@louise-toolkit/astro 0.2.7 → 0.3.0

package/README.md

@@ -44,8 +44,8 @@ Pass `apiGate: true` to deny the editor API by default: every request under
 writes and WebSocket upgrades origin-checked. This is the same gate as
 `composeWorker({ gate })` (ADR 0012), for routes mounted as Astro API routes.
 Middleware runs before Astro knows which route file answers, so a public route
-is declared by path: the toolkit's form and vitals routes are exempt at their
-default paths, and `apiGate: { isPublic: (path) => … }` adds your own.
+is declared by path: the toolkit's form, vitals, and status routes are exempt
+at their default paths, and `apiGate: { isPublic: (path) => … }` adds your own.
 
 **Actions**: the editor write path as Astro Actions, so a save is a typed call
 rather than a hand-rolled endpoint. `louiseSaveAction`, `louiseSaveDraftAction`,

package/dist/actions.js

@@ -35,6 +35,7 @@
 // the raw routes (`applyFieldSave`, `applySettingsPatch`), so nothing is parsed or
 // written twice.
 import { z } from "astro/zod";
+import { toPageId } from "louise-toolkit/content";
 import { D1_BOOKMARK_COOKIE } from "louise-toolkit/db";
 import { applyFieldSave } from "louise-toolkit/editor";
 import { applySettingsPatch } from "louise-toolkit/editor";
@@ -146,12 +147,14 @@ export function louiseSaveDraftAction(config) {
     const resolved = resolveDeps(config);
     return {
         input: z.object({
-            id: z.number().int(),
+            // Positive, like every row ID, so `toPageId` below can't throw on input
+            // this schema accepted.
+            id: z.number().int().positive(),
             data: z.record(z.string(), z.unknown()),
         }),
         handler: async (input, context) => {
             const editor = requireEditor(resolved, context);
-            const result = await applySaveDraft(resolved.getEnv(context), config, editor, input.id, input.data);
+            const result = await applySaveDraft(resolved.getEnv(context), config, editor, toPageId(input.id), input.data);
             if (!result.ok)
                 throwActionError(resolved.ActionError, result.status, result.error);
             // Persist the D1 bookmark so this Action's draft is read-your-writes on the

package/dist/middleware.d.ts

@@ -18,8 +18,8 @@ export interface LouiseMiddlewareApiGate {
     prefix?: string;
     /**
      * Paths under the prefix an anonymous request may still reach, on top of the
-     * toolkit's own public routes at their default mounts (forms and vitals—see
-     * `isLouisePublicPath`).
+     * toolkit's own public routes at their default mounts (forms, vitals, and
+     * status—see `isLouisePublicPath`).
      *
      * A path, not a mark on the route, because middleware runs before it knows
      * which route file will answer: a route can't declare itself public here the

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@louise-toolkit/astro",
-  "version": "0.2.7",
+  "version": "0.3.0",
   "description": "Astro adapter for louise-toolkit: middleware, Actions, content-layer loaders, and the forms schema bridge.",
   "keywords": [
     "astro",
@@ -35,7 +35,7 @@
     "access": "public"
   },
   "dependencies": {
-    "louise-toolkit": "0.33.0"
+    "louise-toolkit": "0.34.0"
   },
   "devDependencies": {
     "@cloudflare/workers-types": "^5.20260829.1",