@stnd/core 0.22.1 → 0.22.2

package/README.md

@@ -2,21 +2,24 @@
 title: "@stnd/core"
 aliases: []
 created: 2026-06-20 13:56
-modified: 2026-07-15 10:20
+modified: 2026-09-16T17:31:40.687Z
 last_audited: 2026-07-14
 audit_interval_days: 90
 next_audit: 2026-10-12
 audit_priority: 3
 maturity: tree
 mode: read
-publish: false
+publish: true
 status: active
 tags:
   - package
   - stnd
 theme: kernel
 type: package
-visibility: private
+visibility: public
+garden-url: https://standard.garden/@francis/readme
+garden-short: https://stnd.gd/DT0h6O
+permalink: readme
 ---
 
 # @[stnd](../README)/core

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stnd/core",
-  "version": "0.22.1",
+  "version": "0.22.2",
   "description": "A fine-art typography framework implementing classical design principles, mathematical precision with the golden ratio, and micro-typography rules inspired by the masters of print design.",
   "author": "Francis Fontaine",
   "license": "MIT",
@@ -26,6 +26,7 @@
       "svelte": "./Hook.svelte",
       "default": "./Hook.astro"
     },
+    "./module-filter": "./module-filter.js",
     "./loader": "./src/loader.js",
     "./virtual": "./src/virtual.js",
     "./src/dev-toolbar/*": "./src/dev-toolbar/*",
@@ -53,24 +54,24 @@
   "dependencies": {
     "@astrojs/sitemap": "^3.7.3",
     "@astrojs/svelte": "9.0.1",
-    "astro": "7.1.3",
+    "astro": "7.3.1",
     "glob": "^13.0.6",
-    "svelte": "5.56.4",
+    "svelte": "5.57.0",
     "zod": "^4.4.3",
     "@stnd/client": "0.5.0",
     "@stnd/cloudflare": "0.5.0",
     "@stnd/fonts": "0.5.0",
     "@stnd/icon": "0.2.0",
-    "@stnd/lab": "1.0.0",
-    "@stnd/launcher": "1.0.0",
-    "@stnd/layout": "0.5.0",
+    "@stnd/lab": "1.0.1",
+    "@stnd/launcher": "1.0.1",
+    "@stnd/layout": "0.5.1",
     "@stnd/log": "0.5.0",
-    "@stnd/modules": "0.5.1",
+    "@stnd/modules": "0.5.2",
     "@stnd/press": "0.7.0",
     "@stnd/store": "0.5.0",
     "@stnd/styles": "0.5.2",
     "@stnd/themes": "0.5.1",
-    "@stnd/ui": "0.5.0",
+    "@stnd/ui": "0.5.1",
     "@stnd/utils": "0.5.0"
   },
   "devDependencies": {

package/src/loader.js

@@ -60,6 +60,19 @@ const ModuleManifestSchema = z
     dependencies: z.array(z.string()).optional(),
     config: z.record(z.any()).optional(),
     routes: z.array(RouteSchema).optional(),
+    // Where this module is allowed to exist. `domain` lists the canonical
+    // domain(s) it belongs to; the module's routes and hooks disappear
+    // everywhere else. The framework never resolves a hostname itself — the
+    // app tells the guard which canonical domain the current request is on,
+    // so "standard.garden" still matches while developing on localhost.
+    // Absent = the module exists everywhere (the default for every module
+    // that doesn't opt in).
+    filter: z
+      .object({
+        domain: z.union([z.string(), z.array(z.string())]).optional(),
+      })
+      .passthrough()
+      .optional(),
     hooks: z.record(z.union([HookSchema, z.array(HookSchema)])).optional(),
     styles: z.array(z.string()).optional(),
     scripts: z.array(ScriptSchema).optional(),
@@ -183,7 +196,7 @@ export async function loadModules({
       const task = tasks[index];
       if (result.status === "rejected") {
         log.fatal(
-          `Failed to load module: ${task.resolvedPath}\nSee: https://stnd.build/manual/5-reference/module-load-failure`,
+          `Failed to load module: ${task.resolvedPath}\nSee: https://stnd.build/manual/diagnostic/module-load-failure`,
           result.reason,
         );
       }
@@ -196,7 +209,7 @@ export async function loadModules({
         if (task.sourceModule) {
           errorMsg += `\n  Required by: "${task.sourceModule}" module`;
         }
-        errorMsg += `\nSee: https://stnd.build/manual/5-reference/core-is-not-a-module`;
+        errorMsg += `\nSee: https://stnd.build/manual/diagnostic/core-is-not-a-module`;
         log.fatal(errorMsg);
       }
 
@@ -210,7 +223,7 @@ export async function loadModules({
         if (task.sourceModule) {
           errorMsg += `  Required by: "${task.sourceModule}" module\n`;
         }
-        errorMsg += `See: https://stnd.build/manual/5-reference/content-validation`;
+        errorMsg += `See: https://stnd.build/manual/diagnostic/content-validation`;
         log.fatal(errorMsg);
       }
 
@@ -225,7 +238,7 @@ export async function loadModules({
               `\n  Path 1: ${existingPath}` +
               `\n  Path 2: ${resolvedPath}` +
               `\n  Every module must have a unique ID.` +
-              `\n  See: https://stnd.build/manual/5-reference/module-duplicate-id`,
+              `\n  See: https://stnd.build/manual/diagnostic/module-duplicate-id`,
           );
         }
       }
@@ -276,7 +289,7 @@ export async function loadModules({
 
       if (!idToPath.has(depId)) {
         log.fatal(
-          `Module "${moduleId}" has unresolved dependency: "${rawDep}"\nSee: https://stnd.build/manual/5-reference/module-dependency-unresolved`,
+          `Module "${moduleId}" has unresolved dependency: "${rawDep}"\nSee: https://stnd.build/manual/diagnostic/module-dependency-unresolved`,
         );
       }
 
@@ -302,13 +315,17 @@ export async function loadModules({
 
   if (sortedIds.length !== allIds.length) {
     log.fatal(
-      "Circular dependency detected in module graph.\nSee: https://stnd.build/manual/5-reference/module-dependency-circular",
+      "Circular dependency detected in module graph.\nSee: https://stnd.build/manual/diagnostic/module-dependency-circular",
     );
   }
 
   // 3. Process
   const modules = {
     runtime: [],
+    // Server-only: {id, filter, routes} for modules declaring `filter.domain`.
+    // See the comment at the injectRoute() call site for why this exists
+    // separately from `runtime` (which is the client-bundled payload).
+    domainFilters: [],
     config: [],
     aliases: {},
     ui: {},
@@ -405,6 +422,22 @@ export async function loadModules({
       });
     }
 
+    // A module declaring `filter: { domain }` needs its route PATTERNS at
+    // request time, server-side, to turn "hidden in the UI" into "the URL
+    // itself answers 404" (routes are injected once here, at build time, so
+    // hiding a button never stops the URL from working). This is collected
+    // separately from `modules.runtime` because that array is the CLIENT
+    // payload and deliberately strips `routes` (see the destructuring a few
+    // hundred lines down) — bundling every route pattern to the browser for
+    // a check only the server needs would be pure waste.
+    if (def.filter) {
+      modules.domainFilters.push({
+        id: def.id,
+        filter: def.filter,
+        routes: def.routes || [],
+      });
+    }
+
     if (def.styles) {
       def.styles.forEach((style) => {
         // Preserve external URLs (https:// or protocol-relative //) as-is so they don't get path-resolved into local files.
@@ -520,7 +553,7 @@ export async function loadModules({
                 `\n  Module "${def.id}" registered a ${kind} entry (${entryPath}), but "${hookName}" was already classified as ${previousKind} by an earlier module.` +
                 `\n  A hook name must consistently resolve to one kind: logic hooks are ".js/.ts" entries not prefixed "launcher:" or suffixed ":action"; everything else is a UI/action zone.` +
                 `\n  Rename this hook or make its entry type consistent with the other registrations.` +
-                `\n  See: https://stnd.build/manual/5-reference/hook-kind-mismatch`,
+                `\n  See: https://stnd.build/manual/diagnostic/hook-kind-mismatch`,
             );
           }
           hookKindByName.set(hookName, kind);
@@ -545,7 +578,7 @@ export async function loadModules({
                 `Hook "${hookName}" (module "${def.id}") sets "server: true", but this hook classifies as a UI/action zone contribution, which has no server/client split.` +
                   `\n  "server: true" only has an effect on logic hooks (".js/.ts" entries not prefixed "launcher:" or suffixed ":action").` +
                   `\n  Remove "server: true", or rename this hook off the "launcher:"/":action" pattern if it must stay out of the client bundle.` +
-                  `\n  See: https://stnd.build/manual/5-reference/hook-server-flag-ignored`,
+                  `\n  See: https://stnd.build/manual/diagnostic/hook-server-flag-ignored`,
               );
             }
             if (!modules.ui[hookName]) modules.ui[hookName] = [];

package/src/virtual.js

@@ -96,6 +96,21 @@ export function generateModulesModule(runtimeModules) {
   );
 }
 
+/**
+ * Server-only virtual module carrying route patterns for domain-filtered
+ * modules (`filter: { domain }` in a manifest). Deliberately separate from
+ * `generateModulesModule`/`generateModulesMetadataModule`, whose payload is
+ * bundled to the client — route patterns have no reason to ship there.
+ * Consumed by the app's own request middleware to 404 a build-time-injected
+ * route that shouldn't answer on the current domain.
+ *
+ * @param {{id: string, filter: object, routes: Array<{path: string}>}[]} domainFilterModules
+ * @returns {string} module source
+ */
+export function generateModuleDomainsModule(domainFilterModules = []) {
+  return `export const modules = ${JSON.stringify(domainFilterModules)};`;
+}
+
 export function generateModulesMetadataModule(runtimeModules) {
   // Build a sanitized client payload with functions removed (safe for JSON serialization)
   const sanitizedModules = runtimeModules.map((m) => {

package/standard.js

@@ -16,6 +16,7 @@ import {
   generateConfigModule,
   generateModulesModule,
   generateModulesMetadataModule,
+  generateModuleDomainsModule,
   generateStylesModule,
   generateScriptsModule,
   generateComponentsModule,
@@ -225,7 +226,7 @@ export default function standard(options = {}) {
             log.warn(
               `Modules define actions but 'src/actions/index.ts' is missing.\n` +
                 `      Actions will trigger 404 errors without this bridge file.\n` +
-                `      See fix: https://stnd.build/manual/5-reference/actions-404`,
+                `      See fix: https://stnd.build/manual/diagnostic/actions-404`,
             );
           }
         }
@@ -344,6 +345,8 @@ export default function standard(options = {}) {
               return generateModulesModule(modules.runtime);
             if (id === "\0virtual-stnd/modules-metadata")
               return generateModulesMetadataModule(modules.runtime);
+            if (id === "\0virtual-stnd/module-domains")
+              return generateModuleDomainsModule(modules.domainFilters);
             if (id === "\0virtual-stnd/components")
               return generateComponentsModule(modules.ui);
             if (id === "\0virtual-stnd/middleware")
@@ -377,37 +380,6 @@ export default function standard(options = {}) {
             .filter(Boolean),
         ];
 
-        const astro7Workarounds = {
-          name: "stnd-astro-7-workarounds",
-          enforce: "post",
-          configEnvironment(name, config) {
-            if (name === "prerender") {
-              config.build ||= {};
-              config.build.rollupOptions ||= {};
-              config.build.rollupOptions.output = {
-                ...config.build.rollupOptions.output,
-                entryFileNames: "prerender-entry.[hash].mjs",
-                format: "esm"
-              };
-            }
-          },
-          options(rollupOptions) {
-            if (this.environment?.name === "client") {
-              const envConfig = this.environment.config;
-              const rolldownInput = envConfig?.build?.rolldownOptions?.input;
-              const isDefaultInput = !rollupOptions.input ||
-                rollupOptions.input === "index.html" ||
-                (typeof rollupOptions.input === "string" && rollupOptions.input.endsWith("index.html")) ||
-                (Array.isArray(rollupOptions.input) && rollupOptions.input.length === 0);
-
-              if (rolldownInput && isDefaultInput) {
-                rollupOptions.input = rolldownInput;
-              }
-            }
-            return rollupOptions;
-          }
-        };
-
         updateConfig({
           // Speed is a respect (Standard value #2): every Standard app prefetches
           // links in the viewport and speculatively prerenders them. These are
@@ -425,7 +397,7 @@ export default function standard(options = {}) {
           },
           integrations: moduleIntegrations,
           vite: {
-            plugins: [virtualModuleStnd, astro7Workarounds],
+            plugins: [virtualModuleStnd],
             resolve: {
               alias: aliases,
               dedupe: ["svelte"],