canopycms 0.0.67 → 0.0.68-int.100

package/dist/config/schemas/config.d.ts

@@ -8,46 +8,37 @@ import type { EditorSignInProps, ValidateEntryHook } from '../types.js';
 export declare const CanopyConfigSchema: z.ZodObject<{
     media: z.ZodOptional<z.ZodDiscriminatedUnion<"adapter", [z.ZodObject<{
         adapter: z.ZodLiteral<"local">;
-        publicBaseUrl: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
         directory: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>, string, string>>;
     }, "strict", z.ZodTypeAny, {
         adapter: "local";
-        publicBaseUrl?: string | undefined;
         directory?: string | undefined;
     }, {
         adapter: "local";
-        publicBaseUrl?: string | undefined;
         directory?: string | undefined;
     }>, z.ZodObject<{
         adapter: z.ZodLiteral<"s3">;
         bucket: z.ZodString;
         region: z.ZodString;
-        publicBaseUrl: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
         uploadUrl: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
         maxUploadBytes: z.ZodOptional<z.ZodNumber>;
     }, "strict", z.ZodTypeAny, {
         adapter: "s3";
         bucket: string;
         region: string;
-        publicBaseUrl?: string | undefined;
         uploadUrl?: string | undefined;
         maxUploadBytes?: number | undefined;
     }, {
         adapter: "s3";
         bucket: string;
         region: string;
-        publicBaseUrl?: string | undefined;
         uploadUrl?: string | undefined;
         maxUploadBytes?: number | undefined;
     }>, z.ZodObject<{
         adapter: z.ZodLiteral<"lfs">;
-        publicBaseUrl: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
     }, "strict", z.ZodTypeAny, {
         adapter: "lfs";
-        publicBaseUrl?: string | undefined;
     }, {
         adapter: "lfs";
-        publicBaseUrl?: string | undefined;
     }>]>>;
     defaultBranchAccess: z.ZodDefault<z.ZodEnum<["allow", "deny"]>>;
     defaultPathAccess: z.ZodDefault<z.ZodUnion<[z.ZodEnum<["allow", "deny"]>, z.ZodObject<{
@@ -69,12 +60,13 @@ export declare const CanopyConfigSchema: z.ZodObject<{
     defaultRemoteUrl: z.ZodOptional<z.ZodString>;
     gitBotAuthorName: z.ZodString;
     gitBotAuthorEmail: z.ZodString;
+    gitEditedByTrailers: z.ZodOptional<z.ZodBoolean>;
+    gitCoAuthoredByTrailers: z.ZodOptional<z.ZodBoolean>;
     githubTokenEnvVar: z.ZodOptional<z.ZodDefault<z.ZodString>>;
     mode: z.ZodEnum<["prod", "dev"]>;
     deployedAs: z.ZodDefault<z.ZodEnum<["static", "server"]>>;
     allowNetworkRemoteInProd: z.ZodOptional<z.ZodBoolean>;
     settingsBranch: z.ZodOptional<z.ZodString>;
-    autoCreateSettingsPR: z.ZodOptional<z.ZodBoolean>;
     deploymentName: z.ZodOptional<z.ZodDefault<z.ZodString>>;
     contentRoot: z.ZodDefault<z.ZodDefault<z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>, string, string>>>;
     sourceRoot: z.ZodOptional<z.ZodOptional<z.ZodString>>;
@@ -83,7 +75,8 @@ export declare const CanopyConfigSchema: z.ZodObject<{
         title: z.ZodOptional<z.ZodString>;
         subtitle: z.ZodOptional<z.ZodString>;
         theme: z.ZodOptional<z.ZodUnknown>;
-        previewBase: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        previewBase: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<[z.ZodString, z.ZodLiteral<false>]>>>;
+        previewPrefix: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
         onAccountClick: z.ZodOptional<z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodVoid>>;
         onLogoutClick: z.ZodOptional<z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodVoid>>;
         AccountComponent: z.ZodOptional<z.ZodType<import("react").ComponentType<{}>, z.ZodTypeDef, import("react").ComponentType<{}>>>;
@@ -92,7 +85,8 @@ export declare const CanopyConfigSchema: z.ZodObject<{
         title?: string | undefined;
         subtitle?: string | undefined;
         theme?: unknown;
-        previewBase?: Record<string, string> | undefined;
+        previewBase?: Record<string, string | false> | undefined;
+        previewPrefix?: string | undefined;
         onAccountClick?: ((...args: unknown[]) => void) | undefined;
         onLogoutClick?: ((...args: unknown[]) => void) | undefined;
         AccountComponent?: import("react").ComponentType<{}> | undefined;
@@ -101,7 +95,8 @@ export declare const CanopyConfigSchema: z.ZodObject<{
         title?: string | undefined;
         subtitle?: string | undefined;
         theme?: unknown;
-        previewBase?: Record<string, string> | undefined;
+        previewBase?: Record<string, string | false> | undefined;
+        previewPrefix?: string | undefined;
         onAccountClick?: ((...args: unknown[]) => void) | undefined;
         onLogoutClick?: ((...args: unknown[]) => void) | undefined;
         AccountComponent?: import("react").ComponentType<{}> | undefined;
@@ -135,26 +130,24 @@ export declare const CanopyConfigSchema: z.ZodObject<{
     settingsBranch?: string | undefined;
     media?: {
         adapter: "local";
-        publicBaseUrl?: string | undefined;
         directory?: string | undefined;
     } | {
         adapter: "s3";
         bucket: string;
         region: string;
-        publicBaseUrl?: string | undefined;
         uploadUrl?: string | undefined;
         maxUploadBytes?: number | undefined;
     } | {
         adapter: "lfs";
-        publicBaseUrl?: string | undefined;
     } | undefined;
     defaultBaseBranch?: string | undefined;
     defaultActiveBranch?: string | undefined;
     defaultRemoteName?: string | undefined;
     defaultRemoteUrl?: string | undefined;
+    gitEditedByTrailers?: boolean | undefined;
+    gitCoAuthoredByTrailers?: boolean | undefined;
     githubTokenEnvVar?: string | undefined;
     allowNetworkRemoteInProd?: boolean | undefined;
-    autoCreateSettingsPR?: boolean | undefined;
     deploymentName?: string | undefined;
     sourceRoot?: string | undefined;
     basePath?: string | undefined;
@@ -162,7 +155,8 @@ export declare const CanopyConfigSchema: z.ZodObject<{
         title?: string | undefined;
         subtitle?: string | undefined;
         theme?: unknown;
-        previewBase?: Record<string, string> | undefined;
+        previewBase?: Record<string, string | false> | undefined;
+        previewPrefix?: string | undefined;
         onAccountClick?: ((...args: unknown[]) => void) | undefined;
         onLogoutClick?: ((...args: unknown[]) => void) | undefined;
         AccountComponent?: import("react").ComponentType<{}> | undefined;
@@ -181,18 +175,15 @@ export declare const CanopyConfigSchema: z.ZodObject<{
     settingsBranch?: string | undefined;
     media?: {
         adapter: "local";
-        publicBaseUrl?: string | undefined;
         directory?: string | undefined;
     } | {
         adapter: "s3";
         bucket: string;
         region: string;
-        publicBaseUrl?: string | undefined;
         uploadUrl?: string | undefined;
         maxUploadBytes?: number | undefined;
     } | {
         adapter: "lfs";
-        publicBaseUrl?: string | undefined;
     } | undefined;
     defaultBranchAccess?: "allow" | "deny" | undefined;
     defaultPathAccess?: "allow" | "deny" | {
@@ -204,10 +195,11 @@ export declare const CanopyConfigSchema: z.ZodObject<{
     defaultActiveBranch?: string | undefined;
     defaultRemoteName?: string | undefined;
     defaultRemoteUrl?: string | undefined;
+    gitEditedByTrailers?: boolean | undefined;
+    gitCoAuthoredByTrailers?: boolean | undefined;
     githubTokenEnvVar?: string | undefined;
     deployedAs?: "static" | "server" | undefined;
     allowNetworkRemoteInProd?: boolean | undefined;
-    autoCreateSettingsPR?: boolean | undefined;
     deploymentName?: string | undefined;
     contentRoot?: string | undefined;
     sourceRoot?: string | undefined;
@@ -216,7 +208,8 @@ export declare const CanopyConfigSchema: z.ZodObject<{
         title?: string | undefined;
         subtitle?: string | undefined;
         theme?: unknown;
-        previewBase?: Record<string, string> | undefined;
+        previewBase?: Record<string, string | false> | undefined;
+        previewPrefix?: string | undefined;
         onAccountClick?: ((...args: unknown[]) => void) | undefined;
         onLogoutClick?: ((...args: unknown[]) => void) | undefined;
         AccountComponent?: import("react").ComponentType<{}> | undefined;
@@ -227,16 +220,10 @@ export declare const CanopyConfigSchema: z.ZodObject<{
     validateEntry?: ValidateEntryHook | undefined;
 }>;
 /**
- * Default workspace path for prod mode (used when CANOPYCMS_WORKSPACE_ROOT is not set).
- *
- * WARNING: this fallback assumes a worker-style ROOT mount of EFS at /mnt/efs.
- * The CanopyCmsService Lambda mounts EFS THROUGH an access point already rooted
- * at /workspace and therefore sets CANOPYCMS_WORKSPACE_ROOT=/mnt/efs explicitly;
- * if that env were ever unset on the Lambda this default would resolve to
- * /mnt/efs/workspace = EFS:/workspace/workspace (a wrong, nested dir). The CDK
- * always sets the env, so this only bites a hand-rolled misconfiguration.
+ * Default workspace path for prod mode (used when CANOPYCMS_WORKSPACE_ROOT is not set): where
+ * CanopyCmsService mounts the EFS `/workspace` access point in both the Lambda and the worker.
  */
-export declare const DEFAULT_PROD_WORKSPACE = "/mnt/efs/workspace";
+export declare const DEFAULT_PROD_WORKSPACE = "/mnt/efs";
 export declare const getConfigDefaults: () => {
     baseBranch: string;
     remoteName: string;

package/dist/config/schemas/config.js

@@ -4,6 +4,7 @@
 import { z } from 'zod';
 import { relativePathSchema } from './collection.js';
 import { mediaSchema } from './media.js';
+import { previewPrefixSchema } from './url.js';
 const defaultBranchAccessSchema = z.enum(['allow', 'deny']).default('deny');
 const defaultPathAccessLevelSchema = z.enum(['allow', 'deny']);
 // Per-level object form: an omitted level stays undefined after parse (no per-field
@@ -50,7 +51,8 @@ const editorConfigSchema = z.object({
     title: z.string().optional(),
     subtitle: z.string().optional(),
     theme: z.unknown().optional(),
-    previewBase: z.record(z.string()).optional(),
+    previewBase: z.record(z.union([z.string(), z.literal(false)])).optional(),
+    previewPrefix: previewPrefixSchema.optional(),
     // UI handler functions (runtime only, don't serialize)
     onAccountClick: z.function().returns(z.void()).optional(),
     onLogoutClick: z.function().returns(z.void()).optional(),
@@ -79,6 +81,9 @@ export const CanopyConfigSchema = z
     defaultRemoteUrl: defaultRemoteUrlSchema.optional(),
     gitBotAuthorName: gitBotAuthorNameSchema,
     gitBotAuthorEmail: gitBotAuthorEmailSchema,
+    // Unset reads as on for Edited-by and off for Co-authored-by (services.ts submitBranch).
+    gitEditedByTrailers: z.boolean().optional(),
+    gitCoAuthoredByTrailers: z.boolean().optional(),
     githubTokenEnvVar: githubTokenEnvVarSchema.optional(),
     // Required by design (follow-up to SEC-C1): a prod deploy that omits `mode` must fail
     // validation loudly rather than silently running header-trusting dev auth semantics.
@@ -89,7 +94,6 @@ export const CanopyConfigSchema = z
     // Default false/unset — the standard AWS Lambda+worker topology must leave this unset.
     allowNetworkRemoteInProd: z.boolean().optional(),
     settingsBranch: z.string().optional(),
-    autoCreateSettingsPR: z.boolean().optional(),
     // `.optional()`, NOT bare `deploymentNameSchema`: its own `.default('prod')` would make
     // `parse(undefined)` resolve to 'prod' instead of staying `undefined`, collapsing the
     // env > config > modeDefault precedence chain `resolveDeploymentName`
@@ -107,16 +111,10 @@ export const CanopyConfigSchema = z
 })
     .strict();
 /**
- * Default workspace path for prod mode (used when CANOPYCMS_WORKSPACE_ROOT is not set).
- *
- * WARNING: this fallback assumes a worker-style ROOT mount of EFS at /mnt/efs.
- * The CanopyCmsService Lambda mounts EFS THROUGH an access point already rooted
- * at /workspace and therefore sets CANOPYCMS_WORKSPACE_ROOT=/mnt/efs explicitly;
- * if that env were ever unset on the Lambda this default would resolve to
- * /mnt/efs/workspace = EFS:/workspace/workspace (a wrong, nested dir). The CDK
- * always sets the env, so this only bites a hand-rolled misconfiguration.
+ * Default workspace path for prod mode (used when CANOPYCMS_WORKSPACE_ROOT is not set): where
+ * CanopyCmsService mounts the EFS `/workspace` access point in both the Lambda and the worker.
  */
-export const DEFAULT_PROD_WORKSPACE = '/mnt/efs/workspace';
+export const DEFAULT_PROD_WORKSPACE = '/mnt/efs';
 // Note: `mode` has no default by design (SEC-C1) and is intentionally omitted here —
 // operatingModeSchema.parse(undefined) would throw.
 //

package/dist/config/schemas/field.js

@@ -81,6 +81,7 @@ const blockFieldSchema = fieldBaseSchema.extend({
 const objectFieldSchema = fieldBaseSchema.extend({
     type: z.literal('object'),
     fields: z.array(z.lazy(() => fieldHolder[0])).min(1),
+    itemTitleField: z.string().min(1).optional(),
 });
 // Inline group field: visual grouping only, no data nesting
 const inlineGroupFieldSchema = z.object({

package/dist/config/schemas/media.d.ts

@@ -4,22 +4,18 @@
 import { z } from 'zod';
 export declare const mediaSchema: z.ZodDiscriminatedUnion<"adapter", [z.ZodObject<{
     adapter: z.ZodLiteral<"local">;
-    publicBaseUrl: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
     /** Root directory for local asset storage. Defaults to the caller's dev-assets dir. */
     directory: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>, string, string>>;
 }, "strict", z.ZodTypeAny, {
     adapter: "local";
-    publicBaseUrl?: string | undefined;
     directory?: string | undefined;
 }, {
     adapter: "local";
-    publicBaseUrl?: string | undefined;
     directory?: string | undefined;
 }>, z.ZodObject<{
     adapter: z.ZodLiteral<"s3">;
     bucket: z.ZodString;
     region: z.ZodString;
-    publicBaseUrl: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
     /**
      * Where the browser POSTs a presigned direct upload. Absolute http(s) URL or a
      * site-relative path; defaults to the S3 REST endpoint the AWS SDK returns.
@@ -29,10 +25,10 @@ export declare const mediaSchema: z.ZodDiscriminatedUnion<"adapter", [z.ZodObjec
      * signature is unaffected — a presigned POST's string-to-sign is the base64 policy
      * alone, so the host never enters it (pinned by store-s3.test.ts).
      *
-     * NOT a prefix. Unlike `publicBaseUrl`, nothing is joined onto this value; it replaces
-     * the POST target outright and is passed through byte-for-byte. Do not route it through
-     * `joinUrlPrefix` "for consistency" — that would strip the trailing slash and silently
-     * stop a CDN path pattern like `/asset-upload/*` from matching.
+     * NOT a prefix: nothing is joined onto this value; it replaces the POST target outright
+     * and is passed through byte-for-byte. Do not route it through `joinUrlPrefix` "for
+     * consistency" — that would strip the trailing slash and silently stop a CDN path
+     * pattern like `/asset-upload/*` from matching.
      */
     uploadUrl: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
     /** Max upload size in bytes for presigned direct uploads. Defaults to 50 MiB. */
@@ -41,23 +37,18 @@ export declare const mediaSchema: z.ZodDiscriminatedUnion<"adapter", [z.ZodObjec
     adapter: "s3";
     bucket: string;
     region: string;
-    publicBaseUrl?: string | undefined;
     uploadUrl?: string | undefined;
     maxUploadBytes?: number | undefined;
 }, {
     adapter: "s3";
     bucket: string;
     region: string;
-    publicBaseUrl?: string | undefined;
     uploadUrl?: string | undefined;
     maxUploadBytes?: number | undefined;
 }>, z.ZodObject<{
     adapter: z.ZodLiteral<"lfs">;
-    publicBaseUrl: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
 }, "strict", z.ZodTypeAny, {
     adapter: "lfs";
-    publicBaseUrl?: string | undefined;
 }, {
     adapter: "lfs";
-    publicBaseUrl?: string | undefined;
 }>]>;

package/dist/config/schemas/media.js

@@ -3,7 +3,7 @@
  */
 import { z } from 'zod';
 import { relativePathSchema } from './collection.js';
-import { assetMountUrlSchema, uploadTargetUrlSchema } from './url.js';
+import { uploadTargetUrlSchema } from './url.js';
 // Media adapter configuration schema.
 // Keyed as a discriminated union on `adapter` so each adapter's required fields are
 // enforced at parse time. With a plain z.union, a malformed s3 config (e.g. missing
@@ -26,7 +26,6 @@ export const mediaSchema = z.discriminatedUnion('adapter', [
     z
         .object({
         adapter: z.literal('local'),
-        publicBaseUrl: assetMountUrlSchema.optional(),
         /** Root directory for local asset storage. Defaults to the caller's dev-assets dir. */
         directory: relativePathSchema.optional(),
     })
@@ -36,7 +35,6 @@ export const mediaSchema = z.discriminatedUnion('adapter', [
         adapter: z.literal('s3'),
         bucket: z.string().min(1),
         region: z.string().min(1),
-        publicBaseUrl: assetMountUrlSchema.optional(),
         /**
          * Where the browser POSTs a presigned direct upload. Absolute http(s) URL or a
          * site-relative path; defaults to the S3 REST endpoint the AWS SDK returns.
@@ -46,10 +44,10 @@ export const mediaSchema = z.discriminatedUnion('adapter', [
          * signature is unaffected — a presigned POST's string-to-sign is the base64 policy
          * alone, so the host never enters it (pinned by store-s3.test.ts).
          *
-         * NOT a prefix. Unlike `publicBaseUrl`, nothing is joined onto this value; it replaces
-         * the POST target outright and is passed through byte-for-byte. Do not route it through
-         * `joinUrlPrefix` "for consistency" — that would strip the trailing slash and silently
-         * stop a CDN path pattern like `/asset-upload/*` from matching.
+         * NOT a prefix: nothing is joined onto this value; it replaces the POST target outright
+         * and is passed through byte-for-byte. Do not route it through `joinUrlPrefix` "for
+         * consistency" — that would strip the trailing slash and silently stop a CDN path
+         * pattern like `/asset-upload/*` from matching.
          */
         uploadUrl: uploadTargetUrlSchema.optional(),
         /** Max upload size in bytes for presigned direct uploads. Defaults to 50 MiB. */
@@ -59,7 +57,6 @@ export const mediaSchema = z.discriminatedUnion('adapter', [
     z
         .object({
         adapter: z.literal('lfs'),
-        publicBaseUrl: assetMountUrlSchema.optional(),
     })
         .strict(),
 ]);

package/dist/config/schemas/url.d.ts

@@ -13,25 +13,9 @@ import { z } from 'zod';
 /**
  * Where the browser POSTs a presigned direct upload (`media.uploadUrl`).
  *
- * Stricter than `assetMountUrlSchema` by exactly one case — no protocol-relative `//host` —
- * because that spelling is ambiguous rather than insecure: it resolves to http or https
- * depending on the editor page issuing the upload, so the config would not determine where a
- * live credential is sent. `isHttpUrlOrSameOriginPath`'s doc carries the full reasoning,
- * including why bare `http://` is nonetheless accepted.
- *
- * "Exactly one case" is measured, not asserted: a census over every 4-character string
- * drawn from an 11-symbol alphabet (slash, backslash, dot, colon, %2e, ?, #, tab, and three
- * letters), plus hand-written shapes, found 39 values the two schemas treat differently — and
- * every one is a literal `//host` (three only after `.trim()` strips a leading tab).
+ * `isHttpUrlOrSameOriginPath`'s doc carries the reasoning, including why a protocol-relative
+ * `//host` is refused while bare `http://` is accepted.
  */
 export declare const uploadTargetUrlSchema: z.ZodEffects<z.ZodString, string, string>;
-/**
- * Where `/assets/…` is mounted for the editor's own previews (`media.publicBaseUrl`).
- *
- * Accepts an absolute http(s) URL, a protocol-relative `//host` URL, or a site-relative path
- * (see `.claude/future-tasks/editor-asset-mount-topology.md` option 1 — the `basePath` fallback
- * in `editor/context/AssetContext.tsx` exists for sites that need one and can't set an absolute
- * value). Rejects non-http(s) schemes: a plain `z.string().url()` check would accept
- * `publicBaseUrl: 'mailto:a@b.c'` and produce `/mailto:a@b.c/assets/…` at render time.
- */
-export declare const assetMountUrlSchema: z.ZodEffects<z.ZodString, string, string>;
+/** `editor.previewPrefix`, by `uploadTargetUrlSchema`'s rule: `//host` leaves the scheme open. */
+export declare const previewPrefixSchema: z.ZodEffects<z.ZodString, string, string>;

package/dist/config/schemas/url.js

@@ -14,16 +14,8 @@ import { isHttpUrlOrSameOriginPath } from '../../utils/sanitize-href.js';
 /**
  * Where the browser POSTs a presigned direct upload (`media.uploadUrl`).
  *
- * Stricter than `assetMountUrlSchema` by exactly one case — no protocol-relative `//host` —
- * because that spelling is ambiguous rather than insecure: it resolves to http or https
- * depending on the editor page issuing the upload, so the config would not determine where a
- * live credential is sent. `isHttpUrlOrSameOriginPath`'s doc carries the full reasoning,
- * including why bare `http://` is nonetheless accepted.
- *
- * "Exactly one case" is measured, not asserted: a census over every 4-character string
- * drawn from an 11-symbol alphabet (slash, backslash, dot, colon, %2e, ?, #, tab, and three
- * letters), plus hand-written shapes, found 39 values the two schemas treat differently — and
- * every one is a literal `//host` (three only after `.trim()` strips a leading tab).
+ * `isHttpUrlOrSameOriginPath`'s doc carries the reasoning, including why a protocol-relative
+ * `//host` is refused while bare `http://` is accepted.
  */
 export const uploadTargetUrlSchema = z
     .string()
@@ -31,18 +23,10 @@ export const uploadTargetUrlSchema = z
     .refine((value) => isHttpUrlOrSameOriginPath(value), {
     message: 'must be an absolute http(s) URL or a site-relative path beginning with a single "/", with no query or fragment',
 });
-/**
- * Where `/assets/…` is mounted for the editor's own previews (`media.publicBaseUrl`).
- *
- * Accepts an absolute http(s) URL, a protocol-relative `//host` URL, or a site-relative path
- * (see `.claude/future-tasks/editor-asset-mount-topology.md` option 1 — the `basePath` fallback
- * in `editor/context/AssetContext.tsx` exists for sites that need one and can't set an absolute
- * value). Rejects non-http(s) schemes: a plain `z.string().url()` check would accept
- * `publicBaseUrl: 'mailto:a@b.c'` and produce `/mailto:a@b.c/assets/…` at render time.
- */
-export const assetMountUrlSchema = z
+/** `editor.previewPrefix`, by `uploadTargetUrlSchema`'s rule: `//host` leaves the scheme open. */
+export const previewPrefixSchema = z
     .string()
     .trim()
-    .refine((value) => isHttpUrlOrSameOriginPath(value, { allowProtocolRelative: true }), {
-    message: 'must be an absolute http(s) URL, a protocol-relative "//host" URL, or a site-relative path beginning with a single "/", with no query or fragment',
+    .refine((value) => isHttpUrlOrSameOriginPath(value), {
+    message: 'editor.previewPrefix must be an absolute http(s) URL or a site-relative path beginning with a single "/", with no query or fragment',
 });

package/dist/config/types.d.ts

@@ -132,6 +132,11 @@ export interface BlockFieldConfig extends BaseFieldConfig {
 export interface ObjectFieldConfig extends BaseFieldConfig {
     type: 'object';
     fields: FieldConfig[];
+    /**
+     * On a `list: true` object, a direct `string` or `number` child whose value titles each
+     * item's card; a blank or non-finite value falls back to "<label> #N".
+     */
+    itemTitleField?: string;
 }
 /**
  * Inline group field config: visually groups fields in the editor without creating
@@ -157,19 +162,16 @@ export type CustomFieldConfig = BaseFieldConfig & {
 export type FieldConfig = PrimitiveFieldConfig | SelectFieldConfig | ReferenceFieldConfig | ImageFieldConfig | BlockFieldConfig | ObjectFieldConfig | InlineGroupFieldConfig | CustomFieldConfig;
 export type MediaConfig = {
     adapter: 'local';
-    publicBaseUrl?: string;
     directory?: string;
 } | {
     adapter: 's3';
     bucket: string;
     region: string;
-    publicBaseUrl?: string;
     /** POST target for presigned direct uploads; see mediaSchema's s3 branch. */
     uploadUrl?: string;
     maxUploadBytes?: number;
 } | {
     adapter: 'lfs';
-    publicBaseUrl?: string;
 };
 /**
  * Field definitions for one entry type — the array of FieldConfig that
@@ -252,15 +254,27 @@ export interface CanopyEditorConfig {
     subtitle?: string;
     theme?: unknown;
     /**
-     * Per-collection overrides for the preview pane's URL, keyed by collection path or name
-     * (e.g. `{ 'content/posts': '/blog' }`) for sites whose routes don't mirror their content tree.
+     * Preview-pane routes for sites whose routes don't mirror their content tree; otherwise an entry
+     * previews its own `urlPath`. Keyed by a root entry's path (the whole route), else collection
+     * path or name (plus the slug). `false` means no page, and the pane says so instead of framing one.
      *
-     * Values are **site-relative** and must NOT include the deployment `basePath` — that is applied
-     * on top of whatever this yields (see `CanopyConfig.basePath`), so including it here would
-     * prefix it twice. An absolute value (`https://…`) is passed through untouched instead, which
-     * is the escape hatch for previewing against a different origin entirely.
+     * Values are **site-relative**, without the deployment `basePath` (applied on top, so including
+     * it prefixes it twice), and get `previewPrefix` too. An absolute value (`https://…`) gets no
+     * prefix, only the slug (for a collection key) and `?branch=`: for previewing another origin.
      */
-    previewBase?: Record<string, string>;
+    previewBase?: Record<string, string | false>;
+    /**
+     * Where the host mounts the pages the preview pane loads, put in front of every entry's preview
+     * URL (`'/preview'` makes `/blog/hello` load `/preview/blog/hello`). Set it when the site's
+     * public pages are a static export, which cannot render a requested branch, so the preview
+     * must load a route the CMS server renders.
+     *
+     * A path starting with `/`, without the deployment `basePath` (applied on top, as for
+     * `previewBase`), or an absolute `http(s)://` URL, which skips the `basePath`. Pages on another
+     * origin accept drafts only with `useCanopyPreview({ editorOrigin })`. An absolute `previewBase`
+     * value skips this prefix.
+     */
+    previewPrefix?: string;
     onAccountClick?: () => void;
     onLogoutClick?: () => void;
     AccountComponent?: React.ComponentType;
@@ -346,6 +360,8 @@ export interface CanopyConfig {
     defaultRemoteUrl?: DefaultRemoteUrl;
     gitBotAuthorName: GitBotAuthorName;
     gitBotAuthorEmail: GitBotAuthorEmail;
+    gitEditedByTrailers?: boolean;
+    gitCoAuthoredByTrailers?: boolean;
     githubTokenEnvVar?: GithubTokenEnvVar;
     mode: CanopyOperatingMode;
     /** How this build is deployed — see {@link CanopyConfigInput.deployedAs}. */
@@ -353,7 +369,6 @@ export interface CanopyConfig {
     /** Escape hatch for a prod host with real internet access — see {@link CanopyConfigInput.allowNetworkRemoteInProd}. */
     allowNetworkRemoteInProd?: boolean;
     settingsBranch?: string;
-    autoCreateSettingsPR?: boolean;
     deploymentName?: string;
     contentRoot: ContentRoot;
     sourceRoot?: SourceRoot;
@@ -382,6 +397,10 @@ export interface CanopyConfigInput {
     defaultRemoteUrl?: string;
     gitBotAuthorName: string;
     gitBotAuthorEmail: string;
+    /** Add `Edited-by: Name (user id)` for the submitter to submit commits. Default true. */
+    gitEditedByTrailers?: boolean;
+    /** Also add `Co-authored-by: Name <email>`. Default false: emails in public history are public. */
+    gitCoAuthoredByTrailers?: boolean;
     githubTokenEnvVar?: string;
     /**
      * Operating mode: 'prod' or 'dev'. Required — no default (SEC-C1). A prod deploy that
@@ -402,7 +421,6 @@ export interface CanopyConfigInput {
      */
     allowNetworkRemoteInProd?: boolean;
     settingsBranch?: string;
-    autoCreateSettingsPR?: boolean;
     deploymentName?: string;
     contentRoot?: string;
     sourceRoot?: string;
@@ -474,14 +492,6 @@ export type FlatSchemaItem = {
  */
 export type CanopyClientConfig = Pick<CanopyConfig, 'defaultBaseBranch' | 'defaultActiveBranch' | 'contentRoot' | 'editor' | 'mode' | 'entryLinkUrl' | 'basePath'> & {
     flatSchema: FlatSchemaItem[];
-    /**
-     * `media.publicBaseUrl`, when configured - the only part of `media` safe/
-     * useful to expose client-side (the editor may be served from a different
-     * origin than the site; the rest of `MediaConfig` - bucket, region, etc -
-     * has no business in a browser bundle). Threaded through to `Editor`'s
-     * `assetBaseUrl` prop. Undefined means root-relative asset URLs.
-     */
-    assetBaseUrl?: string;
 };
 export interface ClientOnlyFields {
     editor?: {

package/dist/config/validation.d.ts

@@ -25,6 +25,12 @@ export declare const ensureReferenceFieldsHaveScope: (fields: unknown) => void;
  * can run at config-validation and schema-load time, before any entry exists.
  */
 export declare const forEachReferenceField: (fields: unknown, visit: (field: Record<string, unknown>) => void) => void;
+/**
+ * Check that every `itemTitleField` sits on a `list: true` object and names a direct child
+ * of type `string` or `number`, the only values the card heading shows as typed (a reference
+ * would show its raw id, a select its stored value). Throws an error when it does not.
+ */
+export declare const ensureItemTitleFieldsExist: (fields: unknown) => void;
 /**
  * Validate that inline groups don't cause field name collisions within the same scope.
  * Because inline groups flatten their children into the parent scope, a field name used

package/dist/config/validation.js

@@ -77,6 +77,43 @@ export const forEachReferenceField = (fields, visit) => {
         }
     }
 };
+/**
+ * Check that every `itemTitleField` sits on a `list: true` object and names a direct child
+ * of type `string` or `number`, the only values the card heading shows as typed (a reference
+ * would show its raw id, a select its stored value). Throws an error when it does not.
+ */
+export const ensureItemTitleFieldsExist = (fields) => {
+    if (!Array.isArray(fields))
+        return;
+    for (const field of fields) {
+        const f = field;
+        if (f?.type === 'object') {
+            const children = Array.isArray(f.fields) ? f.fields : [];
+            if (f.itemTitleField !== undefined) {
+                const label = `Object field "${f.name ?? 'unknown'}" has itemTitleField "${String(f.itemTitleField)}"`;
+                if (f.list !== true) {
+                    throw new Error(`${label}, but itemTitleField applies only to list: true objects`);
+                }
+                const child = children.find((c) => c?.name === f.itemTitleField);
+                if (typeof f.itemTitleField !== 'string' || !child) {
+                    throw new Error(`${label}, which is not one of its child fields`);
+                }
+                if (child.type !== 'string' && child.type !== 'number') {
+                    throw new Error(`${label}, which must name a string or number field`);
+                }
+            }
+            ensureItemTitleFieldsExist(children);
+        }
+        else if (f?.type === 'group') {
+            ensureItemTitleFieldsExist(f.fields);
+        }
+        else if (f?.type === 'block' && Array.isArray(f.templates)) {
+            for (const template of f.templates) {
+                ensureItemTitleFieldsExist(template.fields);
+            }
+        }
+    }
+};
 /**
  * Validate that inline groups don't cause field name collisions within the same scope.
  * Because inline groups flatten their children into the parent scope, a field name used