@stnd/modules 0.5.1

package/security-txt/route.js

@@ -0,0 +1,90 @@
+import config from "virtual:stnd/config";
+
+/**
+ * /.well-known/security.txt — RFC 9116
+ *
+ * Generates a standards-compliant security.txt so security researchers
+ * know how to report vulnerabilities. Config-driven via standard() options.
+ *
+ * @see https://securitytxt.org/
+ * @see https://www.rfc-editor.org/rfc/rfc9116
+ */
+export async function GET(context) {
+  const securityTxt = config.securityTxt || {};
+  if (securityTxt.enabled === false) {
+    return new Response(null, { status: 404 });
+  }
+
+  const site = context.site
+    ? context.site.toString().replace(/\/$/, "")
+    : "https://example.com";
+
+  // Contact is REQUIRED by RFC 9116
+  const contacts = Array.isArray(securityTxt.contact)
+    ? securityTxt.contact
+    : securityTxt.contact
+      ? [securityTxt.contact]
+      : config.author?.email
+        ? [`mailto:${config.author.email}`]
+        : [`${site}/security`];
+
+  // Expires is REQUIRED by RFC 9116 — default to 1 year from build time
+  const expires =
+    securityTxt.expires ||
+    new Date(Date.now() + 365 * 24 * 60 * 60 * 1000).toISOString();
+
+  const preferredLanguages = securityTxt.preferredLanguages ||
+    config.language ||
+    "en";
+
+  let content = `# security.txt — RFC 9116
+# ${site}
+# Generated by Standard Framework
+
+`;
+
+  // Contact (REQUIRED, can have multiple)
+  contacts.forEach((c) => {
+    content += `Contact: ${c}\n`;
+  });
+
+  // Expires (REQUIRED)
+  content += `Expires: ${expires}\n`;
+
+  // Preferred-Languages
+  content += `Preferred-Languages: ${preferredLanguages}\n`;
+
+  // Canonical (RECOMMENDED)
+  const canonical =
+    securityTxt.canonical || `${site}/.well-known/security.txt`;
+  content += `Canonical: ${canonical}\n`;
+
+  // Optional fields
+  if (securityTxt.encryption) {
+    const keys = Array.isArray(securityTxt.encryption)
+      ? securityTxt.encryption
+      : [securityTxt.encryption];
+    keys.forEach((k) => {
+      content += `Encryption: ${k}\n`;
+    });
+  }
+
+  if (securityTxt.acknowledgments) {
+    content += `Acknowledgments: ${securityTxt.acknowledgments}\n`;
+  }
+
+  if (securityTxt.policy) {
+    content += `Policy: ${securityTxt.policy}\n`;
+  }
+
+  if (securityTxt.hiring) {
+    content += `Hiring: ${securityTxt.hiring}\n`;
+  }
+
+  return new Response(content, {
+    headers: {
+      "Content-Type": "text/plain; charset=utf-8",
+      "Cache-Control": "public, max-age=86400",
+    },
+  });
+}

package/sitemap/index.module.js

@@ -0,0 +1,22 @@
+/**
+ * Sitemap core module
+ *
+ * Registers the @astrojs/sitemap integration via the Standard module system.
+ * Uses global Standard config (if present) to allow consumers to override options.
+ */
+import sitemap from "@astrojs/sitemap";
+
+const standardConfig = globalThis.__STANDARD_CONFIG__ || {};
+
+const sitemapOptions = {
+  // Default: exclude API and underscore-prefixed routes
+  filter: (page) => !page.includes("/_") && !page.includes("/api/"),
+  ...(standardConfig.sitemap || {}),
+};
+
+export default {
+  id: "stnd-sitemap",
+  name: "Stnd :: Sitemap",
+  description: "Adds sitemap generation via the Standard module system.",
+  integrations: [sitemap(sitemapOptions)],
+};

package/stripe/client.js

@@ -0,0 +1,27 @@
+/**
+ * Stripe Client
+ * Frontend utility to trigger standard checkout (or mock mode)
+ */
+
+export const stripeClient = {
+    /**
+     * Trigger a mock checkout to bypass the real Stripe flow during dev/testing.
+     * @param {string} formationSlug - the slug of the product/formation
+     */
+    async mockCheckout(formationSlug) {
+        const res = await fetch("/api/stripe/mock-checkout", {
+            method: "POST",
+            headers: {
+                "Content-Type": "application/json"
+            },
+            body: JSON.stringify({ formationSlug })
+        });
+
+        if (!res.ok) {
+            const data = await res.json();
+            throw new Error(data?.error || "Failed to process mock checkout");
+        }
+
+        return await res.json();
+    }
+};

package/stripe/components/MockBuyButton.svelte

@@ -0,0 +1,38 @@
+<script>
+  import { useSession } from "@stnd/account/client";
+  import { launcherView } from "@stnd/launcher/launcher";
+  import Icon from "@stnd/icon/Icon.svelte";
+
+  let { formationSlug, title = "Mock Buy" } = $props();
+  let loading = $state(false);
+
+  // Watch session state to gracefully update UI or conditionally show logic
+  const session = useSession();
+
+  async function handleMockBuy() {
+    if (!$session?.data?.user) {
+      window.toast("You need to login first before buying.", "error");
+      window.dispatchEvent(
+        new CustomEvent("open-launcher", {
+          detail: { viewTrigger: "::login" },
+        }),
+      );
+      return;
+    }
+
+    launcherView("::checkout", {
+      slug: formationSlug,
+      title: title.replace("Acheter : ", ""),
+      price: 97, // Hardcoded demo price
+    });
+  }
+</script>
+
+<button
+  onclick={handleMockBuy}
+  disabled={loading}
+  class="secondary flex-far mx-auto"
+>
+  <Icon icon="cart" />
+  <span>{title}</span>
+</button>

package/stripe/index.module.js

@@ -0,0 +1,33 @@
+/**
+ * Stripe Module Manifest
+ *
+ * Exposes a Stripe integration module for commerce and formations.
+ * Includes a mock purchase service to unlock specific formations during development.
+ */
+export default {
+    id: "stnd-stripe",
+    name: "Stnd :: Stripe",
+    description: "Commerce Integration and Mock Checkout Service",
+    routes: [
+        {
+            path: "/api/stripe/mock-checkout",
+            entrypoint: "./routes/mock-checkout.js",
+        },
+    ],
+    aliases: {
+        "@stripe/client": "./client.js",
+        "@stripe/components": "./components",
+    },
+    hooks: {
+        "launcher:view": [
+            {
+                trigger: "::checkout",
+                component: "./views/CheckoutView.svelte",
+                meta: {
+                    title: "Checkout",
+                    size: { width: "standard", height: "auto" }
+                }
+            }
+        ]
+    }
+};

package/stripe/routes/mock-checkout.js

@@ -0,0 +1,64 @@
+import { initAuth } from "@stnd/account/auth";
+import { env as cfEnv } from "cloudflare:workers";
+
+/**
+ * Mock Checkout API Route Handler
+ * 
+ * Simulates purchasing a product (like a formation) by modifying
+ * the user's `access_rights` JSON directly.
+ */
+export const POST = async (context) => {
+    const { request, locals } = context;
+
+    try {
+        // Safe environment discovery for Astro v6 / Cloudflare
+        const env = cfEnv || locals?.env || locals?.cfContext?.env || {};
+        const auth = initAuth(env);
+
+        // 1. Verify user session
+        const session = await auth.api.getSession({ headers: request.headers });
+        if (!session?.user) {
+            return new Response(JSON.stringify({ error: "Unauthorized" }), { status: 401 });
+        }
+
+        const body = await request.json();
+        const { formationSlug } = body;
+
+        if (!formationSlug) {
+            return new Response(JSON.stringify({ error: "Missing formationSlug" }), { status: 400 });
+        }
+
+        // 2. Parse existing rights
+        const user = session.user;
+        let rights = {};
+        if (typeof user.access_rights === "string") {
+            try {
+                rights = JSON.parse(user.access_rights);
+            } catch (e) { }
+        } else if (typeof user.access_rights === "object") {
+            rights = user.access_rights || {};
+        }
+
+        // 3. Grant access directly into rights structure
+        rights[formationSlug] = {
+            granted_at: new Date().toISOString(),
+            source: "mock_stripe",
+        };
+
+        // 4. Update User directly in DB
+        const db = env.ADE_DB || env.DB || env.Garden;
+        if (!db) {
+            throw new Error("Database not available for update");
+        }
+
+        await db.prepare("UPDATE user SET access_rights = ?, updatedAt = ? WHERE id = ?")
+            .bind(JSON.stringify(rights), Date.now(), user.id)
+            .run();
+
+        return new Response(JSON.stringify({ success: true, message: `Access granted for ${formationSlug}` }), { status: 200 });
+
+    } catch (e) {
+        console.error("Mock checkout failed:", e);
+        return new Response(JSON.stringify({ error: e.message || "Failed" }), { status: 500 });
+    }
+};

package/stripe/views/CheckoutView.svelte

@@ -0,0 +1,181 @@
+<script>
+  import { stripeClient } from "@stripe/client";
+  import { launcherClose } from "@stnd/launcher/launcher";
+  import Icon from "@stnd/icon/Icon.svelte";
+
+  let { slug, title = "Formation", price = 97 } = $props();
+  let loading = $state(false);
+  let success = $state(false);
+
+  // Mock Form State
+  let cardName = $state("testtetstsetst");
+  let cardNumber = $state("4242 4242 4242 4242");
+  let cardExpiry = $state("12/28");
+  let cardCvc = $state("123");
+
+  async function handlePayment(e) {
+    e.preventDefault();
+    loading = true;
+
+    try {
+      // Artificial delay for "WOW" effect of payment processing
+      await new Promise((r) => setTimeout(r, 1500));
+
+      await stripeClient.mockCheckout(slug);
+      success = true;
+
+      window.toast(`Paiement réussi pour : ${title}`, "success");
+
+      // Brief success screen before transition
+      setTimeout(() => {
+        launcherClose();
+        window.location.reload();
+      }, 2000);
+    } catch (e) {
+      window.toast(e.message, "error");
+    } finally {
+      loading = false;
+    }
+  }
+</script>
+
+<div class="checkout-view rhythm card flex-col" style="align-items: center;">
+  {#if !success}
+    <header class="flex-between items-start">
+      <div>
+        <h2 class="mb-0">{title}</h2>
+        <p class="text-sm text-muted">Accès immédiat et à vie</p>
+      </div>
+      <div class="badge accent mb-0">
+        {price}$
+      </div>
+    </header>
+
+    <form onsubmit={handlePayment} class="rhythm">
+      <div class="card">
+        <label for="card-details" class="small bold uppercase muted mb-2 block"
+          >Détails de paiement</label
+        >
+
+        <div class="card-input rhythm-xs">
+          <input
+            type="text"
+            placeholder="Nom sur la carte"
+            bind:value={cardName}
+            class="ghost-input w-full"
+            required
+          />
+          <div class="divider"></div>
+          <div class="flex gap items-center">
+            <Icon icon="cart" class="muted h4" />
+            <input
+              type="text"
+              bind:value={cardNumber}
+              placeholder="Numéro de carte"
+              class="ghost-input flex-1"
+            />
+          </div>
+          <div class="flex gap">
+            <input
+              type="text"
+              bind:value={cardExpiry}
+              placeholder="MM/AA"
+              class="ghost-input w-24"
+            />
+            <input
+              type="text"
+              bind:value={cardCvc}
+              placeholder="CVC"
+              class="ghost-input w-24"
+            />
+          </div>
+        </div>
+      </div>
+
+      <button type="submit" disabled={loading} class="secondary">
+        {#if loading}
+          <Icon icon="loading" class="animate-spin" />
+          Traitement...
+        {:else}
+          <Icon icon="lock" />
+          Payer {price}$
+        {/if}
+      </button>
+
+      <em class="text-center text-sm text-muted">
+        <Icon icon="admin" class="inline mb-0" /> Paiement sécurisé par Stripe (Mode
+        Test)
+      </em>
+    </form>
+  {:else}
+    <div class="success-screen rhythm">
+      <Icon icon="check" class="h-2 w-2" />
+
+      <h2>Paiement Partout !</h2>
+      <p class="text-muted">
+        Votre accès à <strong>{title}</strong> a été activé.
+      </p>
+      <em class="text-sm">Redirection dans quelques secondes...</em>
+    </div>
+  {/if}
+</div>
+
+<style>
+  .price-badge {
+    font-variant-numeric: tabular-nums;
+    font-weight: 800;
+    color: var(--color-accent);
+  }
+
+  .ghost-input {
+    background: transparent;
+    border: none;
+    outline: none;
+    font-size: 1rem;
+    padding: 0.5rem 0;
+  }
+
+  .ghost-input::placeholder {
+    color: var(--color-subtle);
+  }
+
+  .divider {
+    height: 1px;
+    background: var(--color-border);
+    margin: 0.25rem 0;
+    opacity: 0.5;
+  }
+
+  .success-icon {
+    display: inline-flex;
+    animation: scale-in 0.5s cubic-bezier(0.175, 0.885, 0.32, 1.275);
+  }
+
+  @keyframes scale-in {
+    from {
+      transform: scale(0);
+      opacity: 0;
+    }
+    to {
+      transform: scale(1);
+      opacity: 1;
+    }
+  }
+
+  :global(.animate-spin) {
+    animation: spin 1s linear infinite;
+  }
+
+  @keyframes spin {
+    from {
+      transform: rotate(0deg);
+    }
+    to {
+      transform: rotate(360deg);
+    }
+  }
+
+  .bg-success-soft {
+    background: rgba(var(--color-success-rgb), 0.1);
+  }
+</style>

package/styles/index.module.js

@@ -0,0 +1,11 @@
+/**
+ * Core Styles module
+ *
+ * Injects the Standard design stylesheet as a root style.
+ */
+export default {
+  id: "stnd-styles",
+  name: "Stnd :: Styles",
+  description: "Loads the Standard design stylesheet.",
+  styles: ["@stnd/styles/standard.scss"],
+};

package/theme-utils/README.md

@@ -0,0 +1,74 @@
+# Theme Utils Module
+
+Global theme switcher for managing themes across the entire site.
+
+## Setup
+
+Add to your base layout (e.g., `Base.astro`):
+
+```astro
+<script>
+  import { initThemeSwitcher } from "@stnd/modules/theme-utils/client.js";
+  initThemeSwitcher();
+</script>
+```
+
+## Usage
+
+### Buttons
+
+Add buttons anywhere with `data-theme` attribute:
+
+```astro
+<button data-theme="technical">Technical</button>
+<button data-theme="academic">Academic</button>
+<button data-theme="garden">Garden</button>
+```
+
+### Programmatic Control
+
+```js
+import { setTheme, getCurrentTheme } from "@stnd/modules/theme-utils/client.js";
+
+// Set theme
+setTheme("technical");
+
+// Get current theme
+const theme = getCurrentTheme(); // "technical"
+```
+
+### Custom Configuration
+
+```js
+initThemeSwitcher({
+  storageKey: "my-theme-key",
+  defaultTheme: "academic",
+  selector: "[data-switch-theme]"
+});
+```
+
+## How It Works
+
+- Listens for clicks on elements with `data-theme` attribute
+- Sets `data-theme` on `<html>` element
+- Persists selection to localStorage
+- Restores theme on page load
+
+## API
+
+### `initThemeSwitcher(options)`
+
+Initialize the switcher.
+
+**Options:**
+- `storageKey` - localStorage key (default: `"stnd-theme-global"`)
+- `defaultTheme` - fallback theme (default: `"garden"`)
+- `selector` - button selector (default: `"button[data-theme]"`)
+
+### `setTheme(themeName, storageKey?)`
+
+Programmatically set theme.
+
+### `getCurrentTheme(storageKey?)`
+
+Get current theme from localStorage.

package/theme-utils/client.js

@@ -0,0 +1,79 @@
+/**
+ * Theme Switcher Client
+ * Provides global theme switching functionality
+ */
+
+/**
+ * Initialize global theme switcher
+ * Listens for clicks on elements with data-theme attribute
+ * Applies theme to document root and persists to localStorage
+ *
+ * @param {Object} options
+ * @param {string} options.storageKey - localStorage key (default: "stnd-theme-global")
+ * @param {string} options.defaultTheme - fallback theme (default: "garden")
+ * @param {string} options.selector - button selector (default: "button[data-theme]")
+ */
+export function initThemeSwitcher(options = {}) {
+  const {
+    storageKey = "stnd-theme-global",
+    defaultTheme = document.documentElement.getAttribute("data-theme") || "garden",
+    selector = "button[data-theme]",
+  } = options;
+
+  console.log("[theme-utils] Initializing theme switcher");
+  console.log("[theme-utils] Default theme from HTML:", defaultTheme);
+
+  // Restore persisted theme on page load, but only if it's different from the default
+  const savedTheme = localStorage.getItem(storageKey);
+  const themeToApply = savedTheme || defaultTheme;
+  console.log("[theme-utils] Saved theme in storage:", savedTheme);
+  console.log("[theme-utils] Applying theme:", themeToApply);
+  applyTheme(themeToApply);
+
+  // Listen for theme switcher button clicks
+  document.addEventListener("click", (e) => {
+    const target = e.target;
+    const btn = target.closest(selector);
+
+    if (!btn) return;
+
+    const themeName = btn.getAttribute("data-theme");
+    if (themeName) {
+      console.log("[theme-utils] Switching to theme:", themeName);
+      applyTheme(themeName);
+      // Only persist if different from default (don't clutter storage with defaults)
+      if (themeName !== defaultTheme) {
+        localStorage.setItem(storageKey, themeName);
+      } else {
+        localStorage.removeItem(storageKey);
+      }
+    }
+  });
+}
+
+/**
+ * Apply theme to document root
+ * @param {string} themeName
+ */
+function applyTheme(themeName) {
+  document.documentElement.setAttribute("data-theme", themeName);
+}
+
+/**
+ * Programmatically set the current theme
+ * @param {string} themeName
+ * @param {string} storageKey
+ */
+export function setTheme(themeName, storageKey = "stnd-theme-global") {
+  applyTheme(themeName);
+  localStorage.setItem(storageKey, themeName);
+}
+
+/**
+ * Get the currently applied theme
+ * @param {string} storageKey
+ * @returns {string}
+ */
+export function getCurrentTheme(storageKey = "stnd-theme-global") {
+  return localStorage.getItem(storageKey) || "garden";
+}

package/theme-utils/index.module.js

@@ -0,0 +1,27 @@
+/**
+ * Theme Utils Module
+ * Global theme switcher for managing data-theme attribute across the site.
+ *
+ * Auto-initializes on page load. No manual setup needed.
+ *
+ * Usage — just add buttons anywhere:
+ *   <button data-theme="technical">Switch to Technical</button>
+ */
+
+export default {
+  id: "stnd-theme-utils",
+  name: "Stnd :: Theme Utils",
+  description: "Global theme switcher — apply themes via data-theme buttons",
+
+  scripts: [
+    {
+      src: "./client.js",
+      init: "initThemeSwitcher",
+    },
+  ],
+
+  metadata: {
+    version: "0.1.0",
+    tags: ["theme", "switcher", "css"],
+  },
+};