@caretcms/core 0.2.0 → 0.4.0

package/README.md

@@ -1,8 +1,10 @@
 # @caretcms/core
 
-Inline editing and live content collections for Astro. Add one HTML attribute to make any element editable, and use Astro's live loaders to query CMS data with `getLiveEntry` / `getLiveCollection` (stable on Astro 6, experimental on Astro 5.10+).
+Inline editing, Markdown prose editing, and live content collections for Astro 6
+and 7. Add one HTML attribute to make any element editable, or edit supported
+blocks rendered from existing `.md` content collections.
 
-![CaretCMS inline editor demo](https://caretcms.com/preview/caretcms-editor-demo.gif)
+![CaretCMS inline editor demo](https://caretcms.com/preview/caretcms-demo.gif)
 
 ## Install
 
@@ -56,6 +58,11 @@ export default defineConfig({
 });
 ```
 
+Enable public access for the R2 bucket and set `R2_PUBLIC_DOMAIN` to that
+hostname, or pass `publicBaseUrl` to `r2Uploads()`. Uploads fail with an
+actionable configuration error if no public URL is available; Caret core does
+not mount an R2 image proxy.
+
 - **`astro dev`** — full authoring: `/admin`, `/api/cms`, inline editor.
 - **`astro build`** — bakes stored overrides into generated HTML; authoring routes stay out of production output.
 - **Public updates** — after Publish, run CI/build/deploy (optionally via `delivery.publish.webhookUrl`).
@@ -80,9 +87,32 @@ Edits are visible to visitors immediately — middleware rewrites HTML on each r
 **Already have Astro content collections?** If your project has collections under
 `src/content/` and you haven't set `storage`, CaretCMS auto-selects
 `markdownStorage()` so the Studio lists those collections immediately (instead of
-"No collections yet") and edits write back to your `.md` frontmatter. Pass an
+"No collections yet") and edits write back to your `.md` files. Pass an
 explicit `storage` to override — `storage: filesystemStorage()` opts back out.
 
+### Edit Markdown prose on the page
+
+When Astro renders a `.md` entry through `markdownStorage()`, Caret marks safe
+prose blocks automatically. Sign in, click a paragraph or heading, edit it on the
+page, then publish the draft to write the change back to the source file.
+
+Caret supports paragraphs, ATX headings, list items, and paragraphs inside
+blockquotes. Bold, emphasis, links, inline code, and line breaks round-trip to
+Markdown. Code blocks, tables, raw HTML blocks, and MDX stay read-only. Nested
+blocks must fit on one source line.
+
+Consecutive top-level paragraphs support Enter to split or insert, Backspace and
+Delete to merge, selection deletion, and browser undo. Paste accepts plain text
+with paragraph breaks. See [paragraph editing](../../docs/markdown-paragraph-editing.md)
+for boundaries, source preservation, preview styling, and browser coverage.
+
+Each draft records the source range and a hash of the original text. If the file
+changes before publish, Caret returns a conflict and leaves both the file and the
+draft untouched. Set `bodyEditing: false` in `caret()` to disable this feature.
+
+See [Markdown body editing](https://caretcms.com/docs/markdown-body-editing/) for
+the full setup, supported syntax, and publish workflow.
+
 ## Choose your path
 
 CaretCMS gives you two ways to make content editable. They share one storage layer and one login — you can mix them on the same site — but they answer different questions. Start at the top; reach for the next row only when you need it.
@@ -124,11 +154,16 @@ production stays locked). To set a permanent one, add `CARET_EDIT_PASSWORD=<your
 Log in at `/admin`, then click any tagged element on the page to edit it. The content Studio
 lives at `/admin/cms`.
 
-The inline editor only bootstraps on pages that contain `data-caret` bindings and only after
+For editable content inside a link, a normal click edits while Command-click
+(macOS) or Ctrl-click (Windows/Linux) opens the destination in a new tab. The
+editor also shows a collision-aware Open action on hover or keyboard focus;
+linked images keep separate Replace image and Open link actions.
+
+The inline editor only bootstraps on pages that contain `data-caret` or `data-caret-md` bindings and only after
 `GET /api/cms/auth/session` confirms an authenticated editor session. Session cookies are issued
 as `HttpOnly`, `SameSite=Lax`, and automatically add `Secure` on HTTPS requests.
 
-When you're signed in and land on a live page that has **no** `data-caret` bindings yet, CaretCMS
+When you're signed in and land on a live page that has **no** editable bindings yet, CaretCMS
 shows a small "signed in · no editable fields on this page" hint pointing you at the next step —
 so a page that isn't annotated yet reads as "nothing to edit here" rather than "is this broken?".
 The hint is editor-only (anonymous visitors never see it) and never appears inside the Studio.
@@ -137,9 +172,7 @@ The hint is editor-only (anonymous visitors never see it) and never appears insi
 
 You can also wire collections into Astro's native content layer using `caretLoader`. This lets you query CMS data with `getLiveEntry` and `getLiveCollection` from `astro:content` — the same API you use for any Astro live collection.
 
-> **Astro 6:** stable, no flag required.
-> **Astro 5.10+:** available behind `experimental.liveContentCollections: true` in `astro.config.*`.
-> **Astro 5.0–5.9:** the live-loader API (`defineLiveCollection`, `getLiveEntry`, `getLiveCollection`) doesn't exist; use `data-caret` inline editing, `bindEntry()`, and `loadEntry()` instead.
+> **Astro 6 and 7:** stable, no experimental flag required.
 
 ### 1. Define collections
 
@@ -178,6 +211,65 @@ Inline editing (`data-caret`) and live collections read from the same storage ad
 - `data-caret` for visual, in-place editing of rendered pages
 - `getLiveEntry` / `getLiveCollection` for programmatic data access in frontmatter
 
+Authenticated live-loader responses hide binding metadata inside string values.
+Rendered text uses that metadata for automatic click-to-edit. Strip it before a
+value enters an HTML attribute that is not itself editable, such as `href`,
+`src`, `alt`, `<title>`, or a meta description:
+
+```astro
+---
+import { stegaClean } from '@caretcms/core';
+const href = stegaClean(home?.data.ctaHref ?? '/');
+---
+<a href={href}>{home?.data.ctaLabel}</a>
+```
+
+### Preview routes and managed publication
+
+Collection metadata can connect Studio entries to their actual site routes and
+make publication a reversible visibility state:
+
+```js
+caret({
+  collections: {
+    pages: {
+      previewPath: { home: '/', about: '/about' },
+      publication: { field: 'published' },
+    },
+    posts: {
+      previewPath: '/blog/{id}',
+      publication: { field: 'published' },
+    },
+  },
+})
+```
+
+Selecting a Studio field first uses the current page when that binding is
+present. Otherwise Caret navigates the preview to `previewPath`, then scrolls to
+and highlights the field. Preview paths must be same-origin absolute paths.
+
+For a collection with `publication`, public `caretLoader`, `loadEntry`, and
+`loadCollection` reads include only entries whose configured field is exactly
+`true`. Authenticated editor previews include both published and unpublished
+entries. Turning the field off and saving therefore removes the entry publicly
+without deleting it; it can be turned on again later. The configured field must
+also be a top-level boolean in that collection's explicit schema, so an invalid
+publication setup fails during configuration instead of behaving ambiguously.
+
+Astro's native build-time `getCollection()` does not pass through Caret's
+request-aware loader. Filter those results explicitly:
+
+```astro
+---
+import { getCollection } from 'astro:content';
+import { isPublishedEntry } from '@caretcms/core/runtime';
+
+const posts = (await getCollection('posts')).filter((post) =>
+  isPublishedEntry(post.data),
+);
+---
+```
+
 ## Explicit schemas (optional)
 
 By default, Studio infers field types from your stored data. For better field labels, validation, and widget hints, pass JSON Schemas via the integration config:
@@ -223,7 +315,7 @@ existing entries; deriving from Zod just adds proper labels, types, and widget h
 ## What you get
 
 - **Inline editing** on any `data-caret` element (text and images)
-- **Live content collections** via `caretLoader` for `getLiveEntry` / `getLiveCollection` (Astro 6 stable, Astro 5.10+ behind `experimental.liveContentCollections`)
+- **Live content collections** via `caretLoader` for `getLiveEntry` / `getLiveCollection` on Astro 6 and 7
 - **Content Studio** at `/admin/cms` for structured CRUD
 - **Section composer** for reordering and spacing page sections
 - **Response rewriting** middleware (server delivery) or **build-time HTML bake** (static delivery)
@@ -264,6 +356,7 @@ All routes are under `/api/cms` by default (configurable via `apiBasePath`):
 | `/api/cms/mutate` | POST | Save content mutations |
 | `/api/cms/history` | GET | Entry revision history |
 | `/api/cms/upload` | POST | File uploads |
+| `/api/cms/deployment` | GET | Provider-backed status for the editor's latest accepted deployment |
 | `/api/cms/auth/login` | POST | Editor login |
 | `/api/cms/auth/session` | GET | Editor session status |
 | `/api/cms/auth/logout` | POST | Editor logout |
@@ -283,10 +376,70 @@ caret({
   storage: filesystemStorage(), // Storage adapter (default: markdownStorage when
                                 //   src/content collections exist, else filesystem)
   uploads: localUploads(),      // Upload handler (default: local filesystem)
+  deployment: undefined,        // Optional build/deployment status provider
   schemas: {},                  // Optional JSON Schema map for Studio (default: inferred)
+  collections: {},              // Labels, capabilities, preview paths, publication
+  locale: 'en',                 // 'en' | 'es'; dictionary overrides are also supported
+  bodyEditing: true,            // Inline editing for rendered Markdown prose
 })
 ```
 
+### Optional named identity adapter
+
+Shared-password mode remains the zero-dependency default. Server deployments can
+instead configure an authoritative identity provider:
+
+```js
+import caret, { defineIdentityProvider } from '@caretcms/core';
+
+caret({
+  identity: defineIdentityProvider({
+    entrypoint: './src/caret-identity.ts',
+    exportName: 'identityProvider',
+    options: { loginOrigin: 'https://login.example.com' },
+  }),
+});
+```
+
+The provider module exports a factory returning an `IdentityAdapter`:
+
+```ts
+import type { IdentityAdapter } from '@caretcms/core';
+
+export function identityProvider(options: { loginOrigin: string }): IdentityAdapter {
+  return {
+    async authenticate(request) {
+      // Verify a trusted session/header. Return null to deny authentication.
+      // Return null to deny access. IDs must match /^[A-Za-z0-9_-]{1,64}$/.
+      return { id: 'editor_01', name: 'Alex Rivera', roles: ['editor'] };
+    },
+    loginUrl({ redirectTo }) {
+      return `${options.loginOrigin}/login?returnTo=${encodeURIComponent(redirectTo)}`;
+    },
+    logoutUrl({ redirectTo }) {
+      return `${options.loginOrigin}/logout?returnTo=${encodeURIComponent(redirectTo)}`;
+    },
+    async authorize({ identity, action, collection }) {
+      if (identity.roles?.includes('admin')) return true;
+      if (action === 'edit') return collection === 'pages';
+      if (action === 'publish') return identity.roles?.includes('reviewer') === true;
+      return false;
+    },
+  };
+}
+```
+
+When `identity` is configured it is authoritative: Caret does not fall back to
+the shared password. Authentication errors and unsafe IDs fail closed. Named
+identity is exposed by `/api/cms/auth/session`, shown in Studio, used as the
+private-preview overlay key, and attached to new history snapshots. Only trust
+identity headers when a proxy strips client-supplied copies and writes its own.
+The optional `authorize` hook controls edit, publish, delete, collection-management,
+and upload writes. When present, all content saves go to per-editor drafts so a
+writer cannot bypass publish permission in server delivery. See the
+[authorization policy](../../docs/authorization-policy.md) for exact action
+semantics, backward-compatible defaults, and review-workflow boundaries.
+
 ## Rendering & output
 
 CaretCMS defaults to automatic delivery. With `caret()` or `delivery: 'auto'`, Astro
@@ -314,6 +467,7 @@ caret({
     bake: true,
     publish: {
       webhookUrl: 'https://ci.example.com/hooks/rebuild',
+      timeoutMs: 5000, // bounded webhook wait; 1–30000 ms
     },
   },
 })
@@ -323,6 +477,17 @@ Use `delivery: 'static'` when you want the integration to error if Astro output
 changed away from static.
 
 Full guide: [docs/static-delivery.md](../../docs/static-delivery.md).
+Draft migration, conflicts, interrupted publication, and deployment retries:
+[publish recovery](../../docs/publish-recovery.md).
+
+The webhook's 2xx response means accepted, not deployed. Configure a
+`DeploymentStatusProvider` to show provider-backed Deploying, Live, and failed
+states; Live requires evidence for the published commit or every target entry
+revision. The bundled `simulatedDeployment()` provider exercises the complete
+local flow. `githubDeployment()` reads exact-correlation build evidence from the
+GitHub Deployments API, including progress, failure, environment URL, commit,
+and published revisions. See
+[deployment completion status](../../docs/deployment-status.md).
 
 ### Server delivery
 
@@ -343,7 +508,7 @@ The default (embedded) providers write inside your project:
 | `.caret/data/` | entry JSON | `filesystemStorage()` (default) |
 | `.caret/drafts/` | per-editor draft overlays | `filesystemStorage()` |
 | `.caretcms/` | revisions + history sidecar | both filesystem and markdown storage |
-| `src/content/**.md` | frontmatter edits | `markdownStorage()` (auto-selected when you have content collections) |
+| `src/content/**.md` | frontmatter and published prose edits | `markdownStorage()` (auto-selected when you have content collections) |
 | `public/uploads/` | uploaded images | `localUploads()` (default) |
 
 Recommended `.gitignore` for the transient state (keep `.caret/data/` or your
@@ -356,12 +521,19 @@ workflow in [docs/deployment.md](../../docs/deployment.md)):
 public/uploads/
 ```
 
+Multiline literal/folded strings and source-preserving saves are supported by
+Markdown storage. See [frontmatter compatibility](../../docs/markdown-frontmatter.md)
+for supported forms and formatting limits.
+
 ## Production checklist
 
 - `CARET_EDIT_PASSWORD` — the editor password. Without it, production is locked (no dev fallback).
 - `CARET_SESSION_SECRET` — **required in production** when a password is set; sessions are
   HMAC-signed with it. Generate one with `openssl rand -base64 32`. If it's missing, logins
   return a configuration error and existing sessions are treated as signed out.
+- Rotate `CARET_EDIT_PASSWORD` and `CARET_SESSION_SECRET` together, then restart or redeploy
+  every instance. Changing the session secret immediately invalidates all existing editor
+  cookies; changing only the password does not revoke sessions that are already signed in.
 - `markdownStorage()` edits `src/content/*.md` **at request time** — a dev/git workflow. In
   production, pair it with commit-on-publish + a CI rebuild (fields rendered through
   `getCollection()` are baked at build time and only refresh on rebuild), or use a server-side
@@ -373,13 +545,24 @@ public/uploads/
   from your project root, or pass explicit paths (`filesystemStorage({ dataRoot })`,
   `markdownStorage({ contentRoot })`, `localUploads({ uploadsDir })`).
 
+Password mode is deliberately a single shared-editor workflow: it has no named users, roles,
+or per-user attribution. Teams needing those controls should configure the authoritative
+identity adapter described above.
+
 ## Requirements
 
-- Astro 5 or 6
-- Node 20.19.1+ or 22.12.0+
+- Astro 6 or 7
+- Node 22.12.0+
 - **Static delivery:** default Astro static output (no adapter)
 - **Server delivery:** `output: 'server'` plus an SSR adapter
 
+## Browser development
+
+`npm run typecheck:browser` checks the extracted Studio modules with strict
+JavaScript types. It also runs as part of core type checking and the standard
+check gate. See [browser maintenance](../../docs/browser-maintenance.md) for
+module boundaries, asset delivery, and the remaining incremental work.
+
 ## License
 
 MIT

package/dist/index.d.ts

@@ -1,6 +1,10 @@
 import type { AstroIntegration } from "astro";
-import type { CaretStorageProvider, CaretUploadProvider } from "./types.js";
-export type { StorageAdapter, UploadHandler, UploadContext, EntryData, HistoryEntry, CollectionMetadata, CollectionSchema, CaretMode, CaretStorageProvider, CaretUploadProvider, RuntimeProviderReference, } from "./types.js";
+import type { CaretStorageProvider, CaretUploadProvider, CollectionStudioConfig, CaretIdentityProvider, CaretDeploymentProvider } from "./types.js";
+import { type StudioDictionary, type StudioLocale } from "./runtime/i18n.js";
+import type { GitHubDeploymentOptions } from "./providers/deployment/github.js";
+export type { StorageAdapter, UploadHandler, UploadContext, EntryData, HistoryEntry, RebuildReceipt, EntryCommit, EntryCommitResult, CollectionMetadata, CollectionSchema, CollectionStudioConfig, CaretIdentityProvider, CaretDeploymentProvider, DeploymentStatusProvider, DeploymentStatusEvidence, DeploymentState, DeploymentTarget, IdentityAdapter, AuthorizationPolicy, AuthorizationAction, AuthorizationRequest, EditorIdentity, CaretMode, CaretStorageProvider, CaretUploadProvider, RuntimeProviderReference, } from "./types.js";
+export type { StudioDictionary, StudioLocale, StudioMessageKey } from "./runtime/i18n.js";
+export type { GitHubDeploymentOptions } from "./providers/deployment/github.js";
 export { FilesystemAdapter } from "./runtime/storage/filesystem-adapter.js";
 export { MarkdownAdapter } from "./runtime/storage/markdown-adapter.js";
 export { InMemoryAdapter } from "./runtime/storage/in-memory-adapter.js";
@@ -56,6 +60,12 @@ type BaseCaretOptions = {
      * by z.toJSONSchema() from a Zod schema).
      */
     schemas?: Record<string, JsonSchemaDefinition>;
+    /** Studio labels, ordering, and mutation capabilities by collection. */
+    collections?: Record<string, CollectionStudioConfig>;
+    /** Fixed Studio chrome language. Spanish and English ship with core. */
+    locale?: StudioLocale;
+    /** Per-message overrides applied after the selected first-party locale. */
+    dictionary?: StudioDictionary;
     /**
      * Per-tag class allowlist for rich-text (`data-caret-rich`) fields. By default
      * the rich-text sanitizer strips every `class` (keeping only semantic inline
@@ -99,6 +109,7 @@ type BaseCaretOptions = {
              * The publish remains committed if this webhook fails.
              */
             webhookUrl?: string;
+            timeoutMs?: number;
             method?: "POST" | "PUT";
             headers?: Record<string, string>;
         };
@@ -120,15 +131,28 @@ export type CaretOptions = (BaseCaretOptions & {
     mode?: "embedded";
     storage?: CaretStorageProvider;
     uploads?: CaretUploadProvider;
+    identity?: CaretIdentityProvider;
+    deployment?: CaretDeploymentProvider;
     cloud?: never;
 }) | (BaseCaretOptions & {
     mode: "cloud";
     cloud: CaretCloudOptions;
     storage?: never;
     uploads?: never;
+    identity?: never;
+    deployment?: never;
 });
 export declare function defineStorageProvider(options: ProviderDefinitionOptions): CaretStorageProvider;
 export declare function defineUploadProvider(options: ProviderDefinitionOptions): CaretUploadProvider;
+export declare function defineIdentityProvider(options: ProviderDefinitionOptions): CaretIdentityProvider;
+export declare function defineDeploymentProvider(options: ProviderDefinitionOptions): CaretDeploymentProvider;
+/** Deterministic local deployment status provider for development and tests. */
+export declare function simulatedDeployment(options?: {
+    durationMs?: number;
+    result?: "live" | "failed";
+}): CaretDeploymentProvider;
+/** GitHub Deployments status provider for deployment pipelines that preserve Caret metadata. */
+export declare function githubDeployment(options: GitHubDeploymentOptions): CaretDeploymentProvider;
 export declare function filesystemStorage(options?: {
     dataRoot?: string;
     metaRoot?: string;

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,OAAO,CAAC;AAE9C,OAAO,KAAK,EAEV,oBAAoB,EACpB,mBAAmB,EAGpB,MAAM,YAAY,CAAC;AAMpB,YAAY,EACV,cAAc,EACd,aAAa,EACb,aAAa,EACb,SAAS,EACT,YAAY,EACZ,kBAAkB,EAClB,gBAAgB,EAChB,SAAS,EACT,oBAAoB,EACpB,mBAAmB,EACnB,wBAAwB,GACzB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,iBAAiB,EAAE,MAAM,yCAAyC,CAAC;AAC5E,OAAO,EAAE,eAAe,EAAE,MAAM,uCAAuC,CAAC;AACxE,OAAO,EAAE,eAAe,EAAE,MAAM,wCAAwC,CAAC;AACzE,OAAO,EAAE,uBAAuB,EAAE,MAAM,gDAAgD,CAAC;AACzF,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC5D,YAAY,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAKzC,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAUhD,KAAK,yBAAyB,GAAG;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CAC1C,CAAC;AAEF,MAAM,WAAW,iBAAkB,SAAQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAChE,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,KAAK,oBAAoB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAEpD,MAAM,MAAM,gBAAgB,GACxB,MAAM,GACN;IACE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACjC,CAAC;AAEN,MAAM,MAAM,gBAAgB,GAAG;IAC7B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,KAAK,gBAAgB,GAAG;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B;;;;;;;;OAQG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;;;;OAOG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;IAC/C;;;;;;;;;;;;OAYG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAC1C;;;;;;;OAOG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;;;;OAMG;IACH,QAAQ,CAAC,EACL,MAAM,GACN,QAAQ,GACR,QAAQ,GACR;QACE,IAAI,CAAC,EAAE,MAAM,GAAG,QAAQ,GAAG,QAAQ,CAAC;QACpC;;;WAGG;QACH,IAAI,CAAC,EAAE,OAAO,CAAC;QACf,OAAO,CAAC,EAAE;YACR;;;eAGG;YACH,UAAU,CAAC,EAAE,MAAM,CAAC;YACpB,MAAM,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC;YACxB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;SAClC,CAAC;KACH,CAAC;IACN;;;;;OAKG;IACH,KAAK,CAAC,EAAE,gBAAgB,CAAC;IACzB;;;OAGG;IACH,KAAK,CAAC,EAAE,gBAAgB,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,YAAY,GACpB,CAAC,gBAAgB,GAAG;IAClB,IAAI,CAAC,EAAE,UAAU,CAAC;IAClB,OAAO,CAAC,EAAE,oBAAoB,CAAC;IAC/B,OAAO,CAAC,EAAE,mBAAmB,CAAC;IAC9B,KAAK,CAAC,EAAE,KAAK,CAAC;CACf,CAAC,GACF,CAAC,gBAAgB,GAAG;IAClB,IAAI,EAAE,OAAO,CAAC;IACd,KAAK,EAAE,iBAAiB,CAAC;IACzB,OAAO,CAAC,EAAE,KAAK,CAAC;IAChB,OAAO,CAAC,EAAE,KAAK,CAAC;CACjB,CAAC,CAAC;AAmDP,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,yBAAyB,GACjC,oBAAoB,CAOtB;AAED,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,yBAAyB,GACjC,mBAAmB,CAOrB;AAED,wBAAgB,iBAAiB,CAAC,OAAO,CAAC,EAAE;IAC1C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,GAAG,oBAAoB,CAMvB;AAED,wBAAgB,eAAe,CAAC,OAAO,CAAC,EAAE;IACxC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,GAAG,oBAAoB,CAMvB;AAED,wBAAgB,YAAY,CAAC,OAAO,CAAC,EAAE;IACrC,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,GAAG,mBAAmB,CAMtB;AAqZD,wBAAgB,KAAK,CAAC,OAAO,GAAE,YAAiB,GAAG,gBAAgB,CAkXlE;AAED,eAAe,KAAK,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,OAAO,CAAC;AAE9C,OAAO,KAAK,EAEV,oBAAoB,EACpB,mBAAmB,EAGnB,sBAAsB,EACtB,qBAAqB,EACrB,uBAAuB,EACxB,MAAM,YAAY,CAAC;AAGpB,OAAO,EAEL,KAAK,gBAAgB,EACrB,KAAK,YAAY,EAElB,MAAM,mBAAmB,CAAC;AAG3B,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAGhF,YAAY,EACV,cAAc,EACd,aAAa,EACb,aAAa,EACb,SAAS,EACT,YAAY,EACZ,cAAc,EACd,WAAW,EACX,iBAAiB,EACjB,kBAAkB,EAClB,gBAAgB,EAChB,sBAAsB,EACtB,qBAAqB,EACrB,uBAAuB,EACvB,wBAAwB,EACxB,wBAAwB,EACxB,eAAe,EACf,gBAAgB,EAChB,eAAe,EACf,mBAAmB,EACnB,mBAAmB,EACnB,oBAAoB,EACpB,cAAc,EACd,SAAS,EACT,oBAAoB,EACpB,mBAAmB,EACnB,wBAAwB,GACzB,MAAM,YAAY,CAAC;AACpB,YAAY,EAAE,gBAAgB,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAC1F,YAAY,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAChF,OAAO,EAAE,iBAAiB,EAAE,MAAM,yCAAyC,CAAC;AAC5E,OAAO,EAAE,eAAe,EAAE,MAAM,uCAAuC,CAAC;AACxE,OAAO,EAAE,eAAe,EAAE,MAAM,wCAAwC,CAAC;AACzE,OAAO,EAAE,uBAAuB,EAAE,MAAM,gDAAgD,CAAC;AACzF,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC5D,YAAY,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAKzC,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAYhD,KAAK,yBAAyB,GAAG;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CAC1C,CAAC;AAEF,MAAM,WAAW,iBAAkB,SAAQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAChE,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,KAAK,oBAAoB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAEpD,MAAM,MAAM,gBAAgB,GACxB,MAAM,GACN;IACE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACjC,CAAC;AAEN,MAAM,MAAM,gBAAgB,GAAG;IAC7B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,KAAK,gBAAgB,GAAG;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B;;;;;;;;OAQG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;;;;OAOG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;IAC/C,wEAAwE;IACxE,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC;IACrD,wEAAwE;IACxE,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB,2EAA2E;IAC3E,UAAU,CAAC,EAAE,gBAAgB,CAAC;IAC9B;;;;;;;;;;;;OAYG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAC1C;;;;;;;OAOG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;;;;OAMG;IACH,QAAQ,CAAC,EACL,MAAM,GACN,QAAQ,GACR,QAAQ,GACR;QACE,IAAI,CAAC,EAAE,MAAM,GAAG,QAAQ,GAAG,QAAQ,CAAC;QACpC;;;WAGG;QACH,IAAI,CAAC,EAAE,OAAO,CAAC;QACf,OAAO,CAAC,EAAE;YACR;;;eAGG;YACH,UAAU,CAAC,EAAE,MAAM,CAAC;YACpB,SAAS,CAAC,EAAE,MAAM,CAAC;YACnB,MAAM,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC;YACxB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;SAClC,CAAC;KACH,CAAC;IACN;;;;;OAKG;IACH,KAAK,CAAC,EAAE,gBAAgB,CAAC;IACzB;;;OAGG;IACH,KAAK,CAAC,EAAE,gBAAgB,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,YAAY,GACpB,CAAC,gBAAgB,GAAG;IAClB,IAAI,CAAC,EAAE,UAAU,CAAC;IAClB,OAAO,CAAC,EAAE,oBAAoB,CAAC;IAC/B,OAAO,CAAC,EAAE,mBAAmB,CAAC;IAC9B,QAAQ,CAAC,EAAE,qBAAqB,CAAC;IACjC,UAAU,CAAC,EAAE,uBAAuB,CAAC;IACrC,KAAK,CAAC,EAAE,KAAK,CAAC;CACf,CAAC,GACF,CAAC,gBAAgB,GAAG;IAClB,IAAI,EAAE,OAAO,CAAC;IACd,KAAK,EAAE,iBAAiB,CAAC;IACzB,OAAO,CAAC,EAAE,KAAK,CAAC;IAChB,OAAO,CAAC,EAAE,KAAK,CAAC;IAChB,QAAQ,CAAC,EAAE,KAAK,CAAC;IACjB,UAAU,CAAC,EAAE,KAAK,CAAC;CACpB,CAAC,CAAC;AA0DP,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,yBAAyB,GACjC,oBAAoB,CAOtB;AAED,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,yBAAyB,GACjC,mBAAmB,CAOrB;AAED,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,yBAAyB,GACjC,qBAAqB,CAOvB;AAED,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,yBAAyB,GACjC,uBAAuB,CAOzB;AAED,gFAAgF;AAChF,wBAAgB,mBAAmB,CAAC,OAAO,CAAC,EAAE;IAC5C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,GAAG,QAAQ,CAAC;CAC5B,GAAG,uBAAuB,CAM1B;AAED,gGAAgG;AAChG,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,uBAAuB,GAAG,uBAAuB,CAM1F;AAED,wBAAgB,iBAAiB,CAAC,OAAO,CAAC,EAAE;IAC1C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,GAAG,oBAAoB,CAMvB;AAED,wBAAgB,eAAe,CAAC,OAAO,CAAC,EAAE;IACxC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,GAAG,oBAAoB,CAMvB;AAED,wBAAgB,YAAY,CAAC,OAAO,CAAC,EAAE;IACrC,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,GAAG,mBAAmB,CAMtB;AA0dD,wBAAgB,KAAK,CAAC,OAAO,GAAE,YAAiB,GAAG,gBAAgB,CAyXlE;AAED,eAAe,KAAK,CAAC"}

package/dist/index.js

@@ -5,7 +5,9 @@ import { join, resolve } from "node:path";
 import { COLLECTION_NAME_RE } from "./runtime/storage/id-contracts.js";
 import { bakeStaticHtmlFiles } from "./runtime/static-bake.js";
 import { caretSatteriPlugin } from "./markdown/satteri.js";
+import { resolveStudioDictionary, } from "./runtime/i18n.js";
 import { caretRemarkPlugin } from "./markdown/remark.js";
+import { publicationField, resolvePreviewPath } from "./runtime/collection-policy.js";
 export { FilesystemAdapter } from "./runtime/storage/filesystem-adapter.js";
 export { MarkdownAdapter } from "./runtime/storage/markdown-adapter.js";
 export { InMemoryAdapter } from "./runtime/storage/in-memory-adapter.js";
@@ -25,6 +27,8 @@ const RESOLVED_VIRTUAL_SCHEMAS_MODULE_ID = `\0${VIRTUAL_SCHEMAS_MODULE_ID}`;
 const FILESYSTEM_STORAGE_ENTRYPOINT = "@caretcms/core/providers/storage/filesystem";
 const MARKDOWN_STORAGE_ENTRYPOINT = "@caretcms/core/providers/storage/markdown";
 const LOCAL_UPLOADS_ENTRYPOINT = "@caretcms/core/providers/uploads/local";
+const SIMULATED_DEPLOYMENT_ENTRYPOINT = "@caretcms/core/providers/deployment/simulated";
+const GITHUB_DEPLOYMENT_ENTRYPOINT = "@caretcms/core/providers/deployment/github";
 export function defineStorageProvider(options) {
     return {
         kind: "storage",
@@ -41,6 +45,38 @@ export function defineUploadProvider(options) {
         options: options.options ?? null,
     };
 }
+export function defineIdentityProvider(options) {
+    return {
+        kind: "identity",
+        entrypoint: options.entrypoint,
+        exportName: options.exportName ?? "default",
+        options: options.options ?? null,
+    };
+}
+export function defineDeploymentProvider(options) {
+    return {
+        kind: "deployment",
+        entrypoint: options.entrypoint,
+        exportName: options.exportName ?? "default",
+        options: options.options ?? null,
+    };
+}
+/** Deterministic local deployment status provider for development and tests. */
+export function simulatedDeployment(options) {
+    return defineDeploymentProvider({
+        entrypoint: SIMULATED_DEPLOYMENT_ENTRYPOINT,
+        exportName: "simulatedDeploymentProvider",
+        options,
+    });
+}
+/** GitHub Deployments status provider for deployment pipelines that preserve Caret metadata. */
+export function githubDeployment(options) {
+    return defineDeploymentProvider({
+        entrypoint: GITHUB_DEPLOYMENT_ENTRYPOINT,
+        exportName: "githubDeploymentProvider",
+        options,
+    });
+}
 export function filesystemStorage(options) {
     return defineStorageProvider({
         entrypoint: FILESYSTEM_STORAGE_ENTRYPOINT,
@@ -66,6 +102,39 @@ import { normalizePath as normalizeMountPath } from "./runtime/config.js";
 function normalizeMode(input) {
     return input ?? "embedded";
 }
+function validateCollectionOptions(collections, schemas) {
+    for (const [collection, config] of Object.entries(collections)) {
+        if (config.publication) {
+            const field = publicationField(config);
+            if (!field) {
+                throw new Error(`[caretcms] Collection "${collection}" has an invalid publication field.`);
+            }
+            const schema = schemas[collection];
+            const properties = schema?.properties;
+            const fieldSchema = properties && typeof properties === "object" && !Array.isArray(properties)
+                ? properties[field]
+                : null;
+            if (!fieldSchema || typeof fieldSchema !== "object" || Array.isArray(fieldSchema)
+                || fieldSchema.type !== "boolean") {
+                throw new Error(`[caretcms] Collection "${collection}" manages publication through "${field}", `
+                    + `so schemas.${collection}.properties.${field} must be a boolean field.`);
+            }
+        }
+        if (typeof config.previewPath === "string") {
+            if (!resolvePreviewPath(config, "preview")) {
+                throw new Error(`[caretcms] Collection "${collection}" has an invalid previewPath.`);
+            }
+            continue;
+        }
+        if (config.previewPath) {
+            for (const id of Object.keys(config.previewPath)) {
+                if (!resolvePreviewPath(config, id)) {
+                    throw new Error(`[caretcms] Collection "${collection}" has an invalid previewPath for "${id}".`);
+                }
+            }
+        }
+    }
+}
 function normalizeCloudOptions(input) {
     const endpoint = input.endpoint.trim().replace(/\/$/, "");
     const projectId = input.projectId.trim();
@@ -151,6 +220,7 @@ function resolveDelivery(input) {
         bake: input.bake ?? (mode === "auto" ? true : staticDelivery),
         publish: {
             webhookUrl: input.publish?.webhookUrl?.trim() || null,
+            timeoutMs: input.publish?.timeoutMs,
             method: input.publish?.method ?? "POST",
             headers: input.publish?.headers ?? {},
         },
@@ -176,9 +246,9 @@ function assertDeliveryMatchesAstroOutput(delivery, astroOutput) {
 /** Every key resolveCaretOptions reads. Anything else in the options object is
  *  a typo (`mountpath`) silently falling back to a default — name it instead. */
 const KNOWN_OPTION_KEYS = new Set([
-    "mode", "cloud", "storage", "uploads", "mountPath", "apiBasePath",
-    "enableAdmin", "enableInlineEditor", "editorHome", "schemas",
-    "allowedClasses", "delivery", "theme", "brand",
+    "mode", "cloud", "storage", "uploads", "identity", "deployment", "mountPath", "apiBasePath",
+    "enableAdmin", "enableInlineEditor", "editorHome", "schemas", "collections", "locale", "dictionary",
+    "allowedClasses", "bodyEditing", "delivery", "theme", "brand",
 ]);
 /** Unknown option keys, each with its closest known key when one is plausible. */
 function unknownOptionWarnings(options) {
@@ -200,6 +270,9 @@ function resolveCaretOptions(options) {
     if (editorHome.startsWith("//")) {
         throw new Error(`[caretcms] editorHome must be a same-origin absolute path (got ${JSON.stringify(options.editorHome)}).`);
     }
+    const collections = options.collections ?? {};
+    const schemas = options.schemas ?? {};
+    validateCollectionOptions(collections, schemas);
     return {
         mountPath: normalizeMountPath(options.mountPath, "/admin"),
         apiBasePath: normalizeMountPath(options.apiBasePath, "/api/cms"),
@@ -210,11 +283,20 @@ function resolveCaretOptions(options) {
         uploads: isProviderReference(options.uploads, "uploads")
             ? options.uploads
             : defaults.uploads,
+        identity: isProviderReference(options.identity, "identity")
+            ? options.identity
+            : null,
+        deployment: isProviderReference(options.deployment, "deployment")
+            ? options.deployment
+            : null,
         enableAdmin: options.enableAdmin ?? mode !== "cloud",
         enableInlineEditor: options.enableInlineEditor ?? mode !== "cloud",
         editorHome,
         cloud,
-        schemas: options.schemas ?? {},
+        schemas,
+        collections,
+        locale: options.locale ?? "en",
+        dictionary: resolveStudioDictionary(options.locale ?? "en", options.dictionary),
         allowedClasses: options.allowedClasses ?? {},
         bodyEditing: options.bodyEditing ?? true,
         delivery: resolveDelivery(options.delivery),
@@ -226,7 +308,8 @@ async function loadProviderReference(reference) {
     if (!reference)
         return null;
     const mod = (await import(/* @vite-ignore */ reference.entrypoint));
-    const resolvedExport = mod[reference.exportName ?? "default"] ?? mod.default;
+    const exportName = reference.exportName ?? "default";
+    const resolvedExport = mod[exportName];
     if (resolvedExport == null) {
         throw new Error(`[caretcms] Could not resolve provider export "${reference.exportName ?? "default"}" from ${reference.entrypoint}.`);
     }
@@ -239,10 +322,14 @@ function buildProviderLoader(functionName, reference) {
         return `export async function ${functionName}(){return null;}`;
     }
     const importName = `__caret_${functionName}`;
+    const exportName = reference.exportName ?? "default";
+    const exportLookup = exportName === "default"
+        ? `${importName}.default`
+        : `${importName}[${JSON.stringify(exportName)}]`;
     return [
         `import * as ${importName} from ${JSON.stringify(reference.entrypoint)};`,
         `export async function ${functionName}(){`,
-        `  const resolvedExport = ${importName}[${JSON.stringify(reference.exportName ?? "default")}] ?? ${importName}.default;`,
+        `  const resolvedExport = ${exportLookup};`,
         "  if (resolvedExport == null) {",
         `    throw new Error(${JSON.stringify(`[caretcms] Could not resolve provider export "${reference.exportName ?? "default"}" from ${reference.entrypoint}.`)});`,
         "  }",
@@ -256,6 +343,8 @@ function createRuntimeProvidersPlugin(resolved, delivery) {
     const source = [
         buildProviderLoader("loadConfiguredStorage", resolved.storage),
         buildProviderLoader("loadConfiguredUploadHandler", resolved.uploads),
+        buildProviderLoader("loadConfiguredIdentityAdapter", resolved.identity),
+        buildProviderLoader("loadConfiguredDeploymentStatus", resolved.deployment),
         `export const allowedClasses = ${JSON.stringify(resolved.allowedClasses)};`,
         `export const delivery = ${JSON.stringify(delivery)};`,
         // Surfaced for the middleware's authenticated empty-state affordance: it
@@ -281,15 +370,20 @@ function createRuntimeProvidersPlugin(resolved, delivery) {
         },
     };
 }
-function createSchemasPlugin(schemas) {
+function createSchemasPlugin(schemas, collections) {
     const hasSchemas = Object.keys(schemas).length > 0;
-    const source = hasSchemas
+    const hasCollections = Object.keys(collections).length > 0;
+    const source = hasSchemas || hasCollections
         ? [
-            `import { registerCollectionSchema } from "@caretcms/core/schema-registry";`,
+            `import { registerCollectionSchema, registerCollectionStudioConfig } from "@caretcms/core/schema-registry";`,
             `import { buildTemplate } from "@caretcms/core/schema-utils";`,
             `const schemas = ${JSON.stringify(schemas)};`,
+            `const collections = ${JSON.stringify(collections)};`,
             `for (const [collection, schema] of Object.entries(schemas)) {`,
-            `  registerCollectionSchema(collection, schema, buildTemplate(schema));`,
+            `  registerCollectionSchema(collection, schema, buildTemplate(schema), collections[collection]);`,
+            `}`,
+            `for (const [collection, metadata] of Object.entries(collections)) {`,
+            `  registerCollectionStudioConfig(collection, metadata);`,
             `}`,
             `export const registered = true;`,
         ].join("\n")
@@ -381,7 +475,7 @@ function injectMarkdownStamping(args) {
         logger.info("[caretcms] Markdown body editing enabled (Sätteri mdast plugin).");
     }
     else {
-        updateConfig({ markdown: { remarkPlugins: [caretRemarkPlugin({ contentRoot })] } });
+        updateConfig({ markdown: { remarkPlugins: [[caretRemarkPlugin({ contentRoot }), { caretStampVersion: "paragraphs-v1" }]] } });
         logger.info("[caretcms] Markdown body editing enabled (remark plugin).");
     }
 }
@@ -478,6 +572,8 @@ export function caret(options = {}) {
                             __ASTRO_CARET_MODE__: JSON.stringify(resolved.mode),
                             __ASTRO_CARET_THEME_CONFIG__: JSON.stringify(JSON.stringify(resolved.theme)),
                             __ASTRO_CARET_BRAND_CONFIG__: JSON.stringify(JSON.stringify(resolved.brand)),
+                            __ASTRO_CARET_LOCALE__: JSON.stringify(resolved.locale),
+                            __ASTRO_CARET_DICTIONARY__: JSON.stringify(JSON.stringify(resolved.dictionary)),
                             __ASTRO_CARET_DEV_PASSWORD__: JSON.stringify(devEditorPassword ?? ""),
                             // Authoritative dev signal for the auth layer: the public fallback
                             // session secret is honored only when this is true. Baked false in
@@ -487,7 +583,7 @@ export function caret(options = {}) {
                         },
                         plugins: [
                             createRuntimeProvidersPlugin(resolved, effectiveDelivery),
-                            createSchemasPlugin(resolved.schemas),
+                            createSchemasPlugin(resolved.schemas, resolved.collections),
                         ],
                     },
                 });
@@ -583,6 +679,10 @@ export function caret(options = {}) {
                     pattern: `${resolved.apiBasePath}/draft`,
                     entrypoint: new URL("./runtime/routes/draft.js", import.meta.url),
                 });
+                injectRoute({
+                    pattern: `${resolved.apiBasePath}/deployment`,
+                    entrypoint: new URL("./runtime/routes/deployment.js", import.meta.url),
+                });
                 injectRoute({
                     pattern: `${resolved.apiBasePath}/collections-metadata`,
                     entrypoint: new URL("./runtime/routes/collections-metadata.js", import.meta.url),
@@ -628,6 +728,7 @@ export function caret(options = {}) {
       if(!session||session.authenticated!==true)return;
       var l=document.createElement('link');l.rel='stylesheet';l.href='/__caret/editor.css';document.head.appendChild(l);
       window.__CARET__=${jsonForInlineScript(clientConfig)};
+      window.__CARET__.draftMode=session.draftMode===true;
       var s=document.createElement('script');s.type='module';s.src='/__caret/editor.js?v='+Date.now();document.head.appendChild(s);
     })
     .catch(function(){});