canopycms 0.0.67-int.90 → 0.0.67

package/dist/comment-store.js

@@ -3,39 +3,31 @@ import path from 'node:path';
 import { randomUUID } from 'node:crypto';
 import { withLock } from './utils/async-mutex.js';
 import { writeOccJsonFile, withOccRetry, withOccFileLock, OccWriteConflictError, } from './utils/occ-json-write.js';
-/**
- * Error thrown when a concurrent modification is detected.
- * Operations that encounter this error will automatically retry.
- */
-export class CommentStoreConflictError extends Error {
+/** A concurrent modification that survived every OCC retry. */
+class CommentStoreConflictError extends Error {
     constructor() {
         super('Concurrent modification detected');
         this.name = 'CommentStoreConflictError';
     }
 }
 /**
- * Manages comment storage for a branch workspace.
- * Comments are stored in .canopy-meta/comments.json and are NOT committed to git.
+ * Comment storage for a branch workspace, in .canopy-meta/comments.json and
+ * never committed to git.
  *
- * Mutators are protected by three layers, outermost to innermost:
+ * Mutators run under three layers, outermost to innermost:
  *
- * 1. {@link withLock} - an in-process FIFO mutex keyed by the resolved file
- *    path. Serializes concurrent mutators on the SAME process/host
- *    deterministically, so racing `resolveThread`/`deleteThread`/`addComment`
- *    calls against the same store (or two store instances pointed at the
- *    same branch) never race each other's load-modify-write cycle.
- * 2. {@link withOccFileLock} - a server-enforced, cross-process/cross-host
- *    lock (proper-lockfile, mkdir-based). This is the actual fix for lost
- *    comments across two warm Lambda containers on EFS, where rename-based
- *    OCC verification alone is unreliable (see guarantee doc on
- *    `utils/occ-json-write.ts`).
- * 3. {@link withOccRetry} around {@link writeOccJsonFile} - version/writeId
- *    based optimistic concurrency control. With layers 1-2 in place this is
- *    now a defense-in-depth backstop only (e.g. a stale process from a
- *    rolling deploy writing without the lock), not the primary safety
- *    mechanism.
+ * 1. {@link withLock} — an in-process FIFO mutex keyed by the resolved file
+ *    path, so mutators racing on one host cannot interleave their
+ *    load-modify-write cycles, whether they share a store instance or not.
+ * 2. {@link withOccFileLock} — a server-enforced, cross-process/cross-host lock
+ *    (proper-lockfile, mkdir-based). This is what actually prevents lost
+ *    comments across two warm Lambda containers on EFS, where rename-based OCC
+ *    verification alone is unreliable.
+ * 3. {@link withOccRetry} around {@link writeOccJsonFile} — version/writeId
+ *    optimistic concurrency. With layers 1-2 in place it is defense in depth
+ *    only, for a writer that skips the lock (a stale process mid-deploy).
  *
- * See `utils/occ-json-write.ts` for full guarantee documentation of layers 2-3.
+ * Guarantees for layers 2-3: `utils/occ-json-write.ts`.
  */
 export class CommentStore {
     constructor(branchRoot, options) {
@@ -44,19 +36,15 @@ export class CommentStore {
         this.filePath = path.join(path.resolve(branchRoot), '.canopy-meta', 'comments.json');
         this.settleMs = options?.settleMs;
     }
-    /**
-     * Load comments file for read-only access.
-     */
+    /** Read-only load. */
     async load() {
         const { data } = await this.loadWithVersion();
         return data;
     }
     /**
-     * Load comments file along with the version observed at load time. Used by
-     * mutators, which need the version as a LOCAL value threaded through their
-     * load-modify-write cycle rather than shared mutable instance state (so
-     * concurrent mutate cycles on the same instance never clobber each other's
-     * expected version).
+     * Load, with the version observed at load time. Mutators thread that version
+     * through their load-modify-write cycle as a LOCAL value, never as instance
+     * state, so concurrent cycles cannot clobber each other's expected version.
      */
     async loadWithVersion() {
         try {
@@ -79,15 +67,15 @@ export class CommentStore {
         }
     }
     /**
-     * Write comments file via the shared OCC helper.
+     * Write comments.json via the shared OCC helper.
      *
-     * Throws the helper's raw {@link OccWriteConflictError} so the surrounding
-     * {@link withOccRetry} in withMutation() recognizes and retries it;
-     * translation to the public `CommentStoreConflictError` contract happens at
-     * the withMutation() boundary, after retries are exhausted.
+     * Throws the helper's raw {@link OccWriteConflictError}, which is what the
+     * surrounding {@link withOccRetry} in withMutation() recognizes and retries;
+     * translation to the public `CommentStoreConflictError` happens at the
+     * withMutation() boundary, once retries are exhausted.
      *
-     * Note: comment-store historically wrote without a trailing newline;
-     * `writeOccJsonFile`'s default (`trailingNewline: false`) preserves that.
+     * comments.json is written without a trailing newline (`writeOccJsonFile`'s
+     * default), unlike branch.json.
      */
     async writeData(data, expectedVersion) {
         await writeOccJsonFile(this.filePath, { ...data }, {
@@ -97,8 +85,8 @@ export class CommentStore {
     }
     /**
      * Run a mutate cycle (load -> modify -> write) under the full lock +
-     * OCC-retry stack described in the class doc comment. A conflict that
-     * survives every retry surfaces as the public `CommentStoreConflictError`.
+     * OCC-retry stack (class doc). A conflict surviving every retry surfaces as
+     * `CommentStoreConflictError`.
      */
     async withMutation(operation) {
         try {
@@ -128,7 +116,6 @@ export class CommentStore {
                 text: options.text,
             };
             if (!data.threads[threadId]) {
-                // Create new thread
                 data.threads[threadId] = {
                     id: threadId,
                     comments: [comment],
@@ -141,7 +128,6 @@ export class CommentStore {
                 };
             }
             else {
-                // Add to existing thread
                 data.threads[threadId].comments.push(comment);
             }
             await this.writeData(data, version);
@@ -182,27 +168,21 @@ export class CommentStore {
             return true;
         });
     }
-    /**
-     * Get all threads for a specific field
-     */
+    /** Threads on one field. */
     async getThreadsForField(entryPath, canopyPath) {
         const data = await this.load();
         return Object.values(data.threads)
             .filter((t) => t.type === 'field' && t.entryPath === entryPath && t.canopyPath === canopyPath)
             .sort((a, b) => a.createdAt.localeCompare(b.createdAt));
     }
-    /**
-     * Get all threads for a specific entry (not field-specific)
-     */
+    /** Threads on one entry, excluding its field threads. */
     async getThreadsForEntry(entryPath) {
         const data = await this.load();
         return Object.values(data.threads)
             .filter((t) => t.type === 'entry' && t.entryPath === entryPath)
             .sort((a, b) => a.createdAt.localeCompare(b.createdAt));
     }
-    /**
-     * Get all branch-level threads
-     */
+    /** Branch-level threads. */
     async getBranchThreads() {
         const data = await this.load();
         return Object.values(data.threads)

package/dist/config/flatten.d.ts

@@ -2,9 +2,6 @@
  * Schema flattening utilities for O(1) lookups.
  */
 import type { FlatSchemaItem, RootCollectionConfig } from './types.js';
-/**
- * Normalize a path value by splitting, filtering empty segments, and rejoining.
- */
 export declare const normalizePathValue: (val: string) => string;
 /**
  * Flatten the root collection schema into a flat array for O(1) lookups.

package/dist/config/flatten.js

@@ -4,9 +4,6 @@
 import { join, normalize } from 'pathe';
 import { createLogicalPath } from '../paths/normalize.js';
 import { ROOT_COLLECTION_ID } from '../paths/types.js';
-/**
- * Normalize a path value by splitting, filtering empty segments, and rejoining.
- */
 export const normalizePathValue = (val) => normalize(val).split('/').filter(Boolean).join('/');
 /**
  * Flatten the root collection schema into a flat array for O(1) lookups.
@@ -37,7 +34,6 @@ export const flattenSchema = (root, basePath = '') => {
             logicalPath = normalizedPath;
         }
         const normalizedFull = normalizePathValue(logicalPath);
-        // Add the collection itself
         flat.push({
             type: 'collection',
             logicalPath: createLogicalPath(normalizedFull),
@@ -50,7 +46,6 @@ export const flattenSchema = (root, basePath = '') => {
             collections: collection.collections,
             order: collection.order,
         });
-        // Add entry types in this collection
         if (collection.entries) {
             for (const entryType of collection.entries) {
                 // Entry type path is collection path + entry type name
@@ -70,15 +65,14 @@ export const flattenSchema = (root, basePath = '') => {
                 });
             }
         }
-        // Recursively process nested collections
         if (collection.collections) {
             for (const child of collection.collections) {
                 walkCollection(child, normalizedFull);
             }
         }
     };
-    // Add the root collection itself as a normal collection (if we have a base path)
-    // This makes content root behave exactly like any other collection, just without a parent
+    // The root collection is pushed here so content root behaves exactly like any other
+    // collection, just without a parent.
     if (base) {
         flat.push({
             type: 'collection',
@@ -92,11 +86,8 @@ export const flattenSchema = (root, basePath = '') => {
             order: root.order,
         });
     }
-    // Add root-level entry types
-    // Now their parentPath will reference the root collection we just added above
     if (root.entries) {
         for (const entryType of root.entries) {
-            // Root entry type path is base + entry type name
             const entryTypePath = base ? join(base, entryType.name) : entryType.name;
             flat.push({
                 type: 'entry-type',
@@ -113,7 +104,6 @@ export const flattenSchema = (root, basePath = '') => {
             });
         }
     }
-    // Process root-level collections
     // Pass base as parentPath so they are children of the content root collection
     if (root.collections) {
         for (const collection of root.collections) {

package/dist/config/helpers.js

@@ -32,9 +32,9 @@ export function defineCanopyConfig(config) {
         // Full server config - all fields including sensitive data
         server: validated,
         // Client config helper - extracts safe subset and merges overrides
-        // Note: flatSchema is loaded dynamically by the editor via API (from .collection.json files)
         client: (clientOverrides) => {
             const { defaultBaseBranch, defaultActiveBranch, contentRoot, editor, mode, entryLinkUrl, media, basePath, } = validated;
+            // flatSchema is loaded dynamically by the editor via API (from .collection.json files)
             const clientConfig = {
                 defaultBaseBranch,
                 defaultActiveBranch,
@@ -44,7 +44,7 @@ export function defineCanopyConfig(config) {
                 entryLinkUrl,
                 assetBaseUrl: media?.publicBaseUrl,
                 basePath,
-                flatSchema: [], // Loaded dynamically by editor via API
+                flatSchema: [],
             };
             // Merge client overrides (e.g., auth handlers from useClerkAuthConfig)
             if (clientOverrides?.editor) {

package/dist/config/index.d.ts

@@ -5,10 +5,10 @@
  *
  * @example
  * ```ts
- * import { defineCanopyConfig, type FieldConfig } from 'canopycms/config'
+ * import { defineCanopyConfig, type FieldConfig } from 'canopycms'
  * ```
  */
-export type { PrimitiveFieldType, FieldType, ContentFormat, MediaAdapterKind, PermissionLevel, PermissionTarget, PathPermission, SelectOption, ReferenceOption, FieldConfig, BlockConfig, BlockFieldConfig, SelectFieldConfig, ReferenceFieldConfig, ImageFieldConfig, ImageFieldValue, ObjectFieldConfig, InlineGroupFieldConfig, CustomFieldConfig, EntrySchema, BranchSchema, EntryTypeConfig, CollectionConfig, RootCollectionConfig, MediaConfig, CanopyEditorConfig, DefaultBranchAccess, DefaultPathAccess, DefaultPathAccessLevel, DefaultPathAccessLevels, DefaultBaseBranch, DefaultRemoteName, DefaultRemoteUrl, GitBotAuthorName, GitBotAuthorEmail, GithubTokenEnvVar, CanopyOperatingMode, ContentRoot, SourceRoot, CanopyConfig, CanopyConfigInput, CanopyConfigFragment, FlatSchemaItem, CanopyClientConfig, ClientOnlyFields, EntryValidationIssue, ValidateEntryInput, ValidateEntryHook, } from './types.js';
+export type { PrimitiveFieldType, FieldType, ContentFormat, MediaAdapterKind, PermissionLevel, PermissionTarget, PathPermission, SelectOption, ReferenceOption, FieldConfig, BlockConfig, BlockFieldConfig, SelectFieldConfig, ReferenceFieldConfig, ImageFieldConfig, ImageFieldValue, ObjectFieldConfig, InlineGroupFieldConfig, CustomFieldConfig, EntrySchema, BranchSchema, EntryTypeConfig, CollectionConfig, RootCollectionConfig, MediaConfig, CanopyEditorConfig, DefaultBranchAccess, DefaultPathAccess, DefaultPathAccessLevel, DefaultPathAccessLevels, DefaultBaseBranch, DefaultRemoteName, DefaultRemoteUrl, GitBotAuthorName, GitBotAuthorEmail, GithubTokenEnvVar, CanopyOperatingMode, ContentRoot, SourceRoot, CanopyConfig, CanopyConfigInput, CanopyConfigFragment, FlatSchemaItem, CanopyClientConfig, ClientOnlyFields, EditorSignInProps, EntryValidationIssue, ValidateEntryInput, ValidateEntryHook, } from './types.js';
 export { primitiveFieldTypes, fieldTypes } from './types.js';
 export { CanopyConfigSchema, getConfigDefaults, DEFAULT_PROD_WORKSPACE } from './schemas/config.js';
 export { fieldSchema, blockSchema, selectOptionSchema, referenceOptionSchema, imageFieldSchema, } from './schemas/field.js';

package/dist/config/index.js

@@ -5,18 +5,15 @@
  *
  * @example
  * ```ts
- * import { defineCanopyConfig, type FieldConfig } from 'canopycms/config'
+ * import { defineCanopyConfig, type FieldConfig } from 'canopycms'
  * ```
  */
-// Re-export type constants
 export { primitiveFieldTypes, fieldTypes } from './types.js';
-// Re-export schemas (for advanced use cases)
 export { CanopyConfigSchema, getConfigDefaults, DEFAULT_PROD_WORKSPACE } from './schemas/config.js';
 export { fieldSchema, blockSchema, selectOptionSchema, referenceOptionSchema, imageFieldSchema, } from './schemas/field.js';
 export { collectionSchema, entryTypeSchema, relativePathSchema } from './schemas/collection.js';
 export { permissionTargetSchema, pathPermissionSchema } from './schemas/permissions.js';
 export { mediaSchema } from './schemas/media.js';
-// Re-export utilities
 export { flattenSchema, normalizePathValue } from './flatten.js';
 export { validateCanopyConfig, ensureSelectFieldsHaveOptions } from './validation.js';
 export { defineCanopyConfig, composeCanopyConfig } from './helpers.js';

package/dist/config/schemas/collection.d.ts

@@ -3,14 +3,6 @@
  */
 import { z } from 'zod';
 export declare const relativePathSchema: z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>, string, string>;
-/**
- * Entry type schema: defines a type of content within a collection.
- * Each type has its own schema (fields) and can have cardinality constraints.
- *
- * Examples:
- * - { name: 'post', format: 'mdx', schema: postSchema } - unlimited posts
- * - { name: 'settings', format: 'json', schema: settingsSchema, maxItems: 1 } - restricted to one instance
- */
 export declare const entryTypeSchema: z.ZodObject<{
     name: z.ZodString;
     format: z.ZodEnum<["md", "mdx", "json", "yaml"]>;

package/dist/config/schemas/collection.js

@@ -4,7 +4,6 @@
 import { z } from 'zod';
 import { isAbsolute } from 'pathe';
 import { fieldSchema } from './field.js';
-// Relative path schema - validates and normalizes paths
 export const relativePathSchema = z
     .string()
     .min(1)
@@ -16,14 +15,6 @@ export const relativePathSchema = z
     .split(/[\\/]+/)
     .filter(Boolean)
     .join('/'));
-/**
- * Entry type schema: defines a type of content within a collection.
- * Each type has its own schema (fields) and can have cardinality constraints.
- *
- * Examples:
- * - { name: 'post', format: 'mdx', schema: postSchema } - unlimited posts
- * - { name: 'settings', format: 'json', schema: settingsSchema, maxItems: 1 } - restricted to one instance
- */
 export const entryTypeSchema = z.object({
     name: z.string().min(1),
     format: z.enum(['md', 'mdx', 'json', 'yaml']),
@@ -33,7 +24,6 @@ export const entryTypeSchema = z.object({
     default: z.boolean().optional(),
     maxItems: z.number().int().positive().optional(),
 });
-// Recursive collection schema
 const collectionSchema = z.lazy(() => z
     .object({
     name: z.string().min(1),

package/dist/config/schemas/config.d.ts

@@ -4,80 +4,7 @@
 import { z } from 'zod';
 import type { AuthPlugin } from '../../auth/plugin.js';
 import type { EntryLinkUrlResolver } from '../../entry-link-resolver.js';
-import type { ValidateEntryHook } from '../types.js';
-export declare const defaultBranchAccessSchema: z.ZodDefault<z.ZodEnum<["allow", "deny"]>>;
-export declare const defaultPathAccessLevelSchema: z.ZodEnum<["allow", "deny"]>;
-export declare const defaultPathAccessLevelsSchema: z.ZodObject<{
-    read: z.ZodOptional<z.ZodEnum<["allow", "deny"]>>;
-    edit: z.ZodOptional<z.ZodEnum<["allow", "deny"]>>;
-    review: z.ZodOptional<z.ZodEnum<["allow", "deny"]>>;
-}, "strict", z.ZodTypeAny, {
-    read?: "allow" | "deny" | undefined;
-    edit?: "allow" | "deny" | undefined;
-    review?: "allow" | "deny" | undefined;
-}, {
-    read?: "allow" | "deny" | undefined;
-    edit?: "allow" | "deny" | undefined;
-    review?: "allow" | "deny" | undefined;
-}>;
-export declare const defaultPathAccessSchema: z.ZodDefault<z.ZodUnion<[z.ZodEnum<["allow", "deny"]>, z.ZodObject<{
-    read: z.ZodOptional<z.ZodEnum<["allow", "deny"]>>;
-    edit: z.ZodOptional<z.ZodEnum<["allow", "deny"]>>;
-    review: z.ZodOptional<z.ZodEnum<["allow", "deny"]>>;
-}, "strict", z.ZodTypeAny, {
-    read?: "allow" | "deny" | undefined;
-    edit?: "allow" | "deny" | undefined;
-    review?: "allow" | "deny" | undefined;
-}, {
-    read?: "allow" | "deny" | undefined;
-    edit?: "allow" | "deny" | undefined;
-    review?: "allow" | "deny" | undefined;
-}>]>>;
-export declare const defaultBaseBranchSchema: z.ZodDefault<z.ZodString>;
-export declare const defaultRemoteNameSchema: z.ZodDefault<z.ZodString>;
-export declare const defaultRemoteUrlSchema: z.ZodString;
-export declare const gitBotAuthorNameSchema: z.ZodString;
-export declare const gitBotAuthorEmailSchema: z.ZodString;
-export declare const githubTokenEnvVarSchema: z.ZodDefault<z.ZodString>;
-export declare const operatingModeSchema: z.ZodEnum<["prod", "dev"]>;
-export declare const deployedAsSchema: z.ZodDefault<z.ZodEnum<["static", "server"]>>;
-export declare const contentRootSchema: z.ZodDefault<z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>, string, string>>;
-export declare const sourceRootSchema: z.ZodOptional<z.ZodString>;
-export declare const basePathSchema: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>>;
-export declare const deploymentNameSchema: z.ZodDefault<z.ZodString>;
-export declare const devContentSyncSchema: z.ZodDefault<z.ZodEnum<["off", "warn"]>>;
-export declare const devConfigSchema: z.ZodObject<{
-    contentSync: z.ZodOptional<z.ZodDefault<z.ZodEnum<["off", "warn"]>>>;
-}, "strip", z.ZodTypeAny, {
-    contentSync?: "off" | "warn" | undefined;
-}, {
-    contentSync?: "off" | "warn" | undefined;
-}>;
-export declare const editorConfigSchema: z.ZodObject<{
-    title: z.ZodOptional<z.ZodString>;
-    subtitle: z.ZodOptional<z.ZodString>;
-    theme: z.ZodOptional<z.ZodUnknown>;
-    previewBase: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
-    onAccountClick: z.ZodOptional<z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodVoid>>;
-    onLogoutClick: z.ZodOptional<z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodVoid>>;
-    AccountComponent: z.ZodOptional<z.ZodType<import("react").ComponentType<{}>, z.ZodTypeDef, import("react").ComponentType<{}>>>;
-}, "strip", z.ZodTypeAny, {
-    title?: string | undefined;
-    subtitle?: string | undefined;
-    theme?: unknown;
-    previewBase?: Record<string, string> | undefined;
-    onAccountClick?: ((...args: unknown[]) => void) | undefined;
-    onLogoutClick?: ((...args: unknown[]) => void) | undefined;
-    AccountComponent?: import("react").ComponentType<{}> | undefined;
-}, {
-    title?: string | undefined;
-    subtitle?: string | undefined;
-    theme?: unknown;
-    previewBase?: Record<string, string> | undefined;
-    onAccountClick?: ((...args: unknown[]) => void) | undefined;
-    onLogoutClick?: ((...args: unknown[]) => void) | undefined;
-    AccountComponent?: import("react").ComponentType<{}> | undefined;
-}>;
+import type { EditorSignInProps, ValidateEntryHook } from '../types.js';
 export declare const CanopyConfigSchema: z.ZodObject<{
     media: z.ZodOptional<z.ZodDiscriminatedUnion<"adapter", [z.ZodObject<{
         adapter: z.ZodLiteral<"local">;
@@ -160,6 +87,7 @@ export declare const CanopyConfigSchema: z.ZodObject<{
         onAccountClick: z.ZodOptional<z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodVoid>>;
         onLogoutClick: z.ZodOptional<z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodVoid>>;
         AccountComponent: z.ZodOptional<z.ZodType<import("react").ComponentType<{}>, z.ZodTypeDef, import("react").ComponentType<{}>>>;
+        SignInComponent: z.ZodOptional<z.ZodType<import("react").ComponentType<EditorSignInProps>, z.ZodTypeDef, import("react").ComponentType<EditorSignInProps>>>;
     }, "strip", z.ZodTypeAny, {
         title?: string | undefined;
         subtitle?: string | undefined;
@@ -168,6 +96,7 @@ export declare const CanopyConfigSchema: z.ZodObject<{
         onAccountClick?: ((...args: unknown[]) => void) | undefined;
         onLogoutClick?: ((...args: unknown[]) => void) | undefined;
         AccountComponent?: import("react").ComponentType<{}> | undefined;
+        SignInComponent?: import("react").ComponentType<EditorSignInProps> | undefined;
     }, {
         title?: string | undefined;
         subtitle?: string | undefined;
@@ -176,6 +105,7 @@ export declare const CanopyConfigSchema: z.ZodObject<{
         onAccountClick?: ((...args: unknown[]) => void) | undefined;
         onLogoutClick?: ((...args: unknown[]) => void) | undefined;
         AccountComponent?: import("react").ComponentType<{}> | undefined;
+        SignInComponent?: import("react").ComponentType<EditorSignInProps> | undefined;
     }>>;
     authPlugin: z.ZodOptional<z.ZodType<AuthPlugin, z.ZodTypeDef, AuthPlugin>>;
     entryLinkUrl: z.ZodOptional<z.ZodType<EntryLinkUrlResolver, z.ZodTypeDef, EntryLinkUrlResolver>>;
@@ -236,6 +166,7 @@ export declare const CanopyConfigSchema: z.ZodObject<{
         onAccountClick?: ((...args: unknown[]) => void) | undefined;
         onLogoutClick?: ((...args: unknown[]) => void) | undefined;
         AccountComponent?: import("react").ComponentType<{}> | undefined;
+        SignInComponent?: import("react").ComponentType<EditorSignInProps> | undefined;
     } | undefined;
     authPlugin?: AuthPlugin | undefined;
     entryLinkUrl?: EntryLinkUrlResolver | undefined;
@@ -289,15 +220,12 @@ export declare const CanopyConfigSchema: z.ZodObject<{
         onAccountClick?: ((...args: unknown[]) => void) | undefined;
         onLogoutClick?: ((...args: unknown[]) => void) | undefined;
         AccountComponent?: import("react").ComponentType<{}> | undefined;
+        SignInComponent?: import("react").ComponentType<EditorSignInProps> | undefined;
     } | undefined;
     authPlugin?: AuthPlugin | undefined;
     entryLinkUrl?: EntryLinkUrlResolver | undefined;
     validateEntry?: ValidateEntryHook | undefined;
 }>;
-/**
- * Helper to get schema default values.
- * This centralizes default value extraction from Zod schemas.
- */
 /**
  * Default workspace path for prod mode (used when CANOPYCMS_WORKSPACE_ROOT is not set).
  *

package/dist/config/schemas/config.js

@@ -4,51 +4,49 @@
 import { z } from 'zod';
 import { relativePathSchema } from './collection.js';
 import { mediaSchema } from './media.js';
-// Default value schemas
-export const defaultBranchAccessSchema = z.enum(['allow', 'deny']).default('deny');
-export const defaultPathAccessLevelSchema = z.enum(['allow', 'deny']);
+const defaultBranchAccessSchema = z.enum(['allow', 'deny']).default('deny');
+const defaultPathAccessLevelSchema = z.enum(['allow', 'deny']);
 // Per-level object form: an omitted level stays undefined after parse (no per-field
 // defaults here) so the runtime resolver (resolveDefaultPathAccess) can fail closed to
 // 'deny' for any level the config author didn't explicitly scope.
-export const defaultPathAccessLevelsSchema = z
+const defaultPathAccessLevelsSchema = z
     .object({
     read: defaultPathAccessLevelSchema.optional(),
     edit: defaultPathAccessLevelSchema.optional(),
     review: defaultPathAccessLevelSchema.optional(),
 })
     .strict();
-export const defaultPathAccessSchema = z
+const defaultPathAccessSchema = z
     .union([defaultPathAccessLevelSchema, defaultPathAccessLevelsSchema])
     .default('deny');
-export const defaultBaseBranchSchema = z.string().default('main');
-export const defaultRemoteNameSchema = z.string().default('origin');
-export const defaultRemoteUrlSchema = z.string().min(1);
-export const gitBotAuthorNameSchema = z.string().min(1);
-export const gitBotAuthorEmailSchema = z.string().email();
-export const githubTokenEnvVarSchema = z.string().default('GITHUB_BOT_TOKEN');
-export const operatingModeSchema = z.enum(['prod', 'dev']);
-export const deployedAsSchema = z.enum(['static', 'server']).default('server');
-export const contentRootSchema = relativePathSchema.default('content');
-export const sourceRootSchema = z.string().min(1).optional();
+const defaultBaseBranchSchema = z.string().default('main');
+const defaultRemoteNameSchema = z.string().default('origin');
+const defaultRemoteUrlSchema = z.string().min(1);
+const gitBotAuthorNameSchema = z.string().min(1);
+const gitBotAuthorEmailSchema = z.string().email();
+const githubTokenEnvVarSchema = z.string().default('GITHUB_BOT_TOKEN');
+const operatingModeSchema = z.enum(['prod', 'dev']);
+const deployedAsSchema = z.enum(['static', 'server']).default('server');
+const contentRootSchema = relativePathSchema.default('content');
+const sourceRootSchema = z.string().min(1).optional();
 // Lenient on shape (leading/trailing slashes, absolute-URL prefixes) -- `joinUrlPrefix`
 // normalizes all of that at every use site. Only reject a value that is nothing but
 // whitespace, since that can never be a meaningful deployment prefix and most likely
 // indicates a copy-paste/templating mistake in the adopter's config.
-export const basePathSchema = z
+const basePathSchema = z
     .string()
     .transform((value) => value.trim())
     .refine((value) => value.length > 0, {
     message: 'basePath must not be empty or only whitespace',
 })
     .optional();
-export const deploymentNameSchema = z.string().default('prod');
-export const devContentSyncSchema = z.enum(['off', 'warn']).default('warn');
+const deploymentNameSchema = z.string().default('prod');
+const devContentSyncSchema = z.enum(['off', 'warn']).default('warn');
 // Dev-mode-only behavior. Ignored when mode !== 'dev'.
-export const devConfigSchema = z.object({
+const devConfigSchema = z.object({
     contentSync: devContentSyncSchema.optional(),
 });
-// Editor configuration schema
-export const editorConfigSchema = z.object({
+const editorConfigSchema = z.object({
     title: z.string().optional(),
     subtitle: z.string().optional(),
     theme: z.unknown().optional(),
@@ -58,19 +56,18 @@ export const editorConfigSchema = z.object({
     onLogoutClick: z.function().returns(z.void()).optional(),
     // Optional: custom account component (e.g., Clerk's UserButton)
     AccountComponent: z.custom().optional(),
+    // Optional: provider sign-in UI for signed-out users (see EditorSignInProps)
+    SignInComponent: z.custom().optional(),
 });
-// Main CanopyConfig schema.
 export const CanopyConfigSchema = z
     .object({
     media: mediaSchema.optional(),
-    // No outer .optional() here: defaultBranchAccessSchema/defaultPathAccessSchema already
-    // have .default('deny'), so the field is optional on input but always resolves to
-    // 'allow'/'deny' (never undefined) on output. An outer .optional() would short-circuit
-    // before the inner default runs, defeating the fail-closed default (SCH-M1).
-    // defaultPathAccessSchema's union keeps the same rule: the .default('deny') sits on the
-    // OUTER union, not inside defaultPathAccessLevelsSchema, so an omitted top-level field
-    // still resolves to 'deny' and an omitted level inside the object form stays undefined
-    // (resolved to 'deny' at read time by resolveDefaultPathAccess).
+    // No outer .optional(): both schemas already .default('deny'), so the field is optional on
+    // input but always resolves to 'allow'/'deny' (never undefined) on output — an outer
+    // .optional() would short-circuit before the inner default runs, defeating the fail-closed
+    // default (SCH-M1). defaultPathAccessSchema's .default('deny') sits on the OUTER union, not
+    // inside defaultPathAccessLevelsSchema, so an omitted level in the object form stays
+    // undefined (resolved to 'deny' at read time by resolveDefaultPathAccess).
     defaultBranchAccess: defaultBranchAccessSchema,
     defaultPathAccess: defaultPathAccessSchema,
     // .optional() deliberately defeats defaultBaseBranchSchema's .default('main'):
@@ -93,16 +90,11 @@ export const CanopyConfigSchema = z
     allowNetworkRemoteInProd: z.boolean().optional(),
     settingsBranch: z.string().optional(),
     autoCreateSettingsPR: z.boolean().optional(),
-    // Deliberately `deploymentNameSchema.optional()`, NOT `deploymentNameSchema` alone.
-    // deploymentNameSchema.default('prod') would make `parse(undefined)` resolve to
-    // the literal 'prod' instead of staying `undefined` — collapsing the
-    // env > config > modeDefault precedence chain that resolveDeploymentName
-    // (operating-mode/deployment-name.ts) implements: config would then always
-    // "win" over modeDefault (masking dev's real default of 'local'), and the env
-    // var would just be racing config's baked-in 'prod' instead of a true absence.
-    // `.optional()` here is what keeps an omitted deploymentName reaching
-    // resolveDeploymentName as `undefined`, so it can fall through to modeDefault.
-    // Do not "fix" this by removing `.optional()`.
+    // `.optional()`, NOT bare `deploymentNameSchema`: its own `.default('prod')` would make
+    // `parse(undefined)` resolve to 'prod' instead of staying `undefined`, collapsing the
+    // env > config > modeDefault precedence chain `resolveDeploymentName`
+    // (operating-mode/deployment-name.ts) implements — config would always "win" over
+    // modeDefault, masking dev's real default of 'local'. Do not remove `.optional()`.
     deploymentName: deploymentNameSchema.optional(),
     contentRoot: contentRootSchema.default('content'),
     sourceRoot: sourceRootSchema.optional(),
@@ -114,10 +106,6 @@ export const CanopyConfigSchema = z
     dev: devConfigSchema.optional(),
 })
     .strict();
-/**
- * Helper to get schema default values.
- * This centralizes default value extraction from Zod schemas.
- */
 /**
  * Default workspace path for prod mode (used when CANOPYCMS_WORKSPACE_ROOT is not set).
  *
@@ -132,16 +120,12 @@ export const DEFAULT_PROD_WORKSPACE = '/mnt/efs/workspace';
 // Note: `mode` has no default by design (SEC-C1) and is intentionally omitted here —
 // operatingModeSchema.parse(undefined) would throw.
 //
-// `deploymentName` is ALSO deliberately omitted here (checked every caller,
-// 2026-07-30: only packages/canopycms/src/services.ts reads from this return
-// value, and only `.remoteName`; nothing ever read `.deploymentName`). Unlike
-// the defaults below, deploymentName's real default is mode-dependent — 'prod'
-// for ProdStrategy, 'local' for DevStrategy (see
-// operating-mode/client-unsafe-strategy.ts's getSettingsBranchName, which
-// resolves it via resolveDeploymentName) — and this accessor has no mode to
-// select between them. Emitting `deploymentNameSchema.parse(undefined)`
-// ('prod') here would silently lie for dev mode; better to have no caller of
-// this than a mode-blind one.
+// `deploymentName` is ALSO omitted: no caller reads `.deploymentName` off this return value
+// (only `services.ts` reads `.remoteName`), and its real default is mode-dependent — 'prod' for
+// ProdStrategy, 'local' for DevStrategy (see resolveDeploymentName, used by
+// operating-mode/client-unsafe-strategy.ts's getSettingsBranchName) — so this accessor has no
+// mode to pick between them. Emitting `deploymentNameSchema.parse(undefined)` ('prod') here
+// would silently lie for dev mode.
 export const getConfigDefaults = () => ({
     baseBranch: defaultBaseBranchSchema.parse(undefined),
     remoteName: defaultRemoteNameSchema.parse(undefined),