astroidjs 0.12.1 → 0.13.0

package/dist/queues/webhook.d.ts

@@ -1,6 +1,6 @@
 import type { AstroidQueueMessage } from "./messages.js";
 /**
- * The queue producer surface used here — structural, so a real `Queue<T>`
+ * The queue producer surface used here—structural, so a real `Queue<T>`
  * binding satisfies it without astroid depending on the Workers types.
  *
  * `Promise<unknown>` rather than `Promise<void>`: Cloudflare's `Queue.send`
@@ -15,18 +15,18 @@ export interface WebhookVerifyInput {
     raw: string;
     headers: Headers;
     url: URL;
-    /** The signing secret — already checked to be real by the caller. */
+    /** The signing secret—already checked to be real by the caller. */
     secret: string;
 }
 export interface WebhookRouteOptions {
-    /** Which integration this endpoint serves — carried into the message. */
+    /** Which integration this endpoint serves—carried into the message. */
     provider: string;
     /**
      * The signing secret, or `null` when unprovisioned. Read it with
      * `readModuleSecret` so a placeholder counts as absent.
      */
     secret: string | null;
-    /** Signature check over the raw body — e.g. `verifySquareSignature`. */
+    /** Signature check over the raw body—for example, `verifySquareSignature`. */
     verify: (input: WebhookVerifyInput) => boolean | Promise<boolean>;
     /** The queue binding, or null/undefined when Queues aren't provisioned. */
     queue?: QueueProducer | null;
@@ -38,7 +38,7 @@ export interface WebhookRouteOptions {
     eventType?: (payload: unknown) => string;
     /**
      * Decide whether an event is worth queueing at all. Returning false acks the
-     * delivery without enqueuing — the provider is satisfied and the consumer
+     * delivery without enqueuing—the provider is satisfied and the consumer
      * isn't woken for an event nothing acts on.
      */
     accept?: (type: string, payload: unknown) => boolean;

package/dist/queues/webhook.js

@@ -4,7 +4,7 @@
 //
 // All three sites wrote this route the same way, and the ordering is the part
 // worth encoding. **Verify the HMAC over the raw body before parsing anything.**
-// Not for style — parsing first means an unauthenticated caller can reach the
+// Not for style—parsing first means an unauthenticated caller can reach the
 // JSON parser and everything downstream of it, and re-serializing a parsed body
 // to check the signature is how signature checks quietly stop checking anything.
 // So the raw text is read once, verified, and only then parsed.
@@ -58,7 +58,7 @@ export async function handleWebhook(request, url, options) {
         payload = JSON.parse(raw);
     }
     catch {
-        // Also terminal — a body that isn't JSON now won't become JSON later.
+        // Also terminal—a body that isn't JSON now won't become JSON later.
         return text("Invalid JSON", 400);
     }
     const type = (options.eventType ?? defaultEventType)(payload);
@@ -76,6 +76,6 @@ export async function handleWebhook(request, url, options) {
         return text("Queue unavailable", 503);
     }
     // 202, not 200: the work hasn't happened yet, it's been accepted. That's the
-    // entire point of enqueuing — the response returns before the consumer runs.
+    // entire point of enqueuing—the response returns before the consumer runs.
     return text("Accepted", 202);
 }

package/dist/realtime/scaffold.d.ts

@@ -10,12 +10,12 @@ export declare const ASTROID_REALTIME_MIGRATION_TAG = "v1";
 /** Is the realtime module switched on for this project? */
 export declare function usesRealtime(config: AstroidConfig): boolean;
 /**
- * `src/edit-session.ts` — the site-owned Durable Object subclass.
+ * `src/edit-session.ts`—the site-owned Durable Object subclass.
  *
  * Scaffold-once: `persist` is where a project decides what a flush means, and
  * the lock/field sets are tuning. What Astroid fixes is the delegation shape,
  * because getting it wrong fails in ways that look like anything but a bug in
- * this file — a missing `webSocketClose` leaks presence forever, a non-lazy
+ * this file—a missing `webSocketClose` leaks presence forever, a non-lazy
  * session breaks after the first hibernation wake.
  *
  * Returns null when the project has no realtime module.
@@ -23,8 +23,8 @@ export declare function usesRealtime(config: AstroidConfig): boolean;
 export declare function generateAstroidEditSession(config: AstroidConfig): string | null;
 /**
  * The `CloudflareEnv` member the realtime module adds, as a block
- * `create-astroid` substitutes into `src/env.d.ts`. Empty without the module —
- * a project that types a binding its wrangler.jsonc never creates is making a
+ * `create-astroid` substitutes into `src/env.d.ts`. Empty without the module—a
+ * project that types a binding its wrangler.jsonc never creates is making a
  * promise it doesn't keep.
  */
 export declare function generateAstroidRealtimeEnv(config: AstroidConfig): string;

package/dist/realtime/scaffold.js

@@ -5,7 +5,7 @@
 //
 // The package description has claimed "multi-editor sites" since 0.1.0, and this
 // is the half that makes it true for two people on the SAME page. (The other
-// axis — multi-EDITOR, i.e. an org of accounts — was always real.) Without it
+// axis—multi-EDITOR, that is, an org of accounts—was always real.) Without it
 // two editors on one page clobber each other; the server-side draft merge
 // narrows the window but there is no live channel, no presence, and no signal
 // that someone else is in the same field.
@@ -13,15 +13,15 @@
 // What Astroid generates and what it deliberately does NOT:
 //
 //   - The DO SUBCLASS is scaffold-once (`src/edit-session.ts`), because it must
-//     import `cloudflare:workers` — a runtime-only specifier the toolkit can't
-//     carry — and because its `persist` is the seam a project tunes. Louise
+//     import `cloudflare:workers`—a runtime-only specifier the toolkit can't
+//     carry—and because its `persist` is the seam a project tunes. Louise
 //     ships the session LOGIC it delegates to; this is the boilerplate around it.
 //   - The wrangler `durable_objects` binding + `migrations` block, which is the
 //     part nobody gets right from memory: a DO class needs a migration tag, and
 //     a SQLite-backed one needs `new_sqlite_classes` rather than `new_classes`.
 //   - The `realtimeRoute` upgrade endpoint, in the generated worker.
 //
-// Persistence goes through `applySaveDraft` — the SAME path the fetch auto-save
+// Persistence goes through `applySaveDraft`—the SAME path the fetch auto-save
 // uses. One write path, per the ADR: the DO is a new front end to it, not a
 // parallel store, so drafts, version history, publish, and read-your-writes all
 // stay intact.
@@ -38,12 +38,12 @@ export function usesRealtime(config) {
     return (config.modules ?? []).includes("realtime");
 }
 /**
- * `src/edit-session.ts` — the site-owned Durable Object subclass.
+ * `src/edit-session.ts`—the site-owned Durable Object subclass.
  *
  * Scaffold-once: `persist` is where a project decides what a flush means, and
  * the lock/field sets are tuning. What Astroid fixes is the delegation shape,
  * because getting it wrong fails in ways that look like anything but a bug in
- * this file — a missing `webSocketClose` leaks presence forever, a non-lazy
+ * this file—a missing `webSocketClose` leaks presence forever, a non-lazy
  * session breaks after the first hibernation wake.
  *
  * Returns null when the project has no realtime module.
@@ -143,8 +143,8 @@ export function generateAstroidEditSession(config) {
 }
 /**
  * The `CloudflareEnv` member the realtime module adds, as a block
- * `create-astroid` substitutes into `src/env.d.ts`. Empty without the module —
- * a project that types a binding its wrangler.jsonc never creates is making a
+ * `create-astroid` substitutes into `src/env.d.ts`. Empty without the module—a
+ * project that types a binding its wrangler.jsonc never creates is making a
  * promise it doesn't keep.
  */
 export function generateAstroidRealtimeEnv(config) {

package/dist/schema/collections.d.ts

@@ -2,18 +2,18 @@ import { type CollectionConfig, type ContentConfig } from "louise-toolkit/conten
 import type { AstroidConfig } from "../config.js";
 /**
  * Return a copy of a `pages` write payload with its `sections` rich-text fields
- * sanitized against the project media base — a no-op when the write carries no
+ * sanitized against the project media base—a no-op when the write carries no
  * `sections`. Pure; leaves every other field (and a partial PATCH's absent ones)
  * untouched.
  *
  * Exported because two write paths need it: the collection's `beforeChange` hook
- * below, AND the raw `pagesRoute` (which does not run collection hooks — see
+ * below, AND the raw `pagesRoute` (which does not run collection hooks—see
  * {@link astroidPagesWriteHooks}).
  */
 export declare function sanitizeAstroidPageSections(config: AstroidConfig, data: Record<string, unknown>): Record<string, unknown>;
 /**
  * Validate the (already-sanitized) `sections` of a `pages` write against the
- * catalog, throwing `LouiseValidationError` — an unknown `_type`, a field of the
+ * catalog, throwing `LouiseValidationError`—an unknown `_type`, a field of the
  * wrong shape, or a setting outside its declared options is rejected with a 422
  * carrying the per-field violations. A no-op when the write carries no
  * `sections`, so a partial PATCH of other fields isn't spuriously validated.
@@ -23,7 +23,7 @@ export declare function assertAstroidPageSections(config: AstroidConfig, data: R
  * The write-time hooks the raw `pagesRoute` (louise-toolkit/editor) needs to
  * enforce the same section contract as the draft path.
  *
- * `pagesRoute` writes straight to the table and — unlike `versionsRoute` — takes
+ * `pagesRoute` writes straight to the table and—unlike `versionsRoute`—takes
  * no collection config, so it never runs the `beforeChange` hook below. Left
  * bare (as it was), a direct `POST` / `PATCH /api/louise/pages/:id` persists an
  * unknown section `_type`, a setting outside its options, or unsanitized section
@@ -47,8 +47,8 @@ export declare function astroidPagesWriteHooks(config: AstroidConfig): {
 export declare function astroidPagesCollection(config: AstroidConfig): CollectionConfig;
 /**
  * The Louise `ContentConfig` for an Astroid project. Today: the `pages`
- * collection. Archetype- and module-specific collections (e.g. a portfolio
- * `gallery`) layer in here as they land — this is the single place that maps
+ * collection. Archetype- and module-specific collections (for example, a portfolio
+ * `gallery`) layer in here as they land—this is the single place that maps
  * brand config down to Louise content.
  */
 export declare function astroidContentConfig(config: AstroidConfig): ContentConfig;

package/dist/schema/collections.js

@@ -3,12 +3,12 @@
 // Astroid → Louise content mapping. This is the opinionated seam: given an
 // Astroid project config, derive the Louise `CollectionConfig`(s) a site needs.
 // Astroid decides WHICH collections and fields exist (its opinions); Louise's
-// codegen decides HOW they become D1 tables. Dependency flows one way — this
+// codegen decides HOW they become D1 tables. Dependency flows one way—this
 // imports `louise-toolkit/content`, never the reverse.
 // `content/define` and `content/sections` rather than the `content` barrel: the
 // barrel eagerly pulls the codegen/localApi/validation chunks, and those import
-// drizzle-orm for real — an *optional* peer of louise-toolkit, so importing it
-// here would force a package on consumers who only DESCRIBE content (e.g.
+// drizzle-orm for real—an *optional* peer of louise-toolkit, so importing it
+// here would force a package on consumers who only DESCRIBE content (for example,
 // create-astroid's schema generators, which call this function but never run the
 // beforeChange hook below). Both entries are drizzle-free: `content/define` for
 // the config types/builders, and `content/sections` for the write-time section
@@ -18,23 +18,23 @@
 // drizzle-free.
 //
 // Note the entry named here is the PUBLIC subpath. Astroid must never reach into
-// `louise-toolkit/src/...` — that resolves only because the workspace aliases the
+// `louise-toolkit/src/...`—that resolves only because the workspace aliases the
 // package to its source, and would break the moment astroid consumes a published
 // tarball (#327).
 import { defineCollection, } from "louise-toolkit/content/define";
 import { assertValidSections, sanitizeSectionsRichText } from "louise-toolkit/content/sections";
 import { sanitizeRichHtml } from "louise-toolkit/security";
-// The catalog is the single declaration of what a section IS — the same object
+// The catalog is the single declaration of what a section IS—the same object
 // the on-canvas editor mounts with and this hook validates against. It lives
 // beside the components (it ships as source for them) and is imported here so
 // the two can't drift.
 import { astroidSectionCatalog } from "../components/sections.js";
 /**
- * The opinionated `pages` collection — the EDITABLE page fields, versioned
+ * The opinionated `pages` collection—the EDITABLE page fields, versioned
  * drafts, and full-text search. Keyed to the same names as Louise's `pagesColumns`
  * so a publish's `.set()` maps straight onto the physical columns; bookkeeping
  * columns (`id`/`status`/timestamps/`publishedVersionId`) live on the table via
- * `pagesColumns`, never here — matching the site's `pages-collection.ts`.
+ * `pagesColumns`, never here—matching the site's `pages-collection.ts`.
  *
  * Validated by `defineCollection` at build time, so a malformed field shape throws
  * here rather than at codegen.
@@ -58,21 +58,21 @@ function resolveSectionCatalog(config) {
  * declaring a `blocks` policy, no block is ever reached.
  *
  * It is NOT optional once a site does declare one. Unlike the section catalog
- * there's no built-in fallback to borrow — block types are wholly site-defined —
- * so an unset catalog means every block `_type` reads as unknown and the write
- * 422s, and block rich text goes unsanitized because its def can't be resolved.
+ * there's no built-in fallback to borrow—block types are wholly site-defined—so
+ * an unset catalog means every block `_type` reads as unknown and the write
+ * returns 422, and block rich text goes unsanitized because its def can't be resolved.
  */
 function resolveBlockCatalog(config) {
     return config.blockCatalog ?? {};
 }
 /**
  * Return a copy of a `pages` write payload with its `sections` rich-text fields
- * sanitized against the project media base — a no-op when the write carries no
+ * sanitized against the project media base—a no-op when the write carries no
  * `sections`. Pure; leaves every other field (and a partial PATCH's absent ones)
  * untouched.
  *
  * Exported because two write paths need it: the collection's `beforeChange` hook
- * below, AND the raw `pagesRoute` (which does not run collection hooks — see
+ * below, AND the raw `pagesRoute` (which does not run collection hooks—see
  * {@link astroidPagesWriteHooks}).
  */
 export function sanitizeAstroidPageSections(config, data) {
@@ -84,7 +84,7 @@ export function sanitizeAstroidPageSections(config, data) {
 }
 /**
  * Validate the (already-sanitized) `sections` of a `pages` write against the
- * catalog, throwing `LouiseValidationError` — an unknown `_type`, a field of the
+ * catalog, throwing `LouiseValidationError`—an unknown `_type`, a field of the
  * wrong shape, or a setting outside its declared options is rejected with a 422
  * carrying the per-field violations. A no-op when the write carries no
  * `sections`, so a partial PATCH of other fields isn't spuriously validated.
@@ -102,7 +102,7 @@ export async function assertAstroidPageSections(config, data, operation = "updat
  * The write-time hooks the raw `pagesRoute` (louise-toolkit/editor) needs to
  * enforce the same section contract as the draft path.
  *
- * `pagesRoute` writes straight to the table and — unlike `versionsRoute` — takes
+ * `pagesRoute` writes straight to the table and—unlike `versionsRoute`—takes
  * no collection config, so it never runs the `beforeChange` hook below. Left
  * bare (as it was), a direct `POST` / `PATCH /api/louise/pages/:id` persists an
  * unknown section `_type`, a setting outside its options, or unsanitized section
@@ -119,12 +119,12 @@ export async function assertAstroidPageSections(config, data, operation = "updat
 export function astroidPagesWriteHooks(config) {
     const mediaBase = pageMediaBase(config);
     return {
-        // `body` is a richField, so it goes through pagesRoute's own sanitize seam —
-        // with the project media base, matching the hook rather than the toolkit
+        // `body` is a richField, so it goes through pagesRoute's own sanitize seam—with
+        // the project media base, matching the hook rather than the toolkit
         // default sanitizer that knows no media base.
         sanitize: (html) => sanitizeRichHtml(html, { mediaBase }),
         // `sections` is not a richField, so it's sanitized here in the transform,
-        // which pagesRoute runs BEFORE validate — the hook's sanitize-then-validate
+        // which pagesRoute runs BEFORE validate—the hook's sanitize-then-validate
         // order.
         transform: (data) => sanitizeAstroidPageSections(config, data),
         validate: (data, ctx) => assertAstroidPageSections(config, data, ctx.operation),
@@ -132,14 +132,14 @@ export function astroidPagesWriteHooks(config) {
 }
 export function astroidPagesCollection(config) {
     // The `body` is rich HTML edited in place (`<Editable type="richtext">`) and
-    // staged as a draft, so sanitize it on every write — never store raw HTML. A
+    // staged as a draft, so sanitize it on every write—never store raw HTML. A
     // pasted `<img>` pointing off-origin (a hotlink) is dropped: body images must
     // live in the media library. Mirrors the reference site's pages-collection hook.
     const mediaBase = pageMediaBase(config);
     const fields = {};
     fields.slug = { type: "text", required: true };
     fields.title = { type: "text", required: true };
-    // Sanitized rich HTML (a string), not TipTap JSON — matches `pagesColumns.body`.
+    // Sanitized rich HTML (a string), not TipTap JSON—matches `pagesColumns.body`.
     fields.body = { type: "text" };
     fields.seoTitle = { type: "text" };
     fields.seoDescription = { type: "text" };
@@ -147,7 +147,7 @@ export function astroidPagesCollection(config) {
     fields.noindex = { type: "checkbox" };
     fields.sortOrder = { type: "number" };
     // Structured page-builder blocks (the editable home), deep-validated against
-    // the section catalog on write — see the beforeChange hook below.
+    // the section catalog on write—see the beforeChange hook below.
     fields.sections = { type: "json" };
     return defineCollection({
         slug: "pages",
@@ -163,7 +163,7 @@ export function astroidPagesCollection(config) {
                     // validating the raw value would pass content the sanitizer is about
                     // to change. Same order as the body above. Both steps are shared with
                     // the raw pagesRoute (see astroidPagesWriteHooks) so the two write
-                    // paths can't diverge — the sanitize throws nothing, the assert throws
+                    // paths can't diverge—the sanitize throws nothing, the assert throws
                     // LouiseValidationError → 422 with per-field violations.
                     next = sanitizeAstroidPageSections(config, next);
                     await assertAstroidPageSections(config, next, "update");
@@ -177,8 +177,8 @@ export function astroidPagesCollection(config) {
 }
 /**
  * The Louise `ContentConfig` for an Astroid project. Today: the `pages`
- * collection. Archetype- and module-specific collections (e.g. a portfolio
- * `gallery`) layer in here as they land — this is the single place that maps
+ * collection. Archetype- and module-specific collections (for example, a portfolio
+ * `gallery`) layer in here as they land—this is the single place that maps
  * brand config down to Louise content.
  */
 export function astroidContentConfig(config) {

package/dist/schema/framework.d.ts

@@ -1,7 +1,7 @@
 import type { AstroidConfig } from "../config.js";
 /** A ready-made table Astroid re-exports from `louise-toolkit/db`. */
 export type AstroidFrameworkTable = "inquiries" | "media" | "siteSettings";
-/** True when the site captures inquiries — a contact section or a
+/** True when the site captures inquiries—a contact section or a
  *  wholesale-inquiry module. Shared by table selection (here) and route selection
  *  (the worker route plan). */
 export declare function capturesInquiries(config: AstroidConfig): boolean;

package/dist/schema/framework.js

@@ -5,11 +5,11 @@
 // tables never drift from Louise. `media` and `siteSettings` are universal;
 // `inquiries` is pulled in only when a brand actually captures inquiries (a
 // contact section, or a wholesale-inquiry module).
-/** True when the site captures inquiries — a contact section or a
+/** True when the site captures inquiries—a contact section or a
  *  wholesale-inquiry module. Shared by table selection (here) and route selection
  *  (the worker route plan). */
 export function capturesInquiries(config) {
-    // Explicit override wins — a site whose inquiry surface is a bespoke section
+    // Explicit override wins—a site whose inquiry surface is a bespoke section
     // (coracle's custom `contactForm`) can't be detected from the built-in
     // vocabulary, so it says so directly.
     if (typeof config.inquiries === "boolean")

package/dist/schema/generate.js

@@ -1,6 +1,6 @@
 // Copyright (c) 2026 BowenLabs. Astroid is MIT licensed.
 //
-// generateAstroidSchema — emit the Drizzle schema source (a site's `schema.ts`)
+// generateAstroidSchema—emit the Drizzle schema source (a site's `schema.ts`)
 // from an Astroid config. This is the boilerplate every Louise site hand-writes:
 // compose the framework `pagesColumns` into a `pages` table, add the versions
 // table + publish pointer, and re-export the ready-made framework tables. Astroid
@@ -24,7 +24,7 @@ export function generateAstroidSchema(config) {
     // One import brings them all in (matching the site) so nothing is unused.
     const dbImports = [...framework, "pagesColumns"].sort();
     const catalog = generateCatalogTable(config);
-    // Only import the column builders the emitted source actually uses — an
+    // Only import the column builders the emitted source actually uses—an
     // unused import is a lint error in the project we're generating into, and a
     // missing one (`real`, from the catalog's price/sortOrder) is a type error.
     const drizzleImports = ["integer", "sqliteTable", "text"];

package/dist/schema/index.js

@@ -1,6 +1,6 @@
 // Copyright (c) 2026 BowenLabs. Astroid is MIT licensed.
 //
-// Schema generation — config → Louise content config → Drizzle schema source.
+// Schema generation—config → Louise content config → Drizzle schema source.
 export * from "./collections.js";
 export * from "./framework.js";
 export * from "./generate.js";

package/dist/secrets.d.ts

@@ -2,7 +2,7 @@ import { type SecretSource } from "louise-toolkit/security";
 export type { SecretSource };
 /**
  * The placeholder every Astroid scaffold seeds its unprovisioned secrets with.
- * Reading it back means "not configured yet", never a credential — the value is
+ * Reading it back means "not configured yet", never a credential—the value is
  * deliberately loud so it is obvious in a Secrets Store listing or a log line.
  *
  * It matches the sentinel `louise-toolkit`'s Turnstile gate already recognizes,
@@ -11,7 +11,7 @@ export type { SecretSource };
 export declare const ASTROID_SECRET_PLACEHOLDER = "DUMMY_REPLACE_ME";
 /**
  * Read one secret under the Astroid convention: `null` unless it holds a real,
- * non-placeholder value. Thin by design — the reason to call this rather than
+ * non-placeholder value. Thin by design—the reason to call this rather than
  * `readSecret` directly is that it binds Astroid's sentinel for you.
  */
 export declare function readModuleSecret(source: SecretSource): Promise<string | null>;
@@ -19,14 +19,14 @@ export declare function readModuleSecret(source: SecretSource): Promise<string |
 export interface ModuleSecrets<K extends string> {
     /**
      * True when EVERY secret the module declared resolved to a real value. The
-     * module's `isConfigured()` should be exactly this — partial provisioning is
+     * module's `isConfigured()` should be exactly this—partial provisioning is
      * treated as dormant, since a half-configured integration fails at the worst
      * possible moment (mid-checkout) rather than at boot.
      */
     configured: boolean;
     /** Each declared secret's resolved value, or `null` where unprovisioned. */
     values: Record<K, string | null>;
-    /** The still-unprovisioned names, in declaration order — the "why not" list. */
+    /** The still-unprovisioned names, in declaration order—the "why not" list. */
     missing: K[];
 }
 /**
@@ -46,9 +46,9 @@ export interface ModuleSecrets<K extends string> {
  */
 export declare function resolveModuleSecrets<K extends string>(sources: Record<K, SecretSource>): Promise<ModuleSecrets<K>>;
 /**
- * A one-line, human-readable status for a module — what `astroid doctor`, a dev
+ * A one-line, human-readable status for a module—what `astroid doctor`, a dev
  * server banner, or a health endpoint should print. Naming the missing secrets
  * is the whole point: "commerce is off" sends someone reading source, "commerce
- * is dormant — set SQUARE_ACCESS_TOKEN" does not.
+ * is dormant—set SQUARE_ACCESS_TOKEN" does not.
  */
 export declare function describeModuleStatus<K extends string>(module: string, status: ModuleSecrets<K>): string;

package/dist/secrets.js

@@ -5,7 +5,7 @@
 // Astroid's optional modules are opt-in at the CONFIG level but not at the
 // account level: switching `commerce` on in `defineAstroid` must not require a
 // Square account before `pnpm dev` will boot. So every module here follows one
-// rule — a module whose secrets are unprovisioned is DORMANT: it renders, it
+// rule—a module whose secrets are unprovisioned is DORMANT: it renders, it
 // serves, it says out loud that it is simulated, and it never calls upstream
 // with a dummy credential.
 //
@@ -13,7 +13,7 @@
 // absent / unreadable / empty / a placeholder reads as `null`). What lives here
 // is the *convention* over it, which is Astroid's opinion, not the toolkit's:
 //
-//   1. ONE sentinel — `ASTROID_SECRET_PLACEHOLDER` — seeded by `create-astroid`
+//   1. ONE sentinel—`ASTROID_SECRET_PLACEHOLDER`—seeded by `create-astroid`
 //      into every secret a scaffold declares, so a fresh clone has a complete,
 //      valid binding set and zero real credentials.
 //   2. `resolveModuleSecrets` collapses a module's whole secret set into one
@@ -24,7 +24,7 @@
 import { readSecret } from "louise-toolkit/security";
 /**
  * The placeholder every Astroid scaffold seeds its unprovisioned secrets with.
- * Reading it back means "not configured yet", never a credential — the value is
+ * Reading it back means "not configured yet", never a credential—the value is
  * deliberately loud so it is obvious in a Secrets Store listing or a log line.
  *
  * It matches the sentinel `louise-toolkit`'s Turnstile gate already recognizes,
@@ -33,7 +33,7 @@ import { readSecret } from "louise-toolkit/security";
 export const ASTROID_SECRET_PLACEHOLDER = "DUMMY_REPLACE_ME";
 /**
  * Read one secret under the Astroid convention: `null` unless it holds a real,
- * non-placeholder value. Thin by design — the reason to call this rather than
+ * non-placeholder value. Thin by design—the reason to call this rather than
  * `readSecret` directly is that it binds Astroid's sentinel for you.
  */
 export function readModuleSecret(source) {
@@ -68,10 +68,10 @@ export async function resolveModuleSecrets(sources) {
     return { configured: missing.length === 0, values, missing };
 }
 /**
- * A one-line, human-readable status for a module — what `astroid doctor`, a dev
+ * A one-line, human-readable status for a module—what `astroid doctor`, a dev
  * server banner, or a health endpoint should print. Naming the missing secrets
  * is the whole point: "commerce is off" sends someone reading source, "commerce
- * is dormant — set SQUARE_ACCESS_TOKEN" does not.
+ * is dormant—set SQUARE_ACCESS_TOKEN" does not.
  */
 export function describeModuleStatus(module, status) {
     if (status.configured)

package/dist/security/csp-origins.d.ts

@@ -11,6 +11,6 @@ export declare function astroidCspOrigins(config: AstroidConfig): Required<CspOr
  * `'unsafe-inline'` is required (Louise's data-driven `style=""` carriers and
  * the editor's runtime `<style>`), which is why Astro can't own this directive:
  * per spec a single hash here voids `'unsafe-inline'`. Module and config
- * `style` origins ride along, e.g. the Square SDK's own stylesheet.
+ * `style` origins ride along, for example, the Square SDK's own stylesheet.
  */
 export declare function astroidCspStyleSrc(config: AstroidConfig): string;

package/dist/security/csp-origins.js

@@ -31,11 +31,11 @@ const COMMERCE_ORIGINS = {
 };
 // Turnstile. Always allowed, not gated on the captcha being configured: the
 // scaffold ships the widget dormant (see the dormant-until-provisioned
-// convention) and it must not need a rebuild to switch on — CSP is baked at
+// convention) and it must not need a rebuild to switch on—CSP is baked at
 // build time, the secret is a runtime value.
 const TURNSTILE = turnstileCsp();
 // The map module. MapLibre spins its tile-decoding workers up from blob: URLs,
-// so `worker-src blob:` is not optional — without it the map renders an empty
+// so `worker-src blob:` is not optional—without it the map renders an empty
 // canvas and the console fills with worker-construction errors.
 //
 // Nothing else is needed, and that's the whole argument for the self-hosted
@@ -69,7 +69,7 @@ export function astroidCspOrigins(config) {
  * `'unsafe-inline'` is required (Louise's data-driven `style=""` carriers and
  * the editor's runtime `<style>`), which is why Astro can't own this directive:
  * per spec a single hash here voids `'unsafe-inline'`. Module and config
- * `style` origins ride along, e.g. the Square SDK's own stylesheet.
+ * `style` origins ride along, for example, the Square SDK's own stylesheet.
  */
 export function astroidCspStyleSrc(config) {
     return ["'self'", "'unsafe-inline'", ...astroidCspOrigins(config).style].join(" ");

package/dist/security/rate-rules.d.ts

@@ -2,7 +2,7 @@ import type { RateRule } from "louise-toolkit/security";
 import type { AstroidConfig } from "../config.js";
 export type { RateRule };
 /**
- * Base path the customer/portal Better Auth instance mounts at — its own
+ * Base path the customer/portal Better Auth instance mounts at—its own
  * handler, separate from the editor's `/api/auth`. Fixed by Astroid so the rate
  * rules, the middleware, and the portal routes can't drift apart.
  */
@@ -15,7 +15,7 @@ export declare const ASTROID_CHECKOUT_PATH = "/api/checkout";
  * checkout when commerce is configured.
  *
  * Rules are matched first-wins, and `security.rateRules` from the config are
- * placed FIRST — so a site tightens or loosens any default by declaring its own
+ * placed FIRST—so a site tightens or loosens any default by declaring its own
  * rule for that path, rather than losing the whole set to override one budget.
  */
 export declare function astroidRateRules(config: AstroidConfig): RateRule[];

package/dist/security/rate-rules.js

@@ -5,26 +5,26 @@
 // The limiter mechanism lives in `louise-toolkit/security` and is deliberately
 // unopinionated: which routes, and which budgets, are policy. But the policy
 // turned out not to vary. All three consuming sites independently wrote the same
-// `RateRule[]` — the same public POST surfaces, the same 10-minute windows,
-// budgets within a factor of one of each other — differing only where the site
+// `RateRule[]`—the same public POST surfaces, the same 10-minute windows,
+// budgets within a factor of one of each other—differing only where the site
 // had a surface the others didn't (a portal, a checkout). That is a default, not
 // a per-site decision, so Astroid derives the whole set from the config.
 //
 // What's in scope: the public, UNAUTHENTICATED POST surfaces. Editor endpoints
-// (`/api/louise/*`) are session-gated and stay out on purpose — a limiter that
+// (`/api/louise/*`) are session-gated and stay out on purpose—a limiter that
 // can lock the owner out of their own studio is worse than the abuse it stops.
 // The contact form is also absent by design: it's a worker route with its own
 // per-form limiter, and worker routes are matched before Astro's middleware ever
 // runs, so a rule here would never fire.
 /**
- * Base path the customer/portal Better Auth instance mounts at — its own
+ * Base path the customer/portal Better Auth instance mounts at—its own
  * handler, separate from the editor's `/api/auth`. Fixed by Astroid so the rate
  * rules, the middleware, and the portal routes can't drift apart.
  */
 export const ASTROID_PORTAL_BASE_PATH = "/api/portal-auth";
 /** Path the commerce module's checkout POSTs to. */
 export const ASTROID_CHECKOUT_PATH = "/api/checkout";
-/** Ten minutes. Every default budget uses this window — long enough that a
+/** Ten minutes. Every default budget uses this window—long enough that a
  *  burst can't wait it out, short enough that a false positive self-heals. */
 const WINDOW = 600;
 const exact = (path) => (p) => p === path;
@@ -34,7 +34,7 @@ const exact = (path) => (p) => p === path;
  * checkout when commerce is configured.
  *
  * Rules are matched first-wins, and `security.rateRules` from the config are
- * placed FIRST — so a site tightens or loosens any default by declaring its own
+ * placed FIRST—so a site tightens or loosens any default by declaring its own
  * rule for that path, rather than losing the whole set to override one budget.
  */
 export function astroidRateRules(config) {
@@ -62,9 +62,9 @@ export function astroidRateRules(config) {
     if (config.portal?.enabled) {
         // The portal's mount is configurable (a site may already ship a second
         // instance at its own path), so the credential-surface rules must track the
-        // resolved base path, not the default constant — mirrors `astroidPortal`.
+        // resolved base path, not the default constant—mirrors `astroidPortal`.
         const base = config.portal.basePath ?? ASTROID_PORTAL_BASE_PATH;
-        // Customer credentials, unlike the editor's, are password-based — so these
+        // Customer credentials, unlike the editor's, are password-based—so these
         // guard credential stuffing and enumeration, not just mail volume.
         rules.push({
             name: "portal-signup",

package/dist/seo/resolve.d.ts

@@ -8,7 +8,7 @@ export interface AstroidSeoSettings {
     tagline?: string | null;
     metaDescription?: string | null;
     defaultOgImageUrl?: string | null;
-    /** Site-wide kill switch — noindex every page (staging, pre-launch). */
+    /** Site-wide kill switch—noindex every page (staging, pre-launch). */
     disableIndexing?: boolean | null;
 }
 /** Per-page SEO: an editor's overrides, or a built-in page's own defaults. */
@@ -24,7 +24,7 @@ export interface PageSeoInput {
     noindex?: boolean | null;
 }
 export interface AstroidSeoOptions {
-    /** Canonical URL of the page being rendered — absolute. */
+    /** Canonical URL of the page being rendered—absolute. */
     canonical: string;
     /**
      * Title template, `%s` standing in for the page title. Applied ONLY when the
@@ -33,15 +33,15 @@ export interface AstroidSeoOptions {
     titleTemplate?: string;
     /** `@<handle>` for Twitter/X card attribution. */
     twitterHandle?: string;
-    /** OG locale, e.g. `"en_US"`. */
+    /** OG locale, for example, `"en_US"`. */
     locale?: string;
 }
 /** Everything a `<head>` needs, fully resolved and absolute. */
 export interface ResolvedSeo {
-    /** Final `<title>` — templated when the page supplied one. */
+    /** Final `<title>`—templated when the page supplied one. */
     title: string;
     /** Untemplated page title, for OG/Twitter (which shouldn't carry the site
-     *  suffix twice — the OG `site_name` already says it). */
+     *  suffix twice—the OG `site_name` already says it). */
     bareTitle: string;
     description?: string;
     canonical: string;