plugins/*` — guest read, admin full
  *
  * Bucket-level overrides (PublicAccessBlock, CORS, IAM policies for

package/dist/index.js

@@ -304,6 +304,16 @@ function amplessStorageConfig() {
         allow.guest.to(["read"]),
         allow.groups(["ampless-admin", "ampless-editor"]).to(["read", "write", "delete"])
       ],
+      // Static-bundle posts (`format: 'static'`) upload their files to
+      // `public/static/<slug>/...` from the browser admin via Cognito
+      // identity-pool credentials. Without this rule the admin group's
+      // role is denied `s3:PutObject` and saving the post fails. Mirrors
+      // the media grant; the MCP/Lambda upload path is granted separately
+      // on the function role in `defineAmplessBackend`.
+      "public/static/*": [
+        allow.guest.to(["read"]),
+        allow.groups(["ampless-admin", "ampless-editor"]).to(["read", "write", "delete"])
+      ],
       "public/plugins/*": [
         allow.guest.to(["read"]),
         allow.groups(["ampless-admin"]).to(["read", "write", "delete"])

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ampless/backend",
-  "version": "1.0.0-beta.79",
+  "version": "1.0.0-beta.80",
   "description": "Amplify Gen 2 backend factories for ampless: auth, data, storage, event processors, API key renewer",
   "license": "MIT",
   "type": "module",