astroidjs 0.12.1 → 0.14.0

package/dist/worker/generate.js

@@ -1,6 +1,6 @@
 // Copyright (c) 2026 BowenLabs. Astroid is MIT licensed.
 //
-// generateAstroidWorker / generateAstroidMiddleware — emit the Cloudflare Worker
+// generateAstroidWorker / generateAstroidMiddleware—emit the Cloudflare Worker
 // entrypoint and the Astro middleware a Louise site would otherwise hand-write.
 // The worker's editor routes are composed in the fixed order from the route plan
 // (routes.ts), so the "versionsRoute/searchRoute before pagesRoute" collision is
@@ -8,7 +8,7 @@
 //
 // One seam is marked with TODO(astroid) and filled by the auth slice: the
 // `resolveEditor` session resolver. The section-catalog validate + sanitize on
-// the pages routes is wired here — versionsRoute runs it through the collection's
+// the pages routes is wired here—versionsRoute runs it through the collection's
 // beforeChange hook, and pagesRoute (which takes no collection config) through
 // the `astroidPagesWriteHooks` spread, so both write paths enforce one contract.
 import { ASTROID_VITALS_BINDING, generateAstroidCwvQuery } from "../analytics/index.js";
@@ -20,7 +20,7 @@ import { capturesInquiries } from "../schema/framework.js";
 import { astroidCspStyleSrc } from "../security/csp-origins.js";
 import { ASTROID_REWRITE_EXCLUDE, ASTROID_TENANT_PREFIX } from "../tenancy/index.js";
 import { astroidEditorRoutePlan } from "./routes.js";
-// Astroid's default editable site_settings surface — the columns the Settings
+// Astroid's default editable site_settings surface—the columns the Settings
 // panel may write, and which of them hold a media-library image URL.
 //
 // EXPORTED because the generated worker is not the only consumer: the scaffolded
@@ -58,7 +58,7 @@ export function generateAstroidWorker(config) {
     const mediaBase = config.deploy?.mediaBase ?? "/media";
     const seedName = config.theme.name;
     const plan = astroidEditorRoutePlan(config);
-    // `realtimeRoute` lives in `louise-toolkit/realtime`, not `/editor` — it is the
+    // `realtimeRoute` lives in `louise-toolkit/realtime`, not `/editor`—it is the
     // one factory in the plan that isn't an editor route. Importing it with the
     // rest type-checks fine HERE (the plan is just strings) and fails only in the
     // scaffold, which is exactly how it got caught.
@@ -80,7 +80,7 @@ export function generateAstroidWorker(config) {
     const routeCall = (name) => {
         switch (name) {
             case "overview":
-                // `inbox` only when this project captures inquiries — an absent slice
+                // `inbox` only when this project captures inquiries—an absent slice
                 // hides its card, which is right for an archetype with no contact form.
                 return inquiries
                     ? "overviewRoute({ resolveEditor, content: overviewContent, inbox: overviewInbox, health: overviewHealth })"
@@ -101,11 +101,16 @@ export function generateAstroidWorker(config) {
                 // POST/PATCH path would persist an unknown section `_type`, a setting
                 // outside its options, or unsanitized section rich text. See
                 // `astroidPagesWriteHooks`.
-                return 'pagesRoute({ table: pages, resolveEditor, fields: [...DEFAULT_PAGE_FIELDS, "sections"], ...pagesWriteHooks })';
+                //
+                // `versionsTable` makes a DELETE remove the page's version snapshots,
+                // which have no foreign key to the page and would otherwise orphan.
+                // `afterWrite` rebuilds the search index, which plain CRUD writes leave
+                // stale.
+                return 'pagesRoute({ table: pages, versionsTable: pagesVersions, resolveEditor, fields: [...DEFAULT_PAGE_FIELDS, "sections"], ...pagesWriteHooks, afterWrite: reindexPagesSearch })';
             case "save":
                 // No `bufferKv` here, deliberately: `saveRoute` has no such option. It
                 // writes live field saves (title, SEO) straight through, and the draft
-                // buffer belongs to the versioned body — i.e. to versionsRoute.
+                // buffer belongs to the versioned body—that is, to versionsRoute.
                 return 'saveRoute({ resolveEditor, collections: { pages: { table: pages, fields: ["title", "seoTitle", "seoDescription"] } } })';
             case "settings": {
                 // Site-specific keys (config.settings.customKeys) are merged into
@@ -114,20 +119,23 @@ export function generateAstroidWorker(config) {
                 const customArg = (config.settings?.customKeys ?? []).length
                     ? ", customKeys: SETTINGS_CUSTOM_KEYS"
                     : "";
-                return `settingsRoute({ table: siteSettings, resolveEditor, columns: SETTINGS_COLUMNS, imageKeys: SETTINGS_IMAGE_KEYS, mediaBase: MEDIA_BASE${customArg} })`;
+                // The site's sanitize + read hooks (config.settings.hooks), spread last
+                // so they add to the call rather than replace any part of it.
+                const hooksArg = config.settings?.hooks ? ", ...settingsHooks" : "";
+                return `settingsRoute({ table: siteSettings, resolveEditor, columns: SETTINGS_COLUMNS, imageKeys: SETTINGS_IMAGE_KEYS, mediaBase: MEDIA_BASE${customArg}${hooksArg} })`;
             }
             // `aiRunner` rather than `(env) => env.AI`: it reads the binding AND the
             // LOUISE_AI kill switch, so all three assists share one definition of
             // "is generation on?" instead of each re-deriving it. Embeddings keep
-            // binding-presence as their switch — see the helper's comment.
+            // binding-presence as their switch—see the helper's comment.
             case "ai":
                 return "aiRoute({ resolveEditor, ai: aiRunner })";
             case "seoFix":
                 return "seoFixRoute({ table: pages, resolveEditor, ai: aiRunner })";
             case "media": {
                 // `altText` fills a new upload's alt from the image itself. Best-effort
-                // by contract — a model error or a missing binding never fails the
-                // upload — so it costs nothing on a project that doesn't want it.
+                // by contract—a model error or a missing binding never fails the
+                // upload—so it costs nothing on a project that doesn't want it.
                 //
                 // `maxBytes` is emitted only when the site raised it: omitted, the
                 // route keeps louise-toolkit's DEFAULT_MAX_BYTES, so the generated
@@ -138,7 +146,7 @@ export function generateAstroidWorker(config) {
             }
             case "editors":
                 // The editor instance's user table is `louise_`-prefixed (the editor
-                // convention — the unprefixed `user` table is left for a second/portal
+                // convention—the unprefixed `user` table is left for a second/portal
                 // instance). This route takes the table NAME, matching the
                 // `tablePrefix` the scaffolded `src/auth.ts` passes to `getLouiseAuth`.
                 return `editorsRoute({ table: ${JSON.stringify(astroidEditorTable("user"))}, resolveEditor })`;
@@ -159,10 +167,16 @@ export function generateAstroidWorker(config) {
     };
     const lines = [];
     const p = (s = "") => lines.push(s);
-    p("// Generated by astroidjs — do not hand-edit.");
+    p("// Generated by astroidjs—do not hand-edit.");
     p("// Source: your defineAstroid config. The editor route ORDER is fixed by");
-    p("// Astroid to avoid matcher collisions — see each route's note below.");
+    p("// Astroid to avoid matcher collisions—see each route's note below.");
+    p('import { env } from "cloudflare:workers";');
     p('import { handle } from "@astrojs/cloudflare/handler";');
+    p('import type { EditorSession } from "louise-toolkit/auth";');
+    p('import { createLocalApi } from "louise-toolkit/content";');
+    p(inquiries
+        ? 'import { db, inquiriesForm } from "louise-toolkit/db";'
+        : 'import { db } from "louise-toolkit/db";');
     p("import {");
     for (const name of editorImports)
         p(`  ${name},`);
@@ -174,7 +188,7 @@ export function generateAstroidWorker(config) {
         p('import { defineForm } from "louise-toolkit/forms";');
     if (queues)
         p('import { processBatch } from "louise-toolkit/queues";');
-    // Only when a route actually takes a runner — a project with no AI assists
+    // Only when a route actually takes a runner—a project with no AI assists
     // should not import one, and knip would flag it if it did.
     if (plan.some((route) => AI_ROUTES.has(route.name))) {
         p('import { aiRunner } from "louise-toolkit/ai";');
@@ -182,8 +196,6 @@ export function generateAstroidWorker(config) {
     p('import { checkLinks } from "louise-toolkit/browser";');
     p('import { readHealthSummary, summarizeHealth, writeHealthSummary } from "louise-toolkit/health";');
     p('import { composeWorker, isEditRequest, type WorkerRoute, withEdgeCache } from "louise-toolkit/worker";');
-    if (inquiries)
-        p('import { inquiriesForm } from "louise-toolkit/db";');
     p(`import { ${tables.join(", ")} } from "./schema.js";`);
     const astroidImports = [
         "astroidPagesCollection",
@@ -200,17 +212,36 @@ export function generateAstroidWorker(config) {
     p("// from a request; a truthy result authorizes editor writes. A generated auth");
     p("// module is a later slice.");
     p('import { resolveEditor } from "./auth.js";');
+    if (config.pages?.hooks) {
+        p("// Your PAGES seam: a transform and extra reserved slugs for the pages");
+        p("// route. Scaffolded once and yours to edit.");
+        p('import { pagesHooks } from "./pages-hooks.js";');
+    }
+    if (config.settings?.hooks) {
+        p("// Your SETTINGS seam: per-key sanitizers and a GET transform for the");
+        p("// Settings panel. Scaffolded once and yours to edit.");
+        p('import { settingsHooks } from "./settings-hooks.js";');
+    }
     if (queues) {
         p("// Your QUEUE seam: what each message actually does. Scaffolded once and");
-        p("// yours to edit — `astroidQueueHandler` there covers the catalog dispatch.");
+        p("// yours to edit—`astroidQueueHandler` there covers the catalog dispatch.");
         p('import { handleQueueMessage } from "./queue.js";');
     }
     p();
     p(`const MEDIA_BASE = ${JSON.stringify(mediaBase)};`);
     p("const pagesCollection = astroidPagesCollection(astroidConfig);");
     p("// Sanitize + section-catalog validation for the raw pagesRoute, which runs");
-    p("// no collection hook — the same contract versionsRoute gets from the config.");
-    p("const pagesWriteHooks = astroidPagesWriteHooks(astroidConfig);");
+    p("// no collection hook—the same contract versionsRoute gets from the config.");
+    p(config.pages?.hooks
+        ? "const pagesWriteHooks = astroidPagesWriteHooks(astroidConfig, pagesHooks);"
+        : "const pagesWriteHooks = astroidPagesWriteHooks(astroidConfig);");
+    p();
+    p("// pagesRoute writes with plain Drizzle, so the full-text index doesn't see a");
+    p("// title or slug change until something rebuilds it. Best-effort: pagesRoute");
+    p("// swallows a throw here, so a stale index never fails the write itself.");
+    p("async function reindexPagesSearch(editor: EditorSession): Promise<void> {");
+    p("  await createLocalApi(db(env.DB), pages, pagesCollection).reindexSearch({ session: editor });");
+    p("}");
     p();
     p("// Editable site_settings columns the Settings panel may write, and which of");
     p("// them resolve to a media-library asset.");
@@ -230,11 +261,14 @@ export function generateAstroidWorker(config) {
     p("// Delete-safety for the media library: where a media key can be REFERENCED,");
     p("// so deleting an asset that's live on a page warns instead of silently");
     p("// breaking it. Without these the scan has nothing to look at and every");
-    p("// delete reports 'no references'. Column names are SQL, not Drizzle keys —");
+    p("// delete reports 'no references'. Column names are SQL, not Drizzle keys—");
     p("// the scan is raw SQL over the table.");
     p("const MEDIA_REFERENCE_SOURCES = [");
     p('  { collection: "pages", table: "pages", columns: ["body", "sections", "og_image"], labelColumn: "title" },');
-    p('  { collection: "settings", table: "site_settings", columns: ["logo_url", "favicon_url", "default_og_image_url"], labelColumn: "site_name" },');
+    p(
+    // `custom` too: a site's own image settings (settings.imageKeys) live in
+    // that JSON column, and an unscanned column reports 'no references'.
+    '  { collection: "settings", table: "site_settings", columns: ["logo_url", "favicon_url", "default_og_image_url", "custom"], labelColumn: "site_name" },');
     p("];");
     p();
     p();
@@ -246,7 +280,7 @@ export function generateAstroidWorker(config) {
     p();
     p("// The same read, adapted for the overview slice. `readHealthSummary` yields");
     p("// `null` for 'no scan yet' while a slice resolver signals absence with");
-    p("// `undefined` — the two types are otherwise identical, and this one-line");
+    p("// `undefined`—the two types are otherwise identical, and this one-line");
     p("// coercion is the whole difference.");
     p("const overviewHealth = async (env: CloudflareEnv) =>");
     p("  (await readSiteHealth(env)) ?? undefined;");
@@ -256,7 +290,7 @@ export function generateAstroidWorker(config) {
     p();
     p("// The daily scan. Crawls the site's own pages for broken links and counts the");
     p("// two accessibility/SEO gaps that are cheap to compute, then persists one");
-    p("// snapshot for the dashboard to read. Every part degrades on its own — a");
+    p("// snapshot for the dashboard to read. Every part degrades on its own—a");
     p("// failed crawl or a failed COUNT yields zero rather than aborting the scan,");
     p("// because a partial health report is worth strictly more than none.");
     p("async function runHealthScan(env: CloudflareEnv) {");
@@ -279,7 +313,7 @@ export function generateAstroidWorker(config) {
     p("  return summary;");
     p("}");
     p();
-    p("/** One COUNT, degrading to 0 — a missing table must not abort the scan. */");
+    p("/** One COUNT, degrading to 0—a missing table must not abort the scan. */");
     p("async function countRows(env: CloudflareEnv, sql: string): Promise<number> {");
     p("  try {");
     p("    const row = await env.DB.prepare(sql).first<{ n: number }>();");
@@ -294,7 +328,7 @@ export function generateAstroidWorker(config) {
         p("// Unhandled inquiries. The COUNT is the whole table on purpose: the");
         p("// Inquiries tab reviews and CLEARS submissions (GET lists, DELETE removes),");
         p("// so a row that still exists is a message still waiting on you. There is no");
-        p("// read/unread column because deletion IS the acknowledgement — which also");
+        p("// read/unread column because deletion IS the acknowledgement—which also");
         p("// means this number goes down as you work through them, rather than being a");
         p("// total that only ever climbs.");
         p("const overviewInbox = async (env: CloudflareEnv) => {");
@@ -303,7 +337,7 @@ export function generateAstroidWorker(config) {
         p("};");
     }
     p("// The Home dashboard's content counts. Raw SQL because these are COUNTs over");
-    p("// THIS project's tables — the toolkit deliberately makes no assumption about");
+    p("// THIS project's tables—the toolkit deliberately makes no assumption about");
     p("// column names. A throw here degrades to a hidden card, never a 500.");
     p("const overviewContent = async (env: CloudflareEnv) => {");
     p("  const row = await env.DB.prepare(");
@@ -331,8 +365,8 @@ export function generateAstroidWorker(config) {
     p();
     p("// `sections` writes are validated + sanitized against the section catalog");
     p("// before they persist, on BOTH write paths: versionsRoute runs the pages");
-    p("// collection's beforeChange hook (via `config`), and pagesRoute — which takes");
-    p("// no collection config — gets the same contract from the `pagesWriteHooks`");
+    p("// collection's beforeChange hook (via `config`), and pagesRoute—which takes");
+    p("// no collection config—gets the same contract from the `pagesWriteHooks`");
     p("// spread. An unknown `_type`, a field of the wrong shape, or a setting outside");
     p("// its declared options is a 422, not a hole in the page.");
     p("const editorRoutes: WorkerRoute<CloudflareEnv>[] = [");
@@ -371,7 +405,7 @@ export function generateAstroidWorker(config) {
         : "export default composeWorker<CloudflareEnv>({");
     p("  routes: [...editorRoutes, mediaAssetRoute],");
     p("  // Deny-by-default editor API (ADR 0012). Under /api/louise a request must");
-    p("  // resolve to an editor unless it's headed for a public route — the contact");
+    p("  // resolve to an editor unless it's headed for a public route—the contact");
     p("  // form and the vitals beacon mark themselves. Every route above still checks");
     p("  // for itself; this is what catches one that forgets. It also gives route");
     p("  // responses the security headers the middleware never sees, since these");
@@ -381,13 +415,13 @@ export function generateAstroidWorker(config) {
     p("  //");
     p("  // Wrapped UNCONDITIONALLY, and that is safe: `withEdgeCache` only stores a");
     p("  // response that carries a cacheable Cloudflare-CDN-Cache-Control directive,");
-    p("  // and a page emits one only via `Astro.cache.set(...)` — which the scaffold");
+    p("  // and a page emits one only via `Astro.cache.set(...)`—which the scaffold");
     p('  // gates on ASTROID_EDGE_CACHE being "true" AND the request not being in edit');
     p("  // mode. With the var off (the default) every render is `no-store`, so this");
     p("  // layer stores nothing and is a transparent pass-through.");
     p("  //");
     p("  // It must be THIS cache and not Cloudflare's automatic edge cache: that one");
-    p("  // is keyed by URL, runs BEFORE the Worker, and is therefore cookie-blind —");
+    p("  // is keyed by URL, runs BEFORE the Worker, and is therefore cookie-blind—");
     p("  // it will happily serve an editor a cached public page. That exact bug got");
     p("  // this feature reverted twice (#163, #165). `withEdgeCache` strips the CDN");
     p("  // directive from every response so the automatic cache never engages.");
@@ -408,7 +442,7 @@ export function generateAstroidWorker(config) {
     }
     // ONE scheduled handler for every cron, dispatching on `controller.cron`.
     // Cloudflare gives no other way to tell them apart, and the strings here have
-    // to match `astroidCrons` exactly — which is why both read the same constants
+    // to match `astroidCrons` exactly—which is why both read the same constants
     // rather than repeating a literal.
     p("  // Cron. Cloudflare fires this for EVERY trigger in wrangler.jsonc and");
     p("  // identifies which by `controller.cron`, so dispatch on it.");
@@ -421,8 +455,8 @@ export function generateAstroidWorker(config) {
     p("    }");
     if (cron) {
         p(`    if (controller.cron === ${JSON.stringify(cron)}) {`);
-        p("      // Catalog safety net. Webhooks get missed — a provider outage, a");
-        p("      // deploy mid-delivery, a DLQ'd message — and without this the site");
+        p("      // Catalog safety net. Webhooks get missed—a provider outage, a");
+        p("      // deploy mid-delivery, a DLQ'd message—and without this the site");
         p("      // serves stale data until a human notices. Enqueued rather than run");
         p("      // inline so it takes the same retry + DLQ path as everything else.");
         p('      ctx.waitUntil(env.COMMERCE_QUEUE.send({ kind: "catalog_refresh" }));');
@@ -444,7 +478,7 @@ export function generateAstroidWorker(config) {
     p();
     if (usesRealtime(config)) {
         // Re-exported from the ENTRY because wrangler resolves a Durable Object
-        // binding's `class_name` against the worker's exports — the class living in
+        // binding's `class_name` against the worker's exports—the class living in
         // src/edit-session.ts is not enough on its own, and the failure is a deploy
         // error about an unresolvable class rather than anything pointing here.
         p("// The realtime edit-session Durable Object. Re-exported so wrangler can");
@@ -460,7 +494,7 @@ export function generateAstroidWorker(config) {
  * session + sticky `?louise` edit mode → content-freshness + security headers) via
  * `createLouiseMiddleware`.
  *
- * The rate rules are NOT emitted as literals here — the file calls
+ * The rate rules are NOT emitted as literals here—the file calls
  * `astroidRateRules(astroidConfig)`, so the set stays real data in the package
  * (testable, and a `match` predicate survives, which a serialized literal could
  * not). Enabling a portal or commerce in the config adds that surface's rules
@@ -470,7 +504,7 @@ export function generateAstroidWorker(config) {
  * Astro emits a hash-based `content-security-policy` response header on every SSR
  * page and owns `script-src`. The `cspStyleSrc` below tells
  * `createLouiseMiddleware` to rewrite that header's `style-src` to
- * `'self' 'unsafe-inline'` — a hash-based `style-src` would, per spec, void the
+ * `'self' 'unsafe-inline'`—a hash-based `style-src` would, per spec, void the
  * `'unsafe-inline'` that Louise's data-driven `style=""` carriers and the
  * editor's runtime-injected `<style>` require. Script hashes are left verbatim,
  * and the inlined `data:` brand font is auto-allowed.
@@ -487,7 +521,7 @@ export function generateAstroidMiddleware(config) {
     const rewritePrefix = tenancy?.rewritePrefix ?? ASTROID_TENANT_PREFIX;
     const rewriteExclude = tenancy?.rewriteExclude ?? ASTROID_REWRITE_EXCLUDE;
     return [
-        "// Generated by astroidjs — do not hand-edit.",
+        "// Generated by astroidjs—do not hand-edit.",
         "// The shared Louise middleware: rate-limit the unauthenticated POST surfaces,",
         "// then resolve the editor session + sticky ?louise edit mode, then apply",
         "// content-freshness + transport-security headers, and rewrite the style-src of",
@@ -495,8 +529,8 @@ export function generateAstroidMiddleware(config) {
         "// styles + inlined data: brand font are allowed.",
         'import { env } from "cloudflare:workers";',
         'import { createLouiseMiddleware } from "@louise-toolkit/astro";',
-        // One `astroidjs` import, composed from what this config actually uses —
-        // two import statements for the same module is legal and reads as an
+        // One `astroidjs` import, composed from what this config actually uses—two
+        // import statements for the same module is legal and reads as an
         // oversight in a file nobody is supposed to hand-edit.
         `import { ${[
             ...(tenancy && Object.keys(tenancy.apps ?? {}).length ? ["appPrefix"] : []),
@@ -508,22 +542,22 @@ export function generateAstroidMiddleware(config) {
         'import astroidConfig from "../astroid.config.js";',
         ...(tenancy
             ? [
-                "// TODO(astroid): your TENANT seam — what a subdomain maps to (src/tenancy.ts).",
+                "// TODO(astroid): your TENANT seam—what a subdomain maps to (src/tenancy.ts).",
                 'import { resolveTenant } from "./tenancy.js";',
             ]
             : []),
-        "// TODO(astroid): your AUTH seam — same resolveEditor as the generated worker.ts.",
+        "// TODO(astroid): your AUTH seam—same resolveEditor as the generated worker.ts.",
         'import { resolveEditor } from "./auth.js";',
         // The portal's resolver lives in its OWN module, not the editor's auth
-        // seam — they're separate Better Auth instances and must not share a file.
+        // seam—they're separate Better Auth instances and must not share a file.
         ...(portal ? ['import { resolvePortalUser } from "./portal-auth.js";'] : []),
         "",
         "// Rate-limit the public, unauthenticated POST surface, keyed by client IP",
         "// (fixed-window KV counter that fails open). Derived from your config: the",
         "// editor magic-link always, plus the portal credential surfaces and checkout",
-        "// when those are enabled. Add your own via `security.rateRules` in the config —",
+        "// when those are enabled. Add your own via `security.rateRules` in the config—",
         "// they're matched first, so they can also override a default's budget.",
-        "// `env.RL` is read per request (a getter) — a KV binding is only valid in",
+        "// `env.RL` is read per request (a getter)—a KV binding is only valid in",
         "// request scope.",
         "const RATE_RULES = astroidRateRules(astroidConfig);",
         ...(tenancy
@@ -538,7 +572,7 @@ export function generateAstroidMiddleware(config) {
             ? [
                 "const PORTAL_GUARD = astroidPortalGuardConfig(astroidConfig)!;",
                 "",
-                "// The PORTAL session — a second, cookie- and table-isolated Better Auth",
+                "// The PORTAL session—a second, cookie- and table-isolated Better Auth",
                 "// instance beside the editor's. `resolvePortalSession` shares the in-flight",
                 "// lookup per request, so the guard here and the handler that runs next",
                 "// don't each pay a session round-trip.",
@@ -548,11 +582,11 @@ export function generateAstroidMiddleware(config) {
         "export const onRequest = createLouiseMiddleware({",
         "  resolveEditor: (request) => resolveEditor(request),",
         "  rateLimit: { rules: RATE_RULES, kv: () => env.RL },",
-        "  // The same deny-by-default gate for /api/louise routes that reach Astro —",
+        "  // The same deny-by-default gate for /api/louise routes that reach Astro—",
         "  // anything the worker's routes didn't answer. A second check behind the",
         "  // worker's gate, and free: the editor is resolved here on every request.",
         "  apiGate: true,",
-        // `extend` runs once and may need to populate BOTH — a tenanted site with a
+        // `extend` runs once and may need to populate BOTH—a tenanted site with a
         // portal resolves a tenant and a customer on the same request.
         ...(portal || tenancy
             ? [
@@ -583,7 +617,7 @@ export function generateAstroidMiddleware(config) {
                         "    // A syntactically-valid tenant host whose label resolved to nothing is",
                         '    // NOT a page (config `tenancy.unknown: "404"`). Falling through would',
                         "    // render the marketing homepage on a stranger's subdomain. Reserved",
-                        "    // labels, app labels, and the apex never reach here — tenantLabel",
+                        "    // labels, app labels, and the apex never reach here—tenantLabel",
                         "    // returns null for all of them, so they are not tenant candidates.",
                         "    if (tenantLabel(context.url.hostname, TENANCY) && !context.locals.tenant) {",
                         '      return new Response("Not found", { status: 404 });',
@@ -593,7 +627,7 @@ export function generateAstroidMiddleware(config) {
                 ...(portal
                     ? [
                         "    // Route guard: the declarative prefix→roles table from your config.",
-                        "    // An /api/* route always answers in JSON — redirecting fetch() to an",
+                        "    // An /api/* route always answers in JSON—redirecting fetch() to an",
                         "    // HTML login page returns 200 and markup, which reads as success.",
                         "    const decision = portalGuard(",
                         "      context.url.pathname,",
@@ -612,16 +646,16 @@ export function generateAstroidMiddleware(config) {
             ? [
                 "  // Host dispatch: map the resolved tenant onto an internal path prefix.",
                 "  // Runs after `guard`, so route policy stays written against the PUBLIC",
-                "  // path. The visitor's URL is unchanged — an internal rewrite, not a",
-                "  // redirect — so links built from Astro.url stay correct.",
+                "  // path. The visitor's URL is unchanged—an internal rewrite, not a",
+                "  // redirect—so links built from Astro.url stay correct.",
                 "  //",
                 "  // An unknown subdomain is YOUR decision: `resolveTenant` returning null",
-                "  // falls through to the ordinary site below — or 404s first, when the",
+                "  // falls through to the ordinary site below—or answers 404 first, when the",
                 '  // config sets `tenancy.unknown: "404"` (see the guard above).',
                 "  rewrite: (context) => {",
                 "    // Host-agnostic paths render from their own address. An API route is",
                 "    // addressed absolutely by whatever calls it and reads the host from",
-                "    // `locals.tenant`, so rewriting it moves it where no route matches —",
+                "    // `locals.tenant`, so rewriting it moves it where no route matches—",
                 "    // and on an app host with a catch-all page, the PAGE answers, so",
                 "    // fetch() gets HTML instead of JSON and every data load quietly fails.",
                 `    if (isRewriteExcluded(context.url.pathname, ${JSON.stringify(rewriteExclude)})) {`,
@@ -630,12 +664,12 @@ export function generateAstroidMiddleware(config) {
                 ...(Object.keys(tenancy.apps ?? {}).length
                     ? [
                         "    // First-party app hosts (config `tenancy.apps`): a static label→prefix",
-                        "    // map, checked before the tenant — an app exists whether or not any",
+                        "    // map, checked before the tenant—an app exists whether or not any",
                         "    // tenant does, and needs no lookup.",
                         "    const app = appPrefix(context.url.hostname, TENANCY);",
                         "    // `search` is preserved: the rewrite chooses which page renders, not",
                         "    // what was asked of it. Dropping it silently loses filters, pagination,",
-                        "    // campaign tags — and every typed search param a routed island reads.",
+                        "    // campaign tags—and every typed search param a routed island reads.",
                         "    if (app) return `${app}${context.url.pathname}${context.url.search}`;",
                     ]
                     : []),

package/dist/worker/index.js

@@ -1,6 +1,6 @@
 // Copyright (c) 2026 BowenLabs. Astroid is MIT licensed.
 //
-// Worker + middleware generation — config → the collision-free editor route plan
+// Worker + middleware generation—config → the collision-free editor route plan
 // → the Worker entrypoint and Astro middleware a site would otherwise hand-write.
 export * from "./routes.js";
 export * from "./generate.js";

package/dist/worker/routes.js

@@ -1,6 +1,6 @@
 // Copyright (c) 2026 BowenLabs. Astroid is MIT licensed.
 //
-// The editor route plan — which louise-toolkit/editor routes a project needs, in
+// The editor route plan—which louise-toolkit/editor routes a project needs, in
 // the ONE order that avoids matcher collisions. This is where the "versionsRoute
 // and searchRoute MUST precede pagesRoute" tribal knowledge lives: encoded once,
 // as data, instead of re-derived by hand (and mis-ordered) in every site's
@@ -23,7 +23,7 @@ export function astroidEditorRoutePlan(config) {
         {
             name: "versions",
             factory: "versionsRoute",
-            note: "Draft/publish + version history for pages. MUST precede pagesRoute — pagesRoute's /:id matcher would otherwise claim /pages/:id/versions and 400 on the non-integer id.",
+            note: "Draft/publish + version history for pages. MUST precede pagesRoute—pagesRoute's /:id matcher would otherwise claim /pages/:id/versions and 400 on the non-integer id.",
         },
         {
             name: "search",
@@ -33,7 +33,7 @@ export function astroidEditorRoutePlan(config) {
         {
             name: "seoFix",
             factory: "seoFixRoute",
-            note: "One-click SEO backfill for published pages missing a title/description. MUST precede pagesRoute for the same reason versions/search do: it mounts at /api/louise/pages/generate-seo, and pagesRoute claims EVERY path under /api/louise/pages/ as an item id — so mounted after, it would never be reached and the request would 400 on the non-integer id `generate-seo`.",
+            note: "One-click SEO backfill for published pages missing a title/description. MUST precede pagesRoute for the same reason versions/search do: it mounts at /api/louise/pages/generate-seo, and pagesRoute claims EVERY path under /api/louise/pages/ as an item id—so mounted after, it would never be reached and the request would 400 on the non-integer id `generate-seo`.",
         },
         {
             name: "pages",
@@ -43,7 +43,7 @@ export function astroidEditorRoutePlan(config) {
         {
             name: "save",
             factory: "saveRoute",
-            note: "Live field saves (title, SEO) — the versioned body stages drafts via versionsRoute instead.",
+            note: "Live field saves (title, SEO)—the versioned body stages drafts via versionsRoute instead.",
         },
         {
             name: "settings",
@@ -53,12 +53,12 @@ export function astroidEditorRoutePlan(config) {
         {
             name: "media",
             factory: "mediaRoute",
-            note: "Media library — list, upload, delete, reference checks.",
+            note: "Media library—list, upload, delete, reference checks.",
         },
         {
             name: "editors",
             factory: "editorsRoute",
-            note: "Editor roster (the Users panel) over Better Auth's `user` table — a row IS an editor, and the same table is the magic-link allowlist (resolveAdmins).",
+            note: "Editor roster (the Users panel) over Better Auth's `user` table—a row IS an editor, and the same table is the magic-link allowlist (resolveAdmins).",
         },
     ];
     // AI assists that own their own path prefix. `/api/louise/ai/*` collides with
@@ -74,23 +74,23 @@ export function astroidEditorRoutePlan(config) {
         routes.push({
             name: "realtime",
             factory: "realtimeRoute",
-            note: "WebSocket upgrade for the per-page live editing session (ADR 0002). Owns /api/louise/realtime/*. Guards the handshake as a same-origin, session-gated mutation, then forwards to the per-page Durable Object with the SERVER-resolved editor identity — presence is never taken from the client.",
+            note: "WebSocket upgrade for the per-page live editing session (ADR 0002). Owns /api/louise/realtime/*. Guards the handshake as a same-origin, session-gated mutation, then forwards to the per-page Durable Object with the SERVER-resolved editor identity—presence is never taken from the client.",
         });
     }
     routes.push({
         name: "vitals",
         factory: "vitalsRoute",
-        note: "Public CWV ingestion (POST /api/louise/vitals). NOT session-gated — these are anonymous visitor beacons — but same-origin only, and it accepts-and-drops without the dataset binding. Always 204.",
+        note: "Public CWV ingestion (POST /api/louise/vitals). NOT session-gated—these are anonymous visitor beacons—but same-origin only, and it accepts-and-drops without the dataset binding. Always 204.",
     });
     routes.push({
         name: "health",
         factory: "healthRoute",
-        note: "The site-health panel's read of the persisted scan summary. Owns /api/louise/health. Like overviewRoute, its client half already ships in the editor drawer — unmounted, the Health card was dead UI. Returns `{ summary: null }` (a 200) until the daily cron writes the first scan, which the panel renders as 'not checked yet'.",
+        note: "The site-health panel's read of the persisted scan summary. Owns /api/louise/health. Like overviewRoute, its client half already ships in the editor drawer—unmounted, the Health card was dead UI. Returns `{ summary: null }` (a 200) until the daily cron writes the first scan, which the panel renders as 'not checked yet'.",
     });
     routes.push({
         name: "ai",
         factory: "aiRoute",
-        note: "Editor AI assists — rewrite/expand/shorten a selection, suggest SEO for a page. Owns /api/louise/ai/*, so it collides with nothing. POST-only and editor-gated, since each call spends AI budget.",
+        note: "Editor AI assists—rewrite/expand/shorten a selection, suggest SEO for a page. Owns /api/louise/ai/*, so it collides with nothing. POST-only and editor-gated, since each call spends AI budget.",
     });
     if (capturesInquiries(config)) {
         routes.push({
@@ -106,7 +106,7 @@ export function astroidEditorRoutePlan(config) {
     routes.push({
         name: "seed",
         factory: "seedRoute",
-        note: "First-run site_settings seed. Last — it's a one-shot bootstrap, not a hot path.",
+        note: "First-run site_settings seed. Last—it's a one-shot bootstrap, not a hot path.",
     });
     return routes;
 }

package/dist/workflow/advance.d.ts

@@ -34,7 +34,7 @@ export interface AdvanceOptions {
     db: WorkflowDatabase;
     /** Table holding the `stage` column. */
     table: string;
-    /** Audit table — one row per completed stage. */
+    /** Audit table—one row per completed stage. */
     auditTable: string;
     /** Primary key column on `table`. Default `"id"`. */
     idColumn?: string;
@@ -87,13 +87,13 @@ export interface OverrideOptions extends Omit<AdvanceOptions, "specs" | "expecte
     action: OverrideAction;
     /** Override log table. */
     overrideTable: string;
-    /** Where the item is now, from the operator's page — the same staleness guard. */
+    /** Where the item is now, from the operator's page—the same staleness guard. */
     expectedStage: number;
     /** Optional station/context label recorded with the override. */
     station?: string;
 }
 /**
- * Move an item out of band — back a stage, or skip one — and log it.
+ * Move an item out of band—back a stage, or skip one—and log it.
  *
  * Sending an item BACK deletes the audit row for the stage being reopened, so
  * "a sign-off exists" keeps meaning "that stage is genuinely done". Leaving it

package/dist/workflow/advance.js

@@ -1,20 +1,20 @@
 // Copyright (c) 2026 BowenLabs. Astroid is MIT licensed.
 //
-// The guarded advance — the one piece of a staged pipeline that is genuinely
+// The guarded advance—the one piece of a staged pipeline that is genuinely
 // hard to get right.
 //
 // Two operators standing at two stations both press "sign off" on the same job.
 // A read-then-write advance runs the item forward two stages and writes two
 // audit rows, and nobody notices until the numbers stop adding up. The fix is
-// optimistic concurrency: make the write itself assert the stage it expected —
-// `UPDATE … SET stage = ? WHERE id = ? AND stage = ?` — and treat "0 rows
+// optimistic concurrency: make the write itself assert the stage it
+// expected—`UPDATE … SET stage = ? WHERE id = ? AND stage = ?`—and treat "0 rows
 // changed" as the conflict signal rather than checking first and hoping.
 //
 // ORDERING MATTERS, and the reference gets it wrong. ghostfire's floor route
 // inserts the sign-off row and THEN runs the guarded update, so a double submit
 // writes two audit rows even though only one advance lands. Here the guarded
 // update goes first and the audit row is written only if it actually moved the
-// item — so the audit table can't record work that didn't happen. The unique
+// item—so the audit table can't record work that didn't happen. The unique
 // index the schema generator emits on `(entity_id, stage)` is the belt to that
 // braces.
 /** Longest initials we store. Three is what a floor actually writes. */
@@ -66,7 +66,7 @@ export async function advanceWorkflowStage(options) {
     }
     const next = expectedStage + 1;
     // The guard. `changes === 0` means the row is gone or someone else already
-    // moved it — the two cases are told apart below, but only after the write,
+    // moved it—the two cases are told apart below, but only after the write,
     // so there is no window between the check and the update.
     const advanced = await db
         .prepare(`UPDATE ${table} SET stage = ? WHERE ${idColumn} = ? AND stage = ?`)
@@ -97,7 +97,7 @@ export async function advanceWorkflowStage(options) {
     return { ok: true, stage: next, complete: next >= stageCount };
 }
 /**
- * Move an item out of band — back a stage, or skip one — and log it.
+ * Move an item out of band—back a stage, or skip one—and log it.
  *
  * Sending an item BACK deletes the audit row for the stage being reopened, so
  * "a sign-off exists" keeps meaning "that stage is genuinely done". Leaving it