canopycms 0.0.63 → 0.0.65

package/dist/cli/init.d.ts

@@ -1,4 +1,4 @@
-import { type AuthPlugin } from '../auth/plugin';
+import { type AuthPlugin } from '../auth/plugin.js';
 export type AuthProvider = 'clerk' | 'dev';
 export interface InitOptions {
     mode: 'dev';
@@ -43,4 +43,3 @@ export declare function workerRunOnce(options: {
     authPlugin?: AuthPlugin;
 }): Promise<void>;
 export {};
-//# sourceMappingURL=init.d.ts.map

package/dist/cli/init.js

@@ -95,7 +95,12 @@ var init_field = __esm({
       collections: z.array(z.string().min(1)).min(1).optional(),
       entryTypes: z.array(z.string().min(1)).min(1).optional(),
       displayField: z.string().min(1).optional(),
-      options: z.array(referenceOptionSchema).optional()
+      options: z.array(referenceOptionSchema).optional(),
+      // Must be listed here, not just on ReferenceFieldConfig: zod strips unknown keys by
+      // default, so a consumer that adopts this schema's parse output would silently delete a
+      // runtime-consumed flag and the feature would no-op with no error. (`resolvedSchema` is
+      // absent on purpose — it is type-inference-only and stripping it changes no behavior.)
+      includeBody: z.boolean().optional()
     });
     fieldHolder = [z.never()];
     blockSchema = z.object({
@@ -205,7 +210,7 @@ var init_media = __esm({
 
 // dist/config/schemas/config.js
 import { z as z4 } from "zod";
-var defaultBranchAccessSchema, defaultPathAccessLevelSchema, defaultPathAccessLevelsSchema, defaultPathAccessSchema, defaultBaseBranchSchema, defaultRemoteNameSchema, defaultRemoteUrlSchema, gitBotAuthorNameSchema, gitBotAuthorEmailSchema, githubTokenEnvVarSchema, operatingModeSchema, deployedAsSchema, contentRootSchema, sourceRootSchema, deploymentNameSchema, devContentSyncSchema, devConfigSchema, editorConfigSchema, CanopyConfigSchema, DEFAULT_PROD_WORKSPACE;
+var defaultBranchAccessSchema, defaultPathAccessLevelSchema, defaultPathAccessLevelsSchema, defaultPathAccessSchema, defaultBaseBranchSchema, defaultRemoteNameSchema, defaultRemoteUrlSchema, gitBotAuthorNameSchema, gitBotAuthorEmailSchema, githubTokenEnvVarSchema, operatingModeSchema, deployedAsSchema, contentRootSchema, sourceRootSchema, basePathSchema, deploymentNameSchema, devContentSyncSchema, devConfigSchema, editorConfigSchema, CanopyConfigSchema, DEFAULT_PROD_WORKSPACE;
 var init_config = __esm({
   "dist/config/schemas/config.js"() {
     "use strict";
@@ -229,6 +234,9 @@ var init_config = __esm({
     deployedAsSchema = z4.enum(["static", "server"]).default("server");
     contentRootSchema = relativePathSchema.default("content");
     sourceRootSchema = z4.string().min(1).optional();
+    basePathSchema = z4.string().transform((value) => value.trim()).refine((value) => value.length > 0, {
+      message: "basePath must not be empty or only whitespace"
+    }).optional();
     deploymentNameSchema = z4.string().default("prod");
     devContentSyncSchema = z4.enum(["off", "warn"]).default("warn");
     devConfigSchema = z4.object({
@@ -291,6 +299,7 @@ var init_config = __esm({
       deploymentName: deploymentNameSchema.optional(),
       contentRoot: contentRootSchema.default("content"),
       sourceRoot: sourceRootSchema.optional(),
+      basePath: basePathSchema,
       editor: editorConfigSchema.optional(),
       authPlugin: z4.custom().optional(),
       entryLinkUrl: z4.custom().optional(),
@@ -695,6 +704,7 @@ var init_project_detect = __esm({
     };
     MAX_WORKSPACE_DEPTH = 8;
     CDK_DEPENDENCIES = [
+      "canopycms",
       "canopycms-cdk",
       "aws-cdk-lib",
       "constructs",
@@ -1107,7 +1117,7 @@ async function recoverOrphanedTasks(taskDir, maxAgeMs = 5 * 6e4, logger = nullLo
 async function cleanupOldTasks(taskDir, maxAgeMs = 30 * 24 * 60 * 6e4, logger = nullLogger) {
   const now = Date.now();
   let cleaned = 0;
-  for (const subdir of ["completed", "failed"]) {
+  for (const subdir of ["completed", "failed", "corrupt"]) {
     const dir = path6.join(taskDir, subdir);
     let files;
     try {
@@ -1576,6 +1586,13 @@ function configImportPath(appDir, subdirs) {
   const totalDepth = appDepth + subdirs;
   return "../".repeat(totalDepth) + "canopycms.config";
 }
+async function firstExistingPath(projectDir, candidates) {
+  for (const candidate of candidates) {
+    if (await filePathExists(path7.join(projectDir, candidate)))
+      return candidate;
+  }
+  return null;
+}
 async function init(options) {
   const { projectDir, mode, appDir, ai, force, nonInteractive } = options;
   const writeOpts = { force, nonInteractive };
@@ -1630,15 +1647,35 @@ async function init(options) {
     await writeFile(path7.join(projectDir, appDir, "ai/config.ts"), await aiConfig2(), writeOpts);
     await writeFile(path7.join(projectDir, appDir, `ai/[...path]/${serverRouteExt}`), await aiRoute2({ configImport: configImportPath(appDir, 2) }), writeOpts);
   }
-  await writeFile(path7.join(projectDir, "next.config.ts"), await nextConfig2({ staticBuild }), writeOpts);
-  await writeFile(path7.join(projectDir, "middleware.ts"), await middleware2({ authProvider }), writeOpts);
+  const existingJsConfig = await firstExistingPath(projectDir, [
+    "next.config.js",
+    "next.config.mjs"
+  ]);
+  if (existingJsConfig) {
+    p.note([
+      `Found ${existingJsConfig}, which Next loads in preference to next.config.ts.`,
+      "Left it untouched rather than writing a second config Next would ignore.",
+      "",
+      "Wrap your existing config by hand:",
+      "",
+      "  import { withCanopy } from 'canopycms-next/config'",
+      "  export default withCanopy(yourConfig)"
+    ].join("\n"), "Manual step");
+  } else {
+    await writeFile(path7.join(projectDir, "next.config.ts"), await nextConfig2({ staticBuild }), writeOpts);
+  }
+  await writeFile(path7.join(projectDir, path7.dirname(appDir), "middleware.ts"), await middleware2({ authProvider }), writeOpts);
   const gitignorePath = path7.join(projectDir, ".gitignore");
+  const CANOPY_GITIGNORE_BLOCK = "# CanopyCMS\n.canopy-dev/\n";
   if (await filePathExists(gitignorePath)) {
     const content = await fs6.readFile(gitignorePath, "utf-8");
     if (!content.includes(".canopy-dev")) {
-      await fs6.appendFile(gitignorePath, "\n# CanopyCMS\n.canopy-dev/\n");
+      await fs6.appendFile(gitignorePath, `
+${CANOPY_GITIGNORE_BLOCK}`);
       p.log.success("updated: .gitignore");
     }
+  } else {
+    await writeFile(gitignorePath, CANOPY_GITIGNORE_BLOCK, writeOpts);
   }
   const packages = authProvider === "clerk" ? "canopycms canopycms-next canopycms-auth-clerk canopycms-auth-dev" : "canopycms canopycms-next canopycms-auth-dev";
   p.note([

package/dist/cli/migrate.d.ts

@@ -36,12 +36,14 @@ export declare class MigrateError extends Error {
 /**
  * Normalize a file/directory base name into a slug the whole CMS accepts.
  * Must satisfy parseSlug (/^[a-z0-9][a-z0-9-]*$/) — underscores are NOT allowed:
- * the editor would save them but the public read path (readByUrlPath/read)
- * rejects them, leaving migrated pages unreachable.
+ * the public read path (readByUrlPath/read) rejects them, so a migrated page
+ * carrying one is unreachable and now fails the production build outright
+ * (static/index.ts's assertRoutableSlugs). Migration writes files directly
+ * rather than through the write API, so its [SLUG] create guard does not cover
+ * this — normalizing here is what keeps the migrated tree buildable.
  */
 export declare function slugifyName(name: string): string;
 /** Run the migrate command. Returns the number of operations applied. */
 export declare function migrate(options: MigrateOptions): Promise<{
     opCount: number;
 }>;
-//# sourceMappingURL=migrate.d.ts.map

package/dist/cli/migrate.js

@@ -36,8 +36,11 @@ export class MigrateError extends Error {
 /**
  * Normalize a file/directory base name into a slug the whole CMS accepts.
  * Must satisfy parseSlug (/^[a-z0-9][a-z0-9-]*$/) — underscores are NOT allowed:
- * the editor would save them but the public read path (readByUrlPath/read)
- * rejects them, leaving migrated pages unreachable.
+ * the public read path (readByUrlPath/read) rejects them, so a migrated page
+ * carrying one is unreachable and now fails the production build outright
+ * (static/index.ts's assertRoutableSlugs). Migration writes files directly
+ * rather than through the write API, so its [SLUG] create guard does not cover
+ * this — normalizing here is what keeps the migrated tree buildable.
  */
 export function slugifyName(name) {
     const slug = name
@@ -286,4 +289,3 @@ export async function migrate(options) {
     p.outro('Done!');
     return { opCount: ops.length };
 }
-//# sourceMappingURL=migrate.js.map

package/dist/cli/project-detect.d.ts

@@ -76,8 +76,12 @@ export declare function readPackageJson(projectDir: string): Promise<PackageJson
  * `cdk.json` runs `node --import tsx infrastructure/bin/app.ts`, which imports
  * `canopycms-cdk` / `aws-cdk-lib` / `constructs`; CI resolves `cdk` itself
  * through `npx`, but pinning it is what makes a deploy reproducible.
+ * `canopycms` is included too: `canopycms-cdk`'s worker re-export
+ * (`canopycms/worker/cms-worker`) is a `peerDependency` of `canopycms-cdk`,
+ * not a transitive dependency, so an adopter's manifest can otherwise satisfy
+ * every other entry here and still fail with `ERR_MODULE_NOT_FOUND`.
  */
-export declare const CDK_DEPENDENCIES: readonly ["canopycms-cdk", "aws-cdk-lib", "constructs", "tsx", "aws-cdk"];
+export declare const CDK_DEPENDENCIES: readonly ["canopycms", "canopycms-cdk", "aws-cdk-lib", "constructs", "tsx", "aws-cdk"];
 /**
  * Which of {@link CDK_DEPENDENCIES} are missing from the adopter's manifest.
  *
@@ -86,4 +90,3 @@ export declare const CDK_DEPENDENCIES: readonly ["canopycms-cdk", "aws-cdk-lib",
  */
 export declare function missingCdkDependencies(projectDir: string): Promise<string[]>;
 export {};
-//# sourceMappingURL=project-detect.d.ts.map

package/dist/cli/project-detect.js

@@ -211,8 +211,13 @@ export async function readPackageJson(projectDir) {
  * `cdk.json` runs `node --import tsx infrastructure/bin/app.ts`, which imports
  * `canopycms-cdk` / `aws-cdk-lib` / `constructs`; CI resolves `cdk` itself
  * through `npx`, but pinning it is what makes a deploy reproducible.
+ * `canopycms` is included too: `canopycms-cdk`'s worker re-export
+ * (`canopycms/worker/cms-worker`) is a `peerDependency` of `canopycms-cdk`,
+ * not a transitive dependency, so an adopter's manifest can otherwise satisfy
+ * every other entry here and still fail with `ERR_MODULE_NOT_FOUND`.
  */
 export const CDK_DEPENDENCIES = [
+    'canopycms',
     'canopycms-cdk',
     'aws-cdk-lib',
     'constructs',
@@ -237,4 +242,3 @@ export async function missingCdkDependencies(projectDir) {
     }
     return CDK_DEPENDENCIES.filter((name) => !declared.has(name));
 }
-//# sourceMappingURL=project-detect.js.map

package/dist/cli/project-root.d.ts

@@ -14,4 +14,3 @@ export declare const PROJECT_MARKER = "canopycms.config.ts";
  * Returns null when no project root is found.
  */
 export declare function findProjectRoot(startDir: string): Promise<string | null>;
-//# sourceMappingURL=project-root.d.ts.map

package/dist/cli/project-root.js

@@ -26,4 +26,3 @@ export async function findProjectRoot(startDir) {
         dir = parent;
     }
 }
-//# sourceMappingURL=project-root.js.map

package/dist/cli/sync.d.ts

@@ -38,4 +38,3 @@ export declare function sync(options: SyncOptions): Promise<{
     pushed: number;
     pulled: number;
 }>;
-//# sourceMappingURL=sync.d.ts.map

package/dist/cli/sync.js

@@ -486,4 +486,3 @@ export async function sync(options) {
     p.outro('Done!');
     return { pushed, pulled };
 }
-//# sourceMappingURL=sync.js.map

package/dist/cli/template-files/Dockerfile.cms.template

@@ -1,4 +1,10 @@
-FROM public.ecr.aws/docker/library/node:20-slim AS builder
+# Node 22. Node 20 reached upstream EOL on 2026-04-30, so it receives no
+# further security patches -- and the CMS Lambda runs this image.
+#
+# NOTE: the published canopycms packages declare `engines.node: ">=18"`,
+# so this is not an installability floor -- it is the runtime CanopyCMS is
+# actually built and tested on (.nvmrc is v22, as is the transform Lambda).
+FROM public.ecr.aws/docker/library/node:22-slim AS builder
 WORKDIR /app
 {{DOCKER_COPY}}
 # If your app uses `file:` dependencies (e.g. vendored tarballs under vendor/),
@@ -53,7 +59,7 @@ ARG NEXT_PUBLIC_CANOPY_MODE=dev
 ENV NEXT_PUBLIC_CANOPY_MODE=$NEXT_PUBLIC_CANOPY_MODE
 RUN {{DOCKER_BUILD}}
 
-FROM public.ecr.aws/docker/library/node:20-slim AS runner
+FROM public.ecr.aws/docker/library/node:22-slim AS runner
 # Git is required by CanopyCMS for branch operations
 RUN apt-get update && apt-get install -y git && rm -rf /var/lib/apt/lists/*
 # The runtime user's uid differs from the uid that owns EFS workspace files

package/dist/cli/template-files/cms-stack.ts.template

@@ -107,13 +107,35 @@ export class CmsStack extends Stack {
       reservedConcurrency: 10,
     })
 
-    // Media support (uploads, on-demand image transforms). Uncomment to give
-    // the deployed editor an asset backend, pass `assetBucket:
-    // assetSupport.bucket` to CanopyCmsService above, and wire
-    // `assetSupport.cloudFrontBehaviors` into the distribution below. See the
-    // assets section of docs/deploying-to-aws.md.
+    // Media support (uploads, on-demand image transforms). To enable it:
     //
-    // const assetSupport = new AssetSupport(this, 'Assets', {})
+    //   1. add `AssetSupport` to the `canopycms-cdk` import at the top;
+    //   2. uncomment the block below, moving it ABOVE `cmsService` (it has to
+    //      exist before you can pass its bucket);
+    //   3. pass `assetBucket: assetSupport.bucket` to CanopyCmsService;
+    //   4. pass the behaviors to CanopyCmsDistribution, `/assets/t/*` FIRST
+    //      (CloudFront matches in order, so the general pattern would
+    //      otherwise swallow the transform one):
+    //
+    //        additionalBehaviors: {
+    //          '/assets/t/*': assetSupport.assetBehaviors().assetsTransform,
+    //          '/assets/*': assetSupport.assetBehaviors().assets,
+    //        },
+    //
+    // `editorOrigins` is REQUIRED: it is the S3 CORS allowlist for the
+    // editor's presigned uploads, so it must list the origin the editor is
+    // served from. Include http://localhost:3000 only if you upload from a
+    // local dev editor against this bucket.
+    //
+    // Run `pnpm --filter canopycms-cdk run build:lambda` before deploying --
+    // the transform Lambda needs its native sharp binary, and the construct
+    // refuses to synth without it.
+    //
+    // See the assets section of docs/deploying-to-aws.md.
+    //
+    // const assetSupport = new AssetSupport(this, 'Assets', {
+    //   editorOrigins: [`https://${props.domainName}`],
+    // })
 
     // CloudFront + Route53, only when a domain is configured. Skipping this
     // leaves `cmsService.functionUrl` as the entry point, which is enough to
@@ -124,6 +146,11 @@ export class CmsStack extends Stack {
         functionUrl: cmsService.functionUrl,
         domainName: props.domainName,
         hostedZoneDomain: props.hostedZoneDomain,
+        // Keep CloudFront's origin read timeout equal to the Lambda's own.
+        // Both default to 60s, so this line changes nothing today -- it is
+        // here so that raising `timeout` above cannot silently leave
+        // CloudFront answering 504 at the edge on requests that succeed.
+        originReadTimeout: cmsService.timeout,
       })
     }
   }

package/dist/cli/template-files/deploy-cms.yml.template

@@ -37,12 +37,17 @@
 #      update-function-code pipeline needed -- `cdk deploy` mutates
 #      infrastructure.
 #   3. Install the CDK dependencies the app entry point needs:
-#      `{{ADD_DEV}} canopycms-cdk aws-cdk-lib constructs tsx aws-cdk`
+#      `{{ADD_DEV}} canopycms canopycms-cdk aws-cdk-lib constructs tsx aws-cdk`
 #   4. Set these repository secrets (Settings -> Secrets and variables ->
-#      Actions -> Secrets). Every one of them is read by `required()` in
-#      infrastructure/bin/app.ts, so a missing value fails the deploy at synth:
+#      Actions -> Secrets). All but AWS_DEPLOY_ROLE_ARN are read by `required()`
+#      in infrastructure/bin/app.ts, so a missing value fails the deploy at
+#      synth; a missing role ARN fails earlier, at the AWS credentials step:
 #        AWS_DEPLOY_ROLE_ARN            OIDC role ARN from step 2
-#        GITHUB_TOKEN_SECRET_ARN        FULL Secrets Manager ARN (with suffix)
+#        CANOPY_GITHUB_TOKEN_SECRET_ARN  FULL Secrets Manager ARN (with suffix)
+#          NOTE: the CANOPY_ prefix is required, not cosmetic. GitHub rejects any
+#          Actions secret whose name starts with GITHUB_ (a reserved prefix), so
+#          the otherwise-obvious GITHUB_TOKEN_SECRET_ARN cannot be created at all.
+#          The env var handed to CDK below keeps the unprefixed name.
 #        CLERK_SECRET_KEY_SECRET_ARN    FULL Secrets Manager ARN (with suffix)
 #        CLERK_JWT_KEY                  Clerk's public JWKS PEM
 #   5. Set these repository variables (same page -> Variables):
@@ -64,6 +69,14 @@ on:
       - 'src/**'
       - 'content/**'
       - 'canopycms.config.ts'
+      # The Next config is what `init-deploy aws` itself tells you to edit for
+      # the dual build, and `public/**` is copied into the runner image (and is
+      # load-bearing for editor/public preview parity). Omitting them meant an
+      # edit shipped days later, piggybacked on an unrelated content change --
+      # so any breakage was attributed to the wrong commit.
+      - 'next.config.*'
+      - 'middleware.ts'
+      - 'public/**'
       - 'Dockerfile.cms'
       - 'infrastructure/**'
       - 'cdk.json'
@@ -89,19 +102,21 @@ jobs:
       contents: read
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
 
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
         with:
-          node-version: 20
+          node-version: 22
 
       - name: Install dependencies
         run: {{CI_INSTALL}}
 
       # cdk.json runs `node --import tsx infrastructure/bin/app.ts`, which
-      # imports canopycms-cdk, aws-cdk-lib and constructs. Missing any of them
-      # otherwise surfaces as an ERR_MODULE_NOT_FOUND buried in `cdk deploy`
-      # output, several minutes in.
+      # imports canopycms-cdk, aws-cdk-lib and constructs -- and canopycms-cdk
+      # itself peer-depends on canopycms (its worker re-export), so that one is
+      # checked too even though the app entry point never imports it directly.
+      # Missing any of them otherwise surfaces as an ERR_MODULE_NOT_FOUND
+      # buried in `cdk deploy` output, several minutes in.
       #
       # aws-cdk is checked too even though nothing imports it: it is the CLI
       # the Deploy step invokes as `npx cdk`. Absent from node_modules, npx
@@ -112,17 +127,17 @@ jobs:
       - name: Check CDK dependencies are installed
         run: |
           missing=""
-          for pkg in tsx aws-cdk-lib constructs canopycms-cdk aws-cdk; do
+          for pkg in tsx aws-cdk-lib constructs canopycms canopycms-cdk aws-cdk; do
             [ -e "node_modules/$pkg" ] || missing="$missing $pkg"
           done
           if [ -n "$missing" ]; then
             echo "::error::Missing CDK dependencies:$missing"
-            echo "::error::Install them with: {{ADD_DEV}} canopycms-cdk aws-cdk-lib constructs tsx aws-cdk"
+            echo "::error::Install them with: {{ADD_DEV}} canopycms canopycms-cdk aws-cdk-lib constructs tsx aws-cdk"
             exit 1
           fi
 
       - name: Configure AWS credentials
-        uses: aws-actions/configure-aws-credentials@v4
+        uses: aws-actions/configure-aws-credentials@7474bc4690e29a8392af63c5b98e7449536d5c3a # v4
         with:
           role-to-assume: ${{ secrets.AWS_DEPLOY_ROLE_ARN }}
           aws-region: ${{ vars.AWS_REGION }}
@@ -136,7 +151,7 @@ jobs:
       # in one place and not the other fails the deploy at synth.
       - name: Deploy
         env:
-          GITHUB_TOKEN_SECRET_ARN: ${{ secrets.GITHUB_TOKEN_SECRET_ARN }}
+          GITHUB_TOKEN_SECRET_ARN: ${{ secrets.CANOPY_GITHUB_TOKEN_SECRET_ARN }}
           CLERK_SECRET_KEY_SECRET_ARN: ${{ secrets.CLERK_SECRET_KEY_SECRET_ARN }}
           CLERK_JWT_KEY: ${{ secrets.CLERK_JWT_KEY }}
           NEXT_PUBLIC_CLERK_PUBLISHABLE_KEY: ${{ vars.NEXT_PUBLIC_CLERK_PUBLISHABLE_KEY }}

package/dist/cli/templates.d.ts

@@ -55,4 +55,3 @@ export declare function cdkApp(options: {
     githubRepo: string;
 }): Promise<string>;
 export declare function cmsStack(): Promise<string>;
-//# sourceMappingURL=templates.d.ts.map

package/dist/cli/templates.js

@@ -121,4 +121,3 @@ export async function cdkApp(options) {
 export async function cmsStack() {
     return readTemplate('cms-stack.ts.template');
 }
-//# sourceMappingURL=templates.js.map

package/dist/client.d.ts

@@ -1,14 +1,13 @@
-export type { CanopyClientConfig } from './config';
-export type { CustomFieldRenderers, CustomFieldRenderProps } from './editor/FormRenderer';
-export * from './editor/EditorPanes';
-export * from './editor/EntryNavigator';
-export * from './editor/Editor';
-export * from './editor/preview-bridge';
-export * from './editor/canopy-path';
-export * from './editor/theme';
-export * from './editor/editor-config';
-export * from './editor/CanopyEditor';
-export * from './editor/CanopyEditorPage';
-export { EntryLinkContext, useEntryLinkContext } from './editor/fields/entry-link';
-export type { EntryLinkOption, EntryLinkContextValue } from './editor/fields/entry-link';
-//# sourceMappingURL=client.d.ts.map
+export type { CanopyClientConfig } from './config/index.js';
+export type { CustomFieldRenderers, CustomFieldRenderProps } from './editor/FormRenderer.js';
+export * from './editor/EditorPanes.js';
+export * from './editor/EntryNavigator.js';
+export * from './editor/Editor.js';
+export * from './editor/preview-bridge.js';
+export * from './editor/canopy-path.js';
+export * from './editor/theme.js';
+export * from './editor/editor-config.js';
+export * from './editor/CanopyEditor.js';
+export * from './editor/CanopyEditorPage.js';
+export { EntryLinkContext, useEntryLinkContext } from './editor/fields/entry-link/index.js';
+export type { EntryLinkOption, EntryLinkContextValue } from './editor/fields/entry-link/index.js';

package/dist/client.js

@@ -9,4 +9,3 @@ export * from './editor/editor-config.js';
 export * from './editor/CanopyEditor.js';
 export * from './editor/CanopyEditorPage.js';
 export { EntryLinkContext, useEntryLinkContext } from './editor/fields/entry-link/index.js';
-//# sourceMappingURL=client.js.map

package/dist/comment-store.d.ts

@@ -121,4 +121,3 @@ export declare class CommentStore {
      */
     getBranchThreads(): Promise<CommentThread[]>;
 }
-//# sourceMappingURL=comment-store.d.ts.map

package/dist/comment-store.js

@@ -210,4 +210,3 @@ export class CommentStore {
             .sort((a, b) => a.createdAt.localeCompare(b.createdAt));
     }
 }
-//# sourceMappingURL=comment-store.js.map

package/dist/config/flatten.d.ts

@@ -1,7 +1,7 @@
 /**
  * Schema flattening utilities for O(1) lookups.
  */
-import type { FlatSchemaItem, RootCollectionConfig } from './types';
+import type { FlatSchemaItem, RootCollectionConfig } from './types.js';
 /**
  * Normalize a path value by splitting, filtering empty segments, and rejoining.
  */
@@ -21,4 +21,3 @@ export declare const normalizePathValue: (val: string) => string;
  * const item = map.get('content/posts') // O(1) lookup
  */
 export declare const flattenSchema: (root: RootCollectionConfig, basePath?: string) => FlatSchemaItem[];
-//# sourceMappingURL=flatten.d.ts.map

package/dist/config/flatten.js

@@ -122,4 +122,3 @@ export const flattenSchema = (root, basePath = '') => {
     }
     return flat;
 };
-//# sourceMappingURL=flatten.js.map

package/dist/config/helpers.d.ts

@@ -1,7 +1,7 @@
 /**
  * Helper functions for authoring CanopyCMS configuration files.
  */
-import type { CanopyConfig, CanopyConfigFragment, CanopyConfigInput, CanopyClientConfig, ClientOnlyFields } from './types';
+import type { CanopyConfig, CanopyConfigFragment, CanopyConfigInput, CanopyClientConfig, ClientOnlyFields } from './types.js';
 export type CanopyConfigAuthoring = CanopyConfigInput;
 /**
  * Helper for authoring typed config files (canopycms.config.ts).
@@ -51,11 +51,10 @@ export declare function defineCanopyConfig(config: CanopyConfigInput | CanopyCon
  *
  * // canopycms.config.ts
  * import { composeCanopyConfig } from 'canopycms'
- * import { postsConfig } from './posts.config'
- * import { pagesConfig } from './pages.config'
+ * import { postsConfig } from './posts.config.js'
+ * import { pagesConfig } from './pages.config.js'
  *
  * export const config = composeCanopyConfig(postsConfig, pagesConfig)
  * ```
  */
 export declare const composeCanopyConfig: (...fragments: CanopyConfigFragment[]) => CanopyConfig;
-//# sourceMappingURL=helpers.d.ts.map

package/dist/config/helpers.js

@@ -34,7 +34,7 @@ export function defineCanopyConfig(config) {
         // Client config helper - extracts safe subset and merges overrides
         // Note: flatSchema is loaded dynamically by the editor via API (from .collection.json files)
         client: (clientOverrides) => {
-            const { defaultBaseBranch, defaultActiveBranch, contentRoot, editor, mode, entryLinkUrl, media, } = validated;
+            const { defaultBaseBranch, defaultActiveBranch, contentRoot, editor, mode, entryLinkUrl, media, basePath, } = validated;
             const clientConfig = {
                 defaultBaseBranch,
                 defaultActiveBranch,
@@ -43,6 +43,7 @@ export function defineCanopyConfig(config) {
                 mode,
                 entryLinkUrl,
                 assetBaseUrl: media?.publicBaseUrl,
+                basePath,
                 flatSchema: [], // Loaded dynamically by editor via API
             };
             // Merge client overrides (e.g., auth handlers from useClerkAuthConfig)
@@ -111,4 +112,3 @@ export const composeCanopyConfig = (...fragments) => {
         // "mode: Required"-style error rather than silently falling back to dev semantics.
     });
 };
-//# sourceMappingURL=helpers.js.map

package/dist/config/index.d.ts

@@ -8,14 +8,13 @@
  * import { defineCanopyConfig, type FieldConfig } from 'canopycms/config'
  * ```
  */
-export type { PrimitiveFieldType, FieldType, ContentFormat, MediaAdapterKind, PermissionLevel, PermissionTarget, PathPermission, SelectOption, ReferenceOption, FieldConfig, BlockConfig, BlockFieldConfig, SelectFieldConfig, ReferenceFieldConfig, ImageFieldConfig, ImageFieldValue, ObjectFieldConfig, InlineGroupFieldConfig, CustomFieldConfig, EntrySchema, BranchSchema, EntryTypeConfig, CollectionConfig, RootCollectionConfig, MediaConfig, CanopyEditorConfig, DefaultBranchAccess, DefaultPathAccess, DefaultPathAccessLevel, DefaultPathAccessLevels, DefaultBaseBranch, DefaultRemoteName, DefaultRemoteUrl, GitBotAuthorName, GitBotAuthorEmail, GithubTokenEnvVar, CanopyOperatingMode, ContentRoot, SourceRoot, CanopyConfig, CanopyConfigInput, CanopyConfigFragment, FlatSchemaItem, CanopyClientConfig, ClientOnlyFields, EntryValidationIssue, ValidateEntryInput, ValidateEntryHook, } from './types';
-export { primitiveFieldTypes, fieldTypes } from './types';
-export { CanopyConfigSchema, getConfigDefaults, DEFAULT_PROD_WORKSPACE } from './schemas/config';
-export { fieldSchema, blockSchema, selectOptionSchema, referenceOptionSchema, imageFieldSchema, } from './schemas/field';
-export { collectionSchema, entryTypeSchema, relativePathSchema } from './schemas/collection';
-export { permissionTargetSchema, pathPermissionSchema } from './schemas/permissions';
-export { mediaSchema } from './schemas/media';
-export { flattenSchema, normalizePathValue } from './flatten';
-export { validateCanopyConfig, ensureSelectFieldsHaveOptions } from './validation';
-export { defineCanopyConfig, composeCanopyConfig, type CanopyConfigAuthoring } from './helpers';
-//# sourceMappingURL=index.d.ts.map
+export type { PrimitiveFieldType, FieldType, ContentFormat, MediaAdapterKind, PermissionLevel, PermissionTarget, PathPermission, SelectOption, ReferenceOption, FieldConfig, BlockConfig, BlockFieldConfig, SelectFieldConfig, ReferenceFieldConfig, ImageFieldConfig, ImageFieldValue, ObjectFieldConfig, InlineGroupFieldConfig, CustomFieldConfig, EntrySchema, BranchSchema, EntryTypeConfig, CollectionConfig, RootCollectionConfig, MediaConfig, CanopyEditorConfig, DefaultBranchAccess, DefaultPathAccess, DefaultPathAccessLevel, DefaultPathAccessLevels, DefaultBaseBranch, DefaultRemoteName, DefaultRemoteUrl, GitBotAuthorName, GitBotAuthorEmail, GithubTokenEnvVar, CanopyOperatingMode, ContentRoot, SourceRoot, CanopyConfig, CanopyConfigInput, CanopyConfigFragment, FlatSchemaItem, CanopyClientConfig, ClientOnlyFields, EntryValidationIssue, ValidateEntryInput, ValidateEntryHook, } from './types.js';
+export { primitiveFieldTypes, fieldTypes } from './types.js';
+export { CanopyConfigSchema, getConfigDefaults, DEFAULT_PROD_WORKSPACE } from './schemas/config.js';
+export { fieldSchema, blockSchema, selectOptionSchema, referenceOptionSchema, imageFieldSchema, } from './schemas/field.js';
+export { collectionSchema, entryTypeSchema, relativePathSchema } from './schemas/collection.js';
+export { permissionTargetSchema, pathPermissionSchema } from './schemas/permissions.js';
+export { mediaSchema } from './schemas/media.js';
+export { flattenSchema, normalizePathValue } from './flatten.js';
+export { validateCanopyConfig, ensureSelectFieldsHaveOptions } from './validation.js';
+export { defineCanopyConfig, composeCanopyConfig, type CanopyConfigAuthoring } from './helpers.js';

package/dist/config/index.js

@@ -20,4 +20,3 @@ export { mediaSchema } from './schemas/media.js';
 export { flattenSchema, normalizePathValue } from './flatten.js';
 export { validateCanopyConfig, ensureSelectFieldsHaveOptions } from './validation.js';
 export { defineCanopyConfig, composeCanopyConfig } from './helpers.js';
-//# sourceMappingURL=index.js.map

package/dist/config/schemas/collection.d.ts

@@ -38,4 +38,3 @@ export declare const entryTypeSchema: z.ZodObject<{
 }>;
 declare const collectionSchema: z.ZodTypeAny;
 export { collectionSchema };
-//# sourceMappingURL=collection.d.ts.map

package/dist/config/schemas/collection.js

@@ -48,4 +48,3 @@ const collectionSchema = z.lazy(() => z
     message: 'Collection must have entries or collections',
 }));
 export { collectionSchema };
-//# sourceMappingURL=collection.js.map

package/dist/config/schemas/config.d.ts

@@ -2,9 +2,9 @@
  * Main CanopyConfig Zod schema - composes all sub-schemas.
  */
 import { z } from 'zod';
-import type { AuthPlugin } from '../../auth/plugin';
-import type { EntryLinkUrlResolver } from '../../entry-link-resolver';
-import type { ValidateEntryHook } from '../types';
+import type { AuthPlugin } from '../../auth/plugin.js';
+import type { EntryLinkUrlResolver } from '../../entry-link-resolver.js';
+import type { ValidateEntryHook } from '../types.js';
 export declare const defaultBranchAccessSchema: z.ZodDefault<z.ZodEnum<["allow", "deny"]>>;
 export declare const defaultPathAccessLevelSchema: z.ZodEnum<["allow", "deny"]>;
 export declare const defaultPathAccessLevelsSchema: z.ZodObject<{
@@ -43,6 +43,7 @@ export declare const operatingModeSchema: z.ZodEnum<["prod", "dev"]>;
 export declare const deployedAsSchema: z.ZodDefault<z.ZodEnum<["static", "server"]>>;
 export declare const contentRootSchema: z.ZodDefault<z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>, string, string>>;
 export declare const sourceRootSchema: z.ZodOptional<z.ZodString>;
+export declare const basePathSchema: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>>;
 export declare const deploymentNameSchema: z.ZodDefault<z.ZodString>;
 export declare const devContentSyncSchema: z.ZodDefault<z.ZodEnum<["off", "warn"]>>;
 export declare const devConfigSchema: z.ZodObject<{
@@ -147,6 +148,7 @@ export declare const CanopyConfigSchema: z.ZodObject<{
     deploymentName: z.ZodOptional<z.ZodDefault<z.ZodString>>;
     contentRoot: z.ZodDefault<z.ZodDefault<z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>, string, string>>>;
     sourceRoot: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+    basePath: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>>;
     editor: z.ZodOptional<z.ZodObject<{
         title: z.ZodOptional<z.ZodString>;
         subtitle: z.ZodOptional<z.ZodString>;
@@ -221,6 +223,7 @@ export declare const CanopyConfigSchema: z.ZodObject<{
     autoCreateSettingsPR?: boolean | undefined;
     deploymentName?: string | undefined;
     sourceRoot?: string | undefined;
+    basePath?: string | undefined;
     editor?: {
         title?: string | undefined;
         subtitle?: string | undefined;
@@ -272,6 +275,7 @@ export declare const CanopyConfigSchema: z.ZodObject<{
     deploymentName?: string | undefined;
     contentRoot?: string | undefined;
     sourceRoot?: string | undefined;
+    basePath?: string | undefined;
     editor?: {
         title?: string | undefined;
         subtitle?: string | undefined;
@@ -313,4 +317,3 @@ export declare const getConfigDefaults: () => {
     githubTokenEnvVar: string;
     prodWorkspace: string;
 };
-//# sourceMappingURL=config.d.ts.map