@anthusai/papyrus 1.0.0-next.48 → 1.0.0-next.49

package/amplify/functions/content-actions/handler.py

@@ -7,7 +7,7 @@ from typing import Any
 from papyrus_content.edge_invalidation import distribution_ids_from_environment, invalidate_revalidated_paths
 from papyrus_content.graphql_authoring import create_authoring_client
 from papyrus_content.markus_renderer.derive import derive_body
-from papyrus_content.projection.engine import project, project_item_pages
+from papyrus_content.projection.engine import project, project_all, project_item_pages
 from papyrus_content.projection.runtime import (
     DEAD_LETTER_QUEUE_ENV,
     context_from_environment,
@@ -155,6 +155,10 @@ def run_projection_task(task: dict) -> dict:
         report = project(projection_context(client), task["itemId"], unpublished=bool(task.get("unpublished")))
         if report.follow_up_item_pages:
             schedule_projection_task({"task": "item-pages", "exceptItemId": task["itemId"]}, "follow-up")
+    elif task.get("task") == "all":
+        report = project_all(projection_context(client))
+    elif task.get("task") == "all":
+        report = project_all(projection_context(client))
     elif task.get("task") == "invalidate":
         invalidate = projection_context(client).invalidate
         if invalidate is None:

package/amplify/publication/default-publication.js

@@ -0,0 +1,18 @@
+export const DEFAULT_MARKUS_PUBLICATION = { kind: "s3-projection", reprojectOnDeploy: true };
+/**
+ * The publication a site backend is built with. A Markus site that names a `reader` Amplify app
+ * keeps publishing through it (`amplify-static`); every other Markus site gets the s3-projection
+ * default unless it writes `publication: false`. Sites with another renderer get nothing unless
+ * they write a `publication`.
+ */
+export function resolveSitePublication(backend, rendererKind) {
+    if (backend.publication === false)
+        return undefined;
+    if (backend.publication !== undefined)
+        return backend.publication;
+    if (rendererKind !== "markus")
+        return undefined;
+    if (backend.reader !== undefined)
+        return undefined;
+    return DEFAULT_MARKUS_PUBLICATION;
+}

package/amplify/publication/default-publication.ts

@@ -0,0 +1,20 @@
+import type { PapyrusPublicationConfig, PapyrusSiteBackendConfig } from "../site-backend-config";
+
+export const DEFAULT_MARKUS_PUBLICATION: PapyrusPublicationConfig = { kind: "s3-projection", reprojectOnDeploy: true };
+
+/**
+ * The publication a site backend is built with. A Markus site that names a `reader` Amplify app
+ * keeps publishing through it (`amplify-static`); every other Markus site gets the s3-projection
+ * default unless it writes `publication: false`. Sites with another renderer get nothing unless
+ * they write a `publication`.
+ */
+export function resolveSitePublication(
+  backend: Pick<PapyrusSiteBackendConfig, "publication" | "reader">,
+  rendererKind: string | undefined,
+): PapyrusPublicationConfig | undefined {
+  if (backend.publication === false) return undefined;
+  if (backend.publication !== undefined) return backend.publication;
+  if (rendererKind !== "markus") return undefined;
+  if (backend.reader !== undefined) return undefined;
+  return DEFAULT_MARKUS_PUBLICATION;
+}

package/amplify/publication/reproject-on-deploy.js

@@ -0,0 +1,31 @@
+import { PolicyStatement } from "aws-cdk-lib/aws-iam";
+import { AwsCustomResource, AwsCustomResourcePolicy, PhysicalResourceId } from "aws-cdk-lib/custom-resources";
+export const REPROJECT_ON_DEPLOY_TIMEOUT_SECONDS = 300;
+export function reprojectDeployToken(environment, now = Date.now) {
+    const buildJobId = (environment.AWS_JOB_ID ?? "").trim();
+    return buildJobId !== "" ? `job-${buildJobId}` : `time-${now()}`;
+}
+/**
+ * Starts the content-actions `all` projection task (asynchronously) every time the stack deploys.
+ * The token is in the request, so CloudFormation sees a changed property on each deploy.
+ */
+export function addReprojectOnDeploy(stack, contentActions, deployToken) {
+    const invocation = {
+        service: "Lambda",
+        action: "invoke",
+        parameters: {
+            FunctionName: contentActions.functionName,
+            InvocationType: "Event",
+            Payload: JSON.stringify({ projectionTask: { task: "all", deployToken } }),
+        },
+        physicalResourceId: PhysicalResourceId.of(`reproject-${deployToken}`),
+    };
+    return new AwsCustomResource(stack, "ReprojectOnDeploy", {
+        onCreate: invocation,
+        onUpdate: invocation,
+        installLatestAwsSdk: false,
+        policy: AwsCustomResourcePolicy.fromStatements([
+            new PolicyStatement({ actions: ["lambda:InvokeFunction"], resources: [contentActions.functionArn] }),
+        ]),
+    });
+}

package/amplify/publication/reproject-on-deploy.ts

@@ -0,0 +1,36 @@
+import { Stack } from "aws-cdk-lib";
+import { PolicyStatement } from "aws-cdk-lib/aws-iam";
+import type { IFunction } from "aws-cdk-lib/aws-lambda";
+import { AwsCustomResource, AwsCustomResourcePolicy, PhysicalResourceId } from "aws-cdk-lib/custom-resources";
+
+export const REPROJECT_ON_DEPLOY_TIMEOUT_SECONDS = 300;
+
+export function reprojectDeployToken(environment: Record<string, string | undefined>, now: () => number = Date.now): string {
+  const buildJobId = (environment.AWS_JOB_ID ?? "").trim();
+  return buildJobId !== "" ? `job-${buildJobId}` : `time-${now()}`;
+}
+
+/**
+ * Starts the content-actions `all` projection task (asynchronously) every time the stack deploys.
+ * The token is in the request, so CloudFormation sees a changed property on each deploy.
+ */
+export function addReprojectOnDeploy(stack: Stack, contentActions: IFunction, deployToken: string): AwsCustomResource {
+  const invocation = {
+    service: "Lambda",
+    action: "invoke",
+    parameters: {
+      FunctionName: contentActions.functionName,
+      InvocationType: "Event",
+      Payload: JSON.stringify({ projectionTask: { task: "all", deployToken } }),
+    },
+    physicalResourceId: PhysicalResourceId.of(`reproject-${deployToken}`),
+  };
+  return new AwsCustomResource(stack, "ReprojectOnDeploy", {
+    onCreate: invocation,
+    onUpdate: invocation,
+    installLatestAwsSdk: false,
+    policy: AwsCustomResourcePolicy.fromStatements([
+      new PolicyStatement({ actions: ["lambda:InvokeFunction"], resources: [contentActions.functionArn] }),
+    ]),
+  });
+}

package/amplify/site-backend-config.js

@@ -27,6 +27,9 @@ export function validatePublicationConfig(publication) {
     if (config.edgeDistributionArn !== undefined && !CLOUDFRONT_DISTRIBUTION_ARN.test(config.edgeDistributionArn)) {
         problems.push("publication.edgeDistributionArn must be a CloudFront distribution ARN (arn:aws:cloudfront::<account>:distribution/<id>)");
     }
+    if (config.reprojectOnDeploy !== undefined && typeof config.reprojectOnDeploy !== "boolean") {
+        problems.push("publication.reprojectOnDeploy must be a boolean");
+    }
     const cache = config.cache;
     if (cache !== undefined) {
         const lifetime = cache.htmlSMaxAgeSeconds;

package/amplify/site-backend-config.ts

@@ -52,6 +52,12 @@ export type PapyrusPublicationConfig = {
   distribution?: S3ProjectionDistributionConfig;
   /** Default true: the site bucket is retained when the stack is deleted. `false` destroys it and its objects. */
   retainBucketOnDelete?: boolean;
+  /**
+   * Re-project every published page after each backend deploy, so a theme or code change reaches the
+   * site without a manual `papyrus ops content project --all`. Default: true for the publication a
+   * Markus site gets when it sets none, false when `publication` is written out in the site config.
+   */
+  reprojectOnDeploy?: boolean;
 };
 
 const CLOUDFRONT_DISTRIBUTION_ARN = /^arn:aws[a-z-]*:cloudfront::\d{12}:distribution\/[A-Z0-9]+$/;
@@ -83,6 +89,9 @@ export function validatePublicationConfig(publication: unknown): string[] {
   if (config.edgeDistributionArn !== undefined && !CLOUDFRONT_DISTRIBUTION_ARN.test(config.edgeDistributionArn)) {
     problems.push("publication.edgeDistributionArn must be a CloudFront distribution ARN (arn:aws:cloudfront::<account>:distribution/<id>)");
   }
+  if (config.reprojectOnDeploy !== undefined && typeof config.reprojectOnDeploy !== "boolean") {
+    problems.push("publication.reprojectOnDeploy must be a boolean");
+  }
   const cache = config.cache;
   if (cache !== undefined) {
     const lifetime = cache.htmlSMaxAgeSeconds;
@@ -156,8 +165,12 @@ export type PapyrusSiteBackendConfig = {
     /** Let this stack verify the SES domain identity and write its TXT record. Default false: verify once by hand. */
     manageDomainIdentity?: boolean;
   };
-  /** Opt-in static projection of published pages into an S3 site bucket. Unset: nothing is created. */
-  publication?: PapyrusPublicationConfig;
+  /**
+   * Static projection of published pages into an S3 site bucket. Unset: a Markus site without a
+   * `reader` gets `{ kind: "s3-projection" }`; any other site gets nothing. `false` opts a Markus
+   * site out. See `resolveSitePublication`.
+   */
+  publication?: PapyrusPublicationConfig | false;
   features?: {
     consoleResponder?: boolean;
     inboundEmail?: boolean;

package/amplify/site-backend.js

@@ -7,6 +7,8 @@ import { CfnIndex, CfnVectorBucket, CfnVectorBucketPolicy } from "aws-cdk-lib/aw
 import { dirname, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
 import { DEFAULT_RESOLVER_WAVE_SIZE, orderModelStacksInWaves } from "./resolver-waves.js";
+import { resolveSitePublication } from "./publication/default-publication.js";
+import { REPROJECT_ON_DEPLOY_TIMEOUT_SECONDS, addReprojectOnDeploy, reprojectDeployToken } from "./publication/reproject-on-deploy.js";
 import { addProjectionRetries, addS3ProjectionPublication } from "./publication/s3-projection.js";
 import { planRenditions } from "./publication/renditions-settings.js";
 import { contentActionsPublicationWiring, planS3ProjectionBackend } from "./publication/s3-projection-settings.js";
@@ -68,10 +70,11 @@ export function defineSiteBackend(papyrusSite) {
         ...baseAuthConfig,
         newsroomBasePath: baseAuthConfig.newsroomBasePath ?? activeBrand?.newsroomBasePath,
     };
-    if (site.publication !== undefined)
-        assertValidPublicationConfig(site.publication);
-    const publicationPlan = planS3ProjectionBackend(site.publication);
-    const renditionsPlan = planRenditions(site.publication, process.cwd());
+    const publication = resolveSitePublication(site, activeBrand?.renderer?.kind);
+    if (publication !== undefined)
+        assertValidPublicationConfig(publication);
+    const publicationPlan = planS3ProjectionBackend(publication);
+    const renditionsPlan = planRenditions(publication, process.cwd());
     setSiteFilesForContentActionsBundle(publicationPlan.enabled ? publicationPlan.siteFiles : undefined);
     const backend = defineBackend({
         assignmentAction,
@@ -314,12 +317,16 @@ export function defineSiteBackend(papyrusSite) {
         contentActionsLambda.addToRolePolicy(new PolicyStatement({ actions: rebuildSettings.actions, resources: rebuildSettings.resources }));
     }
     let s3ProjectionPublication;
-    if (site.publication !== undefined) {
-        s3ProjectionPublication = addS3ProjectionPublication(backend.createStack("s3-projection"), site.publication, {
+    if (publication !== undefined) {
+        s3ProjectionPublication = addS3ProjectionPublication(backend.createStack("s3-projection"), publication, {
             mediaBucket: storageBucket,
             renditions: renditionsPlan,
         });
         contentActionsLambda.node.defaultChild.memorySize = publicationPlan.contentActionsMemorySize;
+        if (publication.reprojectOnDeploy === true) {
+            contentActionsLambda.node.defaultChild.timeout = REPROJECT_ON_DEPLOY_TIMEOUT_SECONDS;
+            addReprojectOnDeploy(backend.createStack("reproject-on-deploy"), contentActionsLambda, reprojectDeployToken(process.env));
+        }
     }
     if (s3ProjectionPublication !== undefined) {
         addProjectionRetries(contentActionsLambda, s3ProjectionPublication.deadLetterQueue);

package/amplify/site-backend.ts

@@ -10,6 +10,8 @@ import type { Construct } from "constructs";
 import { dirname, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
 import { DEFAULT_RESOLVER_WAVE_SIZE, orderModelStacksInWaves } from "./resolver-waves";
+import { resolveSitePublication } from "./publication/default-publication";
+import { REPROJECT_ON_DEPLOY_TIMEOUT_SECONDS, addReprojectOnDeploy, reprojectDeployToken } from "./publication/reproject-on-deploy";
 import { addProjectionRetries, addS3ProjectionPublication, type S3ProjectionPublication } from "./publication/s3-projection";
 import { planRenditions } from "./publication/renditions-settings";
 import { contentActionsPublicationWiring, planS3ProjectionBackend } from "./publication/s3-projection-settings";
@@ -90,9 +92,10 @@ export function defineSiteBackend(papyrusSite: PapyrusSite) {
     ...baseAuthConfig,
     newsroomBasePath: baseAuthConfig.newsroomBasePath ?? activeBrand?.newsroomBasePath,
   };
-  if (site.publication !== undefined) assertValidPublicationConfig(site.publication);
-  const publicationPlan = planS3ProjectionBackend(site.publication);
-  const renditionsPlan = planRenditions(site.publication, process.cwd());
+  const publication = resolveSitePublication(site, activeBrand?.renderer?.kind);
+  if (publication !== undefined) assertValidPublicationConfig(publication);
+  const publicationPlan = planS3ProjectionBackend(publication);
+  const renditionsPlan = planRenditions(publication, process.cwd());
   setSiteFilesForContentActionsBundle(publicationPlan.enabled ? publicationPlan.siteFiles : undefined);
   const backend = defineBackend({
     assignmentAction,
@@ -403,12 +406,16 @@ export function defineSiteBackend(papyrusSite: PapyrusSite) {
     );
   }
   let s3ProjectionPublication: S3ProjectionPublication | undefined;
-  if (site.publication !== undefined) {
-    s3ProjectionPublication = addS3ProjectionPublication(backend.createStack("s3-projection"), site.publication, {
+  if (publication !== undefined) {
+    s3ProjectionPublication = addS3ProjectionPublication(backend.createStack("s3-projection"), publication, {
       mediaBucket: storageBucket,
       renditions: renditionsPlan,
     });
     (contentActionsLambda.node.defaultChild as CfnFunction).memorySize = publicationPlan.contentActionsMemorySize;
+    if (publication.reprojectOnDeploy === true) {
+      (contentActionsLambda.node.defaultChild as CfnFunction).timeout = REPROJECT_ON_DEPLOY_TIMEOUT_SECONDS;
+      addReprojectOnDeploy(backend.createStack("reproject-on-deploy"), contentActionsLambda, reprojectDeployToken(process.env));
+    }
   }
   if (s3ProjectionPublication !== undefined) {
     addProjectionRetries(contentActionsLambda, s3ProjectionPublication.deadLetterQueue);

package/infra/build-specs.js

@@ -32,6 +32,9 @@ function reader(config) {
         throw new Error(`site ${config.siteId} has no reader app (frontend ${config.frontend})`);
     return config.reader;
 }
+function stagingPreviewFor(config) {
+    return config.cms?.stagingPreview ?? config.reader;
+}
 function frontendSection(preBuildCommands, buildCommands, artifactsDirectory, cachePaths) {
     const lines = ["frontend:", "  phases:"];
     if (preBuildCommands.length > 0) {
@@ -62,9 +65,9 @@ export function cmsProductionBuildSpec(config) {
 export function cmsStagingBuildSpec(config) {
     const preBuild = [NPM_CLEAN_INSTALL, "npx ampx generate outputs --branch main --app-id $AWS_APP_ID"];
     const cachePaths = [".next/cache/**/*", ".npm/**/*"];
-    if (config.frontend === "markus-static") {
-        const readerConfig = reader(config);
-        preBuild.push(...pythonProvisioningCommands(config), `${CHECKOUT_AS_PAPYRUS_ROOT} papyrus ops content export-published --drafts --out content-export --clean`, readerConfig.buildCommand, `${CHECKOUT_AS_PAPYRUS_ROOT} papyrus ops content upload-preview --dir ${readerConfig.baseDirectory} --prefix ${resolveStoragePreviewPrefix(config)}`);
+    const preview = config.frontend === "markus-static" ? stagingPreviewFor(config) : undefined;
+    if (preview !== undefined) {
+        preBuild.push(...pythonProvisioningCommands(config), `${CHECKOUT_AS_PAPYRUS_ROOT} papyrus ops content export-published --drafts --out content-export --clean`, preview.buildCommand, `${CHECKOUT_AS_PAPYRUS_ROOT} papyrus ops content upload-preview --dir ${preview.baseDirectory} --prefix ${resolveStoragePreviewPrefix(config)}`);
         cachePaths.push(".uv-cache/**/*");
     }
     return [

package/infra/build-specs.ts

@@ -43,6 +43,10 @@ function reader(config: AmplifyAppShellSiteConfig): NonNullable<AmplifyAppShellS
   return config.reader;
 }
 
+function stagingPreviewFor(config: AmplifyAppShellSiteConfig): { buildCommand: string; baseDirectory: string } | undefined {
+  return config.cms?.stagingPreview ?? config.reader;
+}
+
 function frontendSection(preBuildCommands: string[], buildCommands: string[], artifactsDirectory: string, cachePaths: string[]): string[] {
   const lines = ["frontend:", "  phases:"];
   if (preBuildCommands.length > 0) {
@@ -94,13 +98,13 @@ export function cmsProductionBuildSpec(config: AmplifyAppShellSiteConfig): strin
 export function cmsStagingBuildSpec(config: AmplifyAppShellSiteConfig): string {
   const preBuild = [NPM_CLEAN_INSTALL, "npx ampx generate outputs --branch main --app-id $AWS_APP_ID"];
   const cachePaths = [".next/cache/**/*", ".npm/**/*"];
-  if (config.frontend === "markus-static") {
-    const readerConfig = reader(config);
+  const preview = config.frontend === "markus-static" ? stagingPreviewFor(config) : undefined;
+  if (preview !== undefined) {
     preBuild.push(
       ...pythonProvisioningCommands(config),
       `${CHECKOUT_AS_PAPYRUS_ROOT} papyrus ops content export-published --drafts --out content-export --clean`,
-      readerConfig.buildCommand,
-      `${CHECKOUT_AS_PAPYRUS_ROOT} papyrus ops content upload-preview --dir ${readerConfig.baseDirectory} --prefix ${resolveStoragePreviewPrefix(config)}`,
+      preview.buildCommand,
+      `${CHECKOUT_AS_PAPYRUS_ROOT} papyrus ops content upload-preview --dir ${preview.baseDirectory} --prefix ${resolveStoragePreviewPrefix(config)}`,
     );
     cachePaths.push(".uv-cache/**/*");
   }

package/infra/site-config.js

@@ -169,9 +169,19 @@ export function resolveStackName(config) {
 export function resolveStoragePreviewPrefix(config) {
     return config.storagePreviewPrefix ?? "preview/";
 }
+function parseStagingPreview(value) {
+    if (value === undefined)
+        return undefined;
+    const record = requireObject(value, "cms.stagingPreview");
+    rejectUnknownKeys(record, ["buildCommand", "baseDirectory"], "cms.stagingPreview");
+    return {
+        buildCommand: requireString(record.buildCommand, "cms.stagingPreview.buildCommand"),
+        baseDirectory: requireString(record.baseDirectory, "cms.stagingPreview.baseDirectory"),
+    };
+}
 function parseCms(value) {
     const cmsRecord = requireObject(value, "cms");
-    rejectUnknownKeys(cmsRecord, ["appName", "domainName", "staging", "cognitoDomainPrefix", "applyCognitoDomainPrefix", "buildComputeType", "environment", "stagingDomainName", "domainPrefix", "stagingDomainPrefix", "redirects"], "cms");
+    rejectUnknownKeys(cmsRecord, ["appName", "domainName", "staging", "cognitoDomainPrefix", "applyCognitoDomainPrefix", "buildComputeType", "environment", "stagingDomainName", "domainPrefix", "stagingDomainPrefix", "redirects", "stagingPreview"], "cms");
     const buildComputeType = cmsRecord.buildComputeType;
     if (buildComputeType !== undefined && buildComputeType !== "STANDARD" && buildComputeType !== "STANDARD_8GB") {
         fail("cms.buildComputeType", `must be "STANDARD" or "STANDARD_8GB", got ${JSON.stringify(buildComputeType)}`);
@@ -194,6 +204,7 @@ function parseCms(value) {
         stagingDomainName: optionalString(cmsRecord.stagingDomainName, "cms.stagingDomainName", HOST_NAME_PATTERN, "host name"),
         stagingDomainPrefix: optionalString(cmsRecord.stagingDomainPrefix, "cms.stagingDomainPrefix", DOMAIN_PREFIX_PATTERN, "single DNS label"),
         redirects: parseRedirects(cmsRecord.redirects),
+        stagingPreview: parseStagingPreview(cmsRecord.stagingPreview),
     };
     const reservedWord = COGNITO_RESERVED_WORDS.find((word) => cms.cognitoDomainPrefix.includes(word));
     if (reservedWord) {
@@ -306,8 +317,14 @@ export function parseSiteConfig(raw) {
         if (reader.domainPrefixes && !reader.domainName)
             fail("reader.domainPrefixes", "requires reader.domainName");
     }
-    else if (frontend === "markus-static") {
-        fail("reader", `is required when frontend is "markus-static"`);
+    else if (frontend === "markus-static" && cms === undefined) {
+        fail("reader", `is required when frontend is "markus-static" and there is no cms section`);
+    }
+    if (cms?.stagingPreview !== undefined && frontend !== "markus-static") {
+        fail("cms.stagingPreview", `is only allowed when frontend is "markus-static"`);
+    }
+    if (cms?.stagingPreview !== undefined && cms.staging === false) {
+        fail("cms.stagingPreview", "must not be set when cms.staging is false");
     }
     let github;
     if (record.github !== undefined) {

package/infra/site-config.ts

@@ -18,11 +18,22 @@ export type ReaderCustomHeaderRule = {
 
 export const READER_REDIRECT_STATUSES: ReaderRedirectStatus[] = ["301", "302", "200", "404", "404-200"];
 
+/**
+ * What the CMS `staging` branch builds to preview drafts of a markus-static site: the site build
+ * command and the directory it writes. Without it, and without a `reader` to borrow them from,
+ * the staging branch builds the newsroom only.
+ */
+export type StagingPreviewConfig = {
+  buildCommand: string;
+  baseDirectory: string;
+};
+
 export type CmsConfig = {
   appName?: string;
   domainName?: string;
   domainPrefix?: string;
   staging?: boolean;
+  stagingPreview?: StagingPreviewConfig;
   cognitoDomainPrefix: string;
   applyCognitoDomainPrefix?: boolean;
   buildComputeType?: "STANDARD" | "STANDARD_8GB";
@@ -236,9 +247,19 @@ export function resolveStoragePreviewPrefix(config: Pick<AmplifyAppShellSiteConf
   return config.storagePreviewPrefix ?? "preview/";
 }
 
+function parseStagingPreview(value: unknown): StagingPreviewConfig | undefined {
+  if (value === undefined) return undefined;
+  const record = requireObject(value, "cms.stagingPreview");
+  rejectUnknownKeys(record, ["buildCommand", "baseDirectory"], "cms.stagingPreview");
+  return {
+    buildCommand: requireString(record.buildCommand, "cms.stagingPreview.buildCommand"),
+    baseDirectory: requireString(record.baseDirectory, "cms.stagingPreview.baseDirectory"),
+  };
+}
+
 function parseCms(value: unknown): CmsConfig {
   const cmsRecord = requireObject(value, "cms");
-  rejectUnknownKeys(cmsRecord, ["appName", "domainName", "staging", "cognitoDomainPrefix", "applyCognitoDomainPrefix", "buildComputeType", "environment", "stagingDomainName", "domainPrefix", "stagingDomainPrefix", "redirects"], "cms");
+  rejectUnknownKeys(cmsRecord, ["appName", "domainName", "staging", "cognitoDomainPrefix", "applyCognitoDomainPrefix", "buildComputeType", "environment", "stagingDomainName", "domainPrefix", "stagingDomainPrefix", "redirects", "stagingPreview"], "cms");
   const buildComputeType = cmsRecord.buildComputeType;
   if (buildComputeType !== undefined && buildComputeType !== "STANDARD" && buildComputeType !== "STANDARD_8GB") {
     fail("cms.buildComputeType", `must be "STANDARD" or "STANDARD_8GB", got ${JSON.stringify(buildComputeType)}`);
@@ -266,6 +287,7 @@ function parseCms(value: unknown): CmsConfig {
     stagingDomainName: optionalString(cmsRecord.stagingDomainName, "cms.stagingDomainName", HOST_NAME_PATTERN, "host name"),
     stagingDomainPrefix: optionalString(cmsRecord.stagingDomainPrefix, "cms.stagingDomainPrefix", DOMAIN_PREFIX_PATTERN, "single DNS label"),
     redirects: parseRedirects(cmsRecord.redirects),
+    stagingPreview: parseStagingPreview(cmsRecord.stagingPreview),
   };
 
   const reservedWord = COGNITO_RESERVED_WORDS.find((word) => cms.cognitoDomainPrefix.includes(word));
@@ -384,8 +406,14 @@ export function parseSiteConfig(raw: unknown): AmplifyAppShellSiteConfig {
       skipContentExport: readerRecord.skipContentExport as boolean | undefined,
     };
     if (reader.domainPrefixes && !reader.domainName) fail("reader.domainPrefixes", "requires reader.domainName");
-  } else if (frontend === "markus-static") {
-    fail("reader", `is required when frontend is "markus-static"`);
+  } else if (frontend === "markus-static" && cms === undefined) {
+    fail("reader", `is required when frontend is "markus-static" and there is no cms section`);
+  }
+  if (cms?.stagingPreview !== undefined && frontend !== "markus-static") {
+    fail("cms.stagingPreview", `is only allowed when frontend is "markus-static"`);
+  }
+  if (cms?.stagingPreview !== undefined && cms.staging === false) {
+    fail("cms.stagingPreview", "must not be set when cms.staging is false");
   }
 
   let github: AmplifyAppShellSiteConfig["github"];

package/package.json

@@ -303,7 +303,7 @@
       "optional": true
     }
   },
-  "version": "1.0.0-next.48",
+  "version": "1.0.0-next.49",
   "dependencies": {
     "@aws-amplify/adapter-nextjs": "^1.7.3",
     "@aws-sdk/client-cognito-identity-provider": "3.1045.0",

package/routes.manifest.json

@@ -1,5 +1,5 @@
 {
-  "version": "1.0.0-next.48",
+  "version": "1.0.0-next.49",
   "routes": [
     {
       "file": "app/%5F_preview/[[...path]]/route.ts",