astroidjs 0.12.1 → 0.14.0

package/dist/portal/scaffold.js

@@ -3,15 +3,15 @@
 // The portal's SCAFFOLD-ONCE pieces: the second Better Auth instance, and the
 // `App.Locals` / `CloudflareEnv` additions that come with it.
 //
-// The auth instance is scaffolded rather than generated because a site edits it
-// — the reset email, the role a new account gets, extra user columns. What
+// The auth instance is scaffolded rather than generated because a site edits it—the
+// reset email, the role a new account gets, extra user columns. What
 // Astroid fixes are the three things that must not drift: the mount, the cookie
 // prefix, and the table prefix. Get any of those wrong and the two instances
 // fight over one origin's cookies, which fails intermittently and looks like a
 // session bug rather than a configuration one.
 import { astroidPortal } from "./config.js";
 /**
- * `src/portal-auth.ts` — the portal Better Auth instance and its session
+ * `src/portal-auth.ts`—the portal Better Auth instance and its session
  * resolver.
  *
  * Returns null when the project has no portal.
@@ -21,13 +21,13 @@ export function generateAstroidPortalAuth(config) {
     if (!portal)
         return null;
     return [
-        "// The PORTAL auth instance — customers/members, separate from the editor.",
+        "// The PORTAL auth instance—customers/members, separate from the editor.",
         "//",
         "// Scaffolded once; yours to edit (the reset email, extra user columns, what",
         "// role a new account gets). Three things should NOT change: the basePath,",
         "// the cookiePrefix, and the tablePrefix. The studio instance keeps Better",
         "// Auth's defaults because the Louise editor client hardcodes them, so this",
-        "// one moves — and if the two ever share a cookie prefix, signing into one",
+        "// one moves—and if the two ever share a cookie prefix, signing into one",
         "// silently signs you out of the other.",
         'import { astroidMailTheme, magicLinkEmail, passwordResetEmail, resolveMailer, sendTransactional } from "astroidjs";',
         'import { env } from "cloudflare:workers";',
@@ -41,7 +41,7 @@ export function generateAstroidPortalAuth(config) {
         "  return getLouiseAuth(env, new URL(request.url).origin, {",
         "    rpName: astroidConfig.theme.name,",
         "    mailFrom: { email: env.MAIL_FROM, name: astroidConfig.theme.name },",
-        "    // The portal never sends magic links — it's email + password — but the",
+        "    // The portal never sends magic links—it's email + password—but the",
         "    // toolkit's config asks for a renderer, so give it the real one.",
         "    renderMagicLinkEmail: ({ url, toEmail }) => magicLinkEmail(MAIL_THEME, { url, toEmail }),",
         `    basePath: ${JSON.stringify(portal.basePath)},`,
@@ -51,14 +51,14 @@ export function generateAstroidPortalAuth(config) {
         "      minPasswordLength: 8,",
         portal.signUp
             ? "      // Public sign-up is ON for this project."
-            : "      // Accounts are provisioned by staff — no public sign-up.",
+            : "      // Accounts are provisioned by staff—no public sign-up.",
         `      disableSignUp: ${!portal.signUp},`,
         "      sendResetPassword: async ({ user, url }) => {",
         "        // Through `resolveMailer`, NOT a hand-built options object: it is the",
         "        // only thing that applies the DUMMY_REPLACE_ME sentinel check. Built by",
         "        // hand, a fresh deploy with a real EMAIL binding but a placeholder",
         "        // MAIL_FROM read as configured and called the Email API with an envelope",
-        '        // sender of literally "DUMMY_REPLACE_ME" — rejected upstream, swallowed',
+        '        // sender of literally "DUMMY_REPLACE_ME"—rejected upstream, swallowed',
         "        // here, and reported to the user as a reset email that was sent.",
         "        const mailer = await resolveMailer(env);",
         "        await sendTransactional(mailer, [",
@@ -66,7 +66,7 @@ export function generateAstroidPortalAuth(config) {
         "        ]);",
         "      },",
         "    },",
-        "    // The portal has its own users — never the editor allowlist.",
+        "    // The portal has its own users—never the editor allowlist.",
         "    resolveAdmins: () => [],",
         "  });",
         "}",
@@ -97,14 +97,14 @@ export function generateAstroidPortalAuth(config) {
     ].join("\n");
 }
 /**
- * `src/pages/api/portal-auth/[...all].ts` — the portal's Better Auth catch-all,
+ * `src/pages/api/portal-auth/[...all].ts`—the portal's Better Auth catch-all,
  * mounted at its own basePath so it never collides with the studio's
  * `/api/auth`.
  *
  * Lives here rather than as a literal in `create-astroid` for the same reason
  * the archetype sections moved (#277): the scaffolder is plain JS, so a drifted
  * import path there is invisible until a user's build fails. It is also the half
- * `generateAstroidPortalAuth` is useless without — `src/portal-auth.ts` exports
+ * `generateAstroidPortalAuth` is useless without—`src/portal-auth.ts` exports
  * `handlePortalAuth`, and nothing calls it unless this route exists.
  *
  * Returns null when the project has no portal.
@@ -126,14 +126,14 @@ export function generateAstroidPortalAuthRoute(config) {
 }
 /**
  * The `App.Locals` member the portal adds, as a block `create-astroid`
- * substitutes into `src/env.d.ts`. Empty without a portal — a project that
+ * substitutes into `src/env.d.ts`. Empty without a portal—a project that
  * types `portalUser` it never sets is inviting a null-check nobody needs.
  */
 export function generateAstroidPortalLocals(config) {
     if (!astroidPortal(config))
         return "";
     return [
-        "    /** The signed-in PORTAL user (customers/members) — distinct from",
+        "    /** The signed-in PORTAL user (customers/members)—distinct from",
         "     *  `editor`, which is the studio session. Null when signed out. */",
         '    portalUser: import("astroidjs").PortalUser | null;',
     ].join("\n");

package/dist/portal/session.d.ts

@@ -1,14 +1,20 @@
 import type { PortalUser } from "./guard.js";
-/** Resolves the portal user for a request, or null when signed out. */
-export type PortalSessionResolver = (request: Request) => Promise<PortalUser | null>;
+/** Resolves the portal user for a request, or null when signed out. A site's
+ *  resolver can return its own richer user type; see {@link resolvePortalSession}. */
+export type PortalSessionResolver<U extends PortalUser = PortalUser> = (request: Request) => Promise<U | null>;
 /**
  * Resolve the portal session at most once per request.
  *
  * Shares the *promise*, not the result, so two callers racing during the same
  * request both await one lookup rather than starting a second.
+ *
+ * Generic over the site's user type, so the result keeps whatever the site's
+ * resolver returns (a customer ID, display initials) instead of narrowing to
+ * `PortalUser`. Every caller in a request passes the same resolver, so the
+ * shared promise always holds that type.
  */
-export declare function resolvePortalSession(request: Request, resolve: PortalSessionResolver): Promise<PortalUser | null>;
-/** JSON response helper — the shape every portal API route returns. */
+export declare function resolvePortalSession<U extends PortalUser = PortalUser>(request: Request, resolve: PortalSessionResolver<U>): Promise<U | null>;
+/** JSON response helper—the shape every portal API route returns. */
 export declare function json(body: unknown, status?: number, headers?: Record<string, string>): Response;
 /** True when the request came from this same origin. */
 export declare function isSameOrigin(request: Request): boolean;
@@ -20,7 +26,7 @@ export type CustomerGuardResult = {
     response: Response;
 };
 /**
- * Guard a portal API handler: a signed-in user, and — on mutations — a
+ * Guard a portal API handler: a signed-in user, and—on mutations—a
  * same-origin request.
  *
  * ```ts

package/dist/portal/session.js

@@ -5,12 +5,12 @@
 // The middleware resolves it (to gate routes) and so does whatever handler runs
 // next (to know who's asking). Both hitting the session store is a wasted D1
 // round-trip on every authenticated request, so the in-flight promise is shared
-// per request via a `WeakMap` — keyed on the `Request`, which means entries
+// per request via a `WeakMap`—keyed on the `Request`, which means entries
 // disappear with the request rather than needing eviction.
 //
 // `requireCustomer` then adds the check a session alone doesn't give you:
 // same-origin on mutations. A cookie is attached by the browser to any request
-// to this origin, including one a third-party page triggered — so a session
+// to this origin, including one a third-party page triggered—so a session
 // proves identity, and the origin check proves intent.
 const inFlight = new WeakMap();
 /**
@@ -18,6 +18,11 @@ const inFlight = new WeakMap();
  *
  * Shares the *promise*, not the result, so two callers racing during the same
  * request both await one lookup rather than starting a second.
+ *
+ * Generic over the site's user type, so the result keeps whatever the site's
+ * resolver returns (a customer ID, display initials) instead of narrowing to
+ * `PortalUser`. Every caller in a request passes the same resolver, so the
+ * shared promise always holds that type.
  */
 export function resolvePortalSession(request, resolve) {
     const existing = inFlight.get(request);
@@ -29,7 +34,7 @@ export function resolvePortalSession(request, resolve) {
     inFlight.set(request, promise);
     return promise;
 }
-/** JSON response helper — the shape every portal API route returns. */
+/** JSON response helper—the shape every portal API route returns. */
 export function json(body, status = 200, headers = {}) {
     return new Response(JSON.stringify(body), {
         status,
@@ -46,7 +51,7 @@ export function isSameOrigin(request) {
         return origin === target;
     // No Origin header: browsers always send one on cross-origin mutations, so
     // its absence means a same-origin or non-browser caller. Fall back to Referer
-    // when present, and allow otherwise — being stricter would break legitimate
+    // when present, and allow otherwise—being stricter would break legitimate
     // server-to-server callers without stopping a real CSRF, which always carries
     // an Origin.
     const referer = request.headers.get("referer");
@@ -61,7 +66,7 @@ export function isSameOrigin(request) {
     return true;
 }
 /**
- * Guard a portal API handler: a signed-in user, and — on mutations — a
+ * Guard a portal API handler: a signed-in user, and—on mutations—a
  * same-origin request.
  *
  * ```ts

package/dist/portfolio/scaffold.d.ts

@@ -1,6 +1,6 @@
 import type { AstroidConfig } from "../config.js";
 /**
- * `src/pages/work.astro` — the portfolio gallery. Null for any other archetype.
+ * `src/pages/work.astro`—the portfolio gallery. Null for any other archetype.
  *
  * Intrinsic `width`/`height` are carried through deliberately: they feed the
  * pre-decode layout, so a library with dimensions recorded lays out correctly on

package/dist/portfolio/scaffold.js

@@ -3,17 +3,17 @@
 // The `portfolio` archetype's scaffold-once page: a justified gallery over the
 // media library.
 //
-// Scaffold-once, not regenerated, for the usual reason — this is the first file
+// Scaffold-once, not regenerated, for the usual reason—this is the first file
 // a portfolio site edits (which assets appear, in what order, whether tiles link
 // to a detail page), so `astroid generate` must never rewrite it.
 //
 // It exists because the primitives alone don't finish the job. `<MediaSlot>` and
 // `<JustifiedGallery>` are archetype-agnostic, but the wiring between them and
-// the media registry — the public URL shape, filtering to images, carrying
+// the media registry—the public URL shape, filtering to images, carrying
 // alt/caption and intrinsic dimensions through so the first paint isn't a guess
-// — is identical every time, and is exactly what the consuming sites hand-wrote.
+//—is identical every time, and is exactly what the consuming sites hand-wrote.
 /**
- * `src/pages/work.astro` — the portfolio gallery. Null for any other archetype.
+ * `src/pages/work.astro`—the portfolio gallery. Null for any other archetype.
  *
  * Intrinsic `width`/`height` are carried through deliberately: they feed the
  * pre-decode layout, so a library with dimensions recorded lays out correctly on
@@ -25,7 +25,7 @@ export function generateAstroidGalleryPage(config) {
     const mediaBase = config.deploy?.mediaBase ?? "/media";
     return [
         "---",
-        "// The work gallery — a justified grid over the media library.",
+        "// The work gallery—a justified grid over the media library.",
         "//",
         "// Scaffolded once; yours to edit. The layout primitive is general",
         "// (astroidjs/components/JustifiedGallery.astro); what lives here is this",
@@ -33,8 +33,8 @@ export function generateAstroidGalleryPage(config) {
         "//",
         "// Rows carry `alt`/`caption` from the media registry, so an editor fixes alt",
         "// text once in the library and every gallery showing that asset picks it up.",
-        "// Assets missing width/height still render — the client corrects the layout",
-        "// once the image decodes — but they cost a visible reflow, so it's worth",
+        "// Assets missing width/height still render—the client corrects the layout",
+        "// once the image decodes—but they cost a visible reflow, so it's worth",
         "// backfilling dimensions on older uploads.",
         'import JustifiedGallery from "astroidjs/components/JustifiedGallery.astro";',
         'import type { GalleryItem } from "astroidjs/components/justify";',
@@ -59,7 +59,7 @@ export function generateAstroidGalleryPage(config) {
         "  ).all<MediaRow>();",
         "  rows = result.results ?? [];",
         "} catch {",
-        "  // No DB binding yet (pre-provision) — render the empty state.",
+        "  // No DB binding yet (pre-provision)—render the empty state.",
         "}",
         "",
         "const items: GalleryItem[] = rows.map((row) => ({",

package/dist/project/actions.d.ts

@@ -1,3 +1,3 @@
 import type { AstroidConfig } from "../config.js";
-/** `src/actions/index.ts` — the typed mutation surface, scaffolded once. */
+/** `src/actions/index.ts`—the typed mutation surface, scaffolded once. */
 export declare function generateAstroidActions(config: AstroidConfig): string;

package/dist/project/actions.js

@@ -1,21 +1,21 @@
 // Copyright (c) 2026 BowenLabs. Astroid is MIT licensed.
 //
-// `src/actions/index.ts` — the Astro-native, typed mutation surface (ADR 0001
+// `src/actions/index.ts`—the Astro-native, typed mutation surface (ADR 0001
 // layer 2), beside the framework-agnostic `/api/louise/*` routes.
 //
 // Astroid generated only the route half. That is not a missing convenience: the
 // two entrypoints write the SAME rows, and the whole reason `@louise-toolkit/astro`
-// exposes these factories is that each one shares the raw route's store path —
-// `applyFieldSave`, `applySettingsPatch`, `applySaveDraft`. A project that wired
+// exposes these factories is that each one shares the raw route's store
+// path—`applyFieldSave`, `applySettingsPatch`, `applySaveDraft`. A project that wired
 // its own Actions by hand would get a second write path, and a second write path
 // is where validation, sanitization, and draft-merge semantics drift apart
 // silently (#138).
 //
-// So this file is SCAFFOLD-ONCE and is meant to be added to — the reference site
-// keeps its own bespoke actions right beside these — but the three below come
+// So this file is SCAFFOLD-ONCE and is meant to be added to—the reference site
+// keeps its own bespoke actions right beside these—but the three below come
 // pre-wired against the same tables and the same collection config the generated
 // worker uses.
-/** `src/actions/index.ts` — the typed mutation surface, scaffolded once. */
+/** `src/actions/index.ts`—the typed mutation surface, scaffolded once. */
 export function generateAstroidActions(config) {
     const customKeys = config.settings?.customKeys ?? [];
     const extraImageKeys = config.settings?.imageKeys ?? [];
@@ -29,12 +29,15 @@ export function generateAstroidActions(config) {
             ? `        columns: ${JSON.stringify(columnsOverride)},`
             : "        columns: ASTROID_SETTINGS_COLUMNS,",
         ...(customKeys.length ? [`        customKeys: ${JSON.stringify(customKeys)},`] : []),
+        // The same sanitizers the generated settingsRoute spreads in. An Action
+        // writes no GET, so `read` has nothing to do here.
+        ...(config.settings?.hooks ? ["        sanitize: settingsHooks.sanitize,"] : []),
         extraImageKeys.length
             ? `        imageKeys: [...ASTROID_SETTINGS_IMAGE_KEYS, ...${JSON.stringify(extraImageKeys)}],`
             : "        imageKeys: ASTROID_SETTINGS_IMAGE_KEYS,",
     ];
     return [
-        "// The typed Astro Actions surface — ADR 0001 layer 2.",
+        "// The typed Astro Actions surface—ADR 0001 layer 2.",
         "//",
         "// Scaffolded once and yours to ADD to: put your own `defineAction`s in the",
         "// `server` object below, alongside these.",
@@ -54,17 +57,20 @@ export function generateAstroidActions(config) {
         "  louiseSettingsAction,",
         '} from "@louise-toolkit/astro";',
         "import {",
-        "  ASTROID_SETTINGS_COLUMNS,",
+        // Only when the Action uses it: a site that overrides the columns gets them
+        // as a literal, and an unused import is a lint error in its own file.
+        ...(columnsOverride ? [] : ["  ASTROID_SETTINGS_COLUMNS,"]),
         "  ASTROID_SETTINGS_IMAGE_KEYS,",
         "  astroidPagesCollection,",
         '} from "astroidjs";',
         'import astroidConfig from "../../astroid.config.js";',
         'import { pages, pagesVersions, siteSettings } from "../schema.js";',
+        ...(config.settings?.hooks ? ['import { settingsHooks } from "../settings-hooks.js";'] : []),
         "",
         "const pagesCollection = astroidPagesCollection(astroidConfig);",
         "",
         "// Astro v6+ removed `Astro.locals.runtime.env`, so the bindings are resolved",
-        "// from `cloudflare:workers` — the same env the raw routes read.",
+        "// from `cloudflare:workers`—the same env the raw routes read.",
         "const getEnv = () => env as unknown as CloudflareEnv;",
         "",
         "// `getEditor` is left to its default (`locals.editor`), which the generated",
@@ -74,7 +80,7 @@ export function generateAstroidActions(config) {
         "",
         "export const server = {",
         "  louise: {",
-        "    // Inline field save (title, SEO) — the live, non-versioned path.",
+        "    // Inline field save (title, SEO)—the live, non-versioned path.",
         "    save: defineAction(",
         "      louiseSaveAction({",
         "        ...deps,",
@@ -87,7 +93,7 @@ export function generateAstroidActions(config) {
         "      }),",
         "    ),",
         "",
-        "    // The versioned body/sections save — stages a DRAFT, exactly as",
+        "    // The versioned body/sections save—stages a DRAFT, exactly as",
         "    // versionsRoute does, through the same `applySaveDraft`.",
         "    saveDraft: defineAction(",
         "      louiseSaveDraftAction({",
@@ -108,7 +114,7 @@ export function generateAstroidActions(config) {
         "        ...deps,",
         "        table: siteSettings,",
         "        // The SAME allowlist the generated worker enforces, imported rather",
-        "        // than copied — a second literal here is a list that drifts from the",
+        "        // than copied—a second literal here is a list that drifts from the",
         "        // one the routes check against, and nothing would fail when it did.",
         ...settingsExtra,
         '        mediaBase: astroidConfig.deploy?.mediaBase ?? "/media",',

package/dist/project/generate.d.ts

@@ -1,12 +1,12 @@
 import type { AstroidConfig } from "../config.js";
 /** A generated file: a project-root-relative POSIX path + its full contents. */
 export interface GeneratedFile {
-    /** Path relative to the project root, POSIX-separated (e.g. `"src/worker.ts"`). */
+    /** Path relative to the project root, POSIX-separated (for example, `"src/worker.ts"`). */
     path: string;
     contents: string;
 }
 /**
- * The regenerated trio — the files that are a pure function of the Astroid config
+ * The regenerated trio—the files that are a pure function of the Astroid config
  * and carry a "do not hand-edit" banner. `astroid generate` writes exactly these,
  * and `astroid doctor` regenerates them in-memory to diff against disk. Scaffold-
  * once files (wrangler.jsonc, astro.config, auth.ts) are NOT here by design.
@@ -22,7 +22,7 @@ export declare function generateAstroidProject(config: AstroidConfig): Generated
  * names come from {@link commerceSecretNames}, the same declaration the runtime
  * gate and the generated `env.d.ts` read.
  *
- * Empty string when the project enables no module that needs credentials — the
+ * Empty string when the project enables no module that needs credentials—the
  * core secrets (session, Turnstile, mail) are already in the template file, with
  * their own prose.
  */
@@ -31,7 +31,7 @@ export declare function generateAstroidSecretsEnv(config: AstroidConfig): string
  * Generate a floor `wrangler.jsonc` from the config: the Worker name + editable
  * bindings a baseline Louise site needs (D1, R2 media, the rate-limit + autosave
  * KV, Cloudflare Images), custom-domain routes from `hosts`, and the `vars` the
- * media route + editor read. Binding ids are placeholders — real ids are filled by
+ * media route + editor read. Binding ids are placeholders—real ids are filled by
  * `wrangler … create` (or, later, `astroid deploy`); `astroid doctor` flags any
  * still-unresolved placeholder.
  *

package/dist/project/generate.js

@@ -1,18 +1,18 @@
 // Copyright (c) 2026 BowenLabs. Astroid is MIT licensed.
 //
-// Project generation — the config → files layer the `astroid` CLI writes.
+// Project generation—the config → files layer the `astroid` CLI writes.
 //
 // Two tiers of generated file, deliberately kept apart:
 //
-//   1. The REGENERATED trio (`generateAstroidProject`) — `src/schema.ts`,
+//   1. The REGENERATED trio (`generateAstroidProject`)—`src/schema.ts`,
 //      `src/worker.ts`, `src/middleware.ts`. Pure functions of the config, marked
 //      "do not hand-edit". `astroid generate` (and `dev`/`build`) rewrite these on
 //      every run, and `astroid doctor` diffs them to catch drift.
 //
-//   2. The SCAFFOLD-ONCE files (`generateAstroidWrangler`, …) — `wrangler.jsonc`
+//   2. The SCAFFOLD-ONCE files (`generateAstroidWrangler`, …)—`wrangler.jsonc`
 //      and friends. `create-astroid` writes them once; the developer then owns
 //      them (fills real binding ids, secrets, account). `astroid generate` must
-//      NEVER clobber them, or it would wipe provisioned ids — so they live in a
+//      NEVER clobber them, or it would wipe provisioned ids—so they live in a
 //      separate function the regenerate path doesn't call.
 import { ASTROID_VITALS_BINDING, astroidVitalsDataset } from "../analytics/index.js";
 import { astroidCheckoutVars } from "../commerce/checkout-scaffold.js";
@@ -25,7 +25,7 @@ import { tenancyZone } from "../tenancy/index.js";
 import { generateAstroidSchema } from "../schema/generate.js";
 import { generateAstroidMiddleware, generateAstroidWorker } from "../worker/generate.js";
 /**
- * The regenerated trio — the files that are a pure function of the Astroid config
+ * The regenerated trio—the files that are a pure function of the Astroid config
  * and carry a "do not hand-edit" banner. `astroid generate` writes exactly these,
  * and `astroid doctor` regenerates them in-memory to diff against disk. Scaffold-
  * once files (wrangler.jsonc, astro.config, auth.ts) are NOT here by design.
@@ -47,7 +47,7 @@ export function generateAstroidProject(config) {
  * names come from {@link commerceSecretNames}, the same declaration the runtime
  * gate and the generated `env.d.ts` read.
  *
- * Empty string when the project enables no module that needs credentials — the
+ * Empty string when the project enables no module that needs credentials—the
  * core secrets (session, Turnstile, mail) are already in the template file, with
  * their own prose.
  */
@@ -75,14 +75,14 @@ export function generateAstroidSecretsEnv(config) {
     return lines.join("\n");
 }
 // Pinned compatibility date for the emitted Worker. A literal (Astroid's
-// generators are pure — no `Date.now()`), bumped deliberately when the runtime
+// generators are pure—no `Date.now()`), bumped deliberately when the runtime
 // baseline moves; matches the reference site's wrangler.jsonc.
 const COMPATIBILITY_DATE = "2026-06-20";
 /**
  * Generate a floor `wrangler.jsonc` from the config: the Worker name + editable
  * bindings a baseline Louise site needs (D1, R2 media, the rate-limit + autosave
  * KV, Cloudflare Images), custom-domain routes from `hosts`, and the `vars` the
- * media route + editor read. Binding ids are placeholders — real ids are filled by
+ * media route + editor read. Binding ids are placeholders—real ids are filled by
  * `wrangler … create` (or, later, `astroid deploy`); `astroid doctor` flags any
  * still-unresolved placeholder.
  *
@@ -98,7 +98,7 @@ export function generateAstroidWrangler(config) {
     const p = (s = "") => lines.push(s);
     p("{");
     p('  "$schema": "node_modules/wrangler/config-schema.json",');
-    p("  // The Cloudflare Worker name — also the default *.workers.dev subdomain.");
+    p("  // The Cloudflare Worker name—also the default *.workers.dev subdomain.");
     p(`  "name": ${JSON.stringify(key)},`);
     p("  // Pin your account so deploys don't prompt (or set CLOUDFLARE_ACCOUNT_ID).");
     p('  // "account_id": "<your-cloudflare-account-id>",');
@@ -108,7 +108,7 @@ export function generateAstroidWrangler(config) {
     p("  // global_fetch_strictly_public: a fetch to this zone goes through Cloudflare's");
     p("  // front door like any Internet request, past the WAF and bot rules (ADR 0012).");
     p("  // If the daily health scan starts reporting broken links that aren't, a zone");
-    p("  // rule is challenging its self-crawl — allow it rather than drop the flag.");
+    p("  // rule is challenging its self-crawl—allow it rather than drop the flag.");
     p('  "compatibility_flags": ["nodejs_compat", "global_fetch_strictly_public"],');
     p("  // @astrojs/cloudflare builds this entry and wires the static assets under dist/.");
     p('  "main": "src/worker.ts",');
@@ -120,11 +120,11 @@ export function generateAstroidWrangler(config) {
             p(`    { "pattern": ${JSON.stringify(host)}, "custom_domain": true },`);
         }
         if (tenancy) {
-            // A wildcard is a ZONE route, never a custom domain — Cloudflare rejects
+            // A wildcard is a ZONE route, never a custom domain—Cloudflare rejects
             // `custom_domain: true` on a pattern containing `*`, which is precisely
             // why `hosts` cannot express this.
             p("    // Wildcard tenant hosts (`tenancy.hostPattern`). A zone route, NOT a");
-            p("    // custom_domain — Cloudflare refuses a wildcard custom domain. The");
+            p("    // custom_domain—Cloudflare refuses a wildcard custom domain. The");
             p("    // apex is routed separately above: `*.example.com` does NOT match");
             p("    // `example.com`, so without a `hosts` entry the apex would 404.");
             p(`    { "pattern": ${JSON.stringify(`${tenancy.hostPattern}/*`)}, "zone_name": ${JSON.stringify(tenancyZone(tenancy))} },`);
@@ -137,7 +137,7 @@ export function generateAstroidWrangler(config) {
     }
     if (usesRealtime(config)) {
         // The per-page live editing session (ADR 0002). Two halves, and BOTH are
-        // required — a binding with no migration is a deploy error, and the class
+        // required—a binding with no migration is a deploy error, and the class
         // must also be exported from the worker entry (the generated src/worker.ts
         // re-exports it) or wrangler can't resolve `class_name`.
         p("  // Durable Object: the per-page live editing session (realtime module).");
@@ -146,7 +146,7 @@ export function generateAstroidWrangler(config) {
         p("  },");
         p("  // A DO class needs a migration tag. `new_sqlite_classes` (NOT");
         p("  // `new_classes`) because the session keeps its authoritative state in");
-        p("  // `ctx.storage`, which is the SQLite-backed store — and the storage");
+        p("  // `ctx.storage`, which is the SQLite-backed store—and the storage");
         p("  // backend cannot be changed after the class is first deployed.");
         p('  "migrations": [');
         p(`    { "tag": ${JSON.stringify(ASTROID_REALTIME_MIGRATION_TAG)}, "new_sqlite_classes": [${JSON.stringify(ASTROID_EDIT_SESSION_CLASS)}] }`);
@@ -154,7 +154,7 @@ export function generateAstroidWrangler(config) {
     }
     // Crons. ONE `scheduled` handler receives all of them and tells them apart by
     // `controller.cron`, so this list and the handler's dispatch must agree
-    // exactly — both come from `astroidCrons`, which is why it exists.
+    // exactly—both come from `astroidCrons`, which is why it exists.
     //
     // Daily: the site-health scan (broken links, missing alt text, SEO gaps).
     // Hourly (commerce only): the catalog re-sync safety net, so a missed or DLQ'd
@@ -164,7 +164,7 @@ export function generateAstroidWrangler(config) {
         const { queue, dlq } = astroidQueueNames(config);
         p("  // Provider webhooks are verified at the edge, then enqueued here so the");
         p("  // receiver can return fast. Retries + DLQ routing are Cloudflare's, not");
-        p("  // the consumer's — set them here, not in code.");
+        p("  // the consumer's—set them here, not in code.");
         p(`  // Create both: \`wrangler queues create ${queue}\` and \`… ${dlq}\`.`);
         p('  "queues": {');
         p(`    "producers": [{ "queue": ${JSON.stringify(queue)}, "binding": ${JSON.stringify(ASTROID_QUEUE_BINDING)} }],`);
@@ -197,17 +197,17 @@ export function generateAstroidWrangler(config) {
     p('  "images": { "binding": "IMAGES" },');
     p("  // Analytics Engine: real-visitor Core Web Vitals. Free, and the ingest");
     p("  // route accepts-and-drops without it, so it costs nothing unused. Reading");
-    p("  // the p75 back out needs CF_ACCOUNT_ID + CF_API_TOKEN (see .env.example) —");
+    p("  // the p75 back out needs CF_ACCOUNT_ID + CF_API_TOKEN (see .env.example)—");
     p("  // until those are real the Health badge reads 'not measured yet'.");
     p(`  "analytics_engine_datasets": [{ "binding": ${JSON.stringify(ASTROID_VITALS_BINDING)}, "dataset": ${JSON.stringify(astroidVitalsDataset(config))} }],`);
     p("  // Workers AI. Powers the editor's rewrite + SEO-suggest buttons and alt-text");
-    p("  // generation on upload — all of which SHIP IN THE EDITOR DRAWER already and,");
+    p("  // generation on upload—all of which SHIP IN THE EDITOR DRAWER already and,");
     p("  // without this binding, were permanently invisible: their routes answer 503");
     p("  // and the client hides the button. No account setup beyond the binding, and");
     p("  // every call is editor-gated, so a visitor can never spend your AI budget.");
     p('  "ai": { "binding": "AI" },');
     p("  // KV: RL = the security rate limiter (it also holds the daily site-health");
-    p("  // summary under its own key — one small singleton blob, not worth a binding");
+    p("  // summary under its own key—one small singleton blob, not worth a binding");
     p("  // someone has to remember to provision); DRAFTS = the autosave write-buffer.");
     p("  // Create each: `wrangler kv namespace create <RL|DRAFTS>`.");
     p('  "kv_namespaces": [');
@@ -217,11 +217,11 @@ export function generateAstroidWrangler(config) {
     // Email Sending. NOT optional decoration: `src/env.d.ts` declares EMAIL as a
     // required member, and Better Auth's magic-link path console-logs the link in
     // dev but calls `env.EMAIL.send(...)` unconditionally in production. Without
-    // this binding that call is a TypeError on a binding that was never created —
-    // so sign-in was impossible on every DEPLOYED site, while every local build
+    // this binding that call is a TypeError on a binding that was never created—so
+    // sign-in was impossible on every DEPLOYED site, while every local build
     // and every CI scaffold passed. Nothing in this repo runs a deployed scaffold,
     // which is why it survived.
-    p("  // Cloudflare Email Sending — magic-link sign-in + inquiry notifications.");
+    p("  // Cloudflare Email Sending—magic-link sign-in + inquiry notifications.");
     p("  // Sign-in DEPENDS on this: in production the magic link is emailed, not logged.");
     p("  // Enable Email Sending for your zone, then verify the address in MAIL_FROM.");
     p('  "send_email": [{ "name": "EMAIL" }],');
@@ -239,10 +239,10 @@ export function generateAstroidWrangler(config) {
     p("    // Turn it on for a PREVIEW deploy first and walk the activation runbook");
     p("    // (docs/adr/0004-edge-caching.md). `caches.default` is not cleared by");
     p("    // Cloudflare Dev Mode or Purge Everything, so a bad prod flip is hard to");
-    p("    // undo — this feature was reverted twice for exactly that.");
+    p("    // undo—this feature was reverted twice for exactly that.");
     p('    "ASTROID_EDGE_CACHE": "false",');
     for (const v of astroidCheckoutVars(config)) {
-        // Public, not secret — the app id ships to the browser to mount the card
+        // Public, not secret—the app id ships to the browser to mount the card
         // field, and the environment is a choice. Keeping them out of the secret
         // roster also keeps them out of the dormancy gate, which asks whether we can
         // safely CALL Square, not whether a card field can render.
@@ -251,11 +251,11 @@ export function generateAstroidWrangler(config) {
     p("  },");
     // Secrets are NOT vars: they belong in .dev.vars locally and in `wrangler
     // secret put` / Secrets Store when deployed. Listing the names here is
-    // deliberate — this is the file someone opens when provisioning, and the list
+    // deliberate—this is the file someone opens when provisioning, and the list
     // is generated from the same declaration the runtime dormancy gate reads.
     const secretNames = commerceSecretNames(config.commerce);
     if (secretNames.length > 0) {
-        p("  // Commerce secrets — set OUTSIDE this file (it's committed):");
+        p("  // Commerce secrets—set OUTSIDE this file (it's committed):");
         p("  //   local:    .dev.vars (see .env.example, seeded with DUMMY_REPLACE_ME)");
         p("  //   deployed: `wrangler secret put <NAME>`, or a Secrets Store binding");
         p("  // Until each is real, commerce stays dormant: the D1 mirror serves, the");

package/dist/project/index.d.ts

@@ -1,3 +1,4 @@
 export * from "./generate.js";
 export * from "./actions.js";
 export * from "./scaffold.js";
+export * from "./seed.js";

package/dist/project/index.js

@@ -1,7 +1,8 @@
 // Copyright (c) 2026 BowenLabs. Astroid is MIT licensed.
 //
-// Project generation — config → the files the `astroid` CLI writes (the
+// Project generation—config → the files the `astroid` CLI writes (the
 // regenerated schema/worker/middleware trio + the scaffold-once wrangler.jsonc).
 export * from "./generate.js";
 export * from "./actions.js";
 export * from "./scaffold.js";
+export * from "./seed.js";

package/dist/project/scaffold.d.ts

@@ -4,7 +4,7 @@ import type { AstroidConfig } from "../config.js";
  *
  * `apply` is the whole contract. `"skip"` (the default) leaves an existing file
  * alone. `"append-once"` is for the files a project accumulates into rather than
- * owns outright — `public/_headers` gets a stanza per module, and a second
+ * owns outright—`public/_headers` gets a stanza per module, and a second
  * module must not erase the first one's.
  */
 export interface ScaffoldFile {
@@ -23,7 +23,7 @@ export interface ScaffoldFile {
  * Every scaffold-once file this config implies.
  *
  * Ordered by module so a `generate` that writes several prints them in a stable
- * sequence. Returns `[]` for a plain marketing site with no modules — the
+ * sequence. Returns `[]` for a plain marketing site with no modules—the
  * baseline floor is entirely the regenerated trio plus the static template.
  */
 export declare function generateAstroidScaffoldFiles(config: AstroidConfig): ScaffoldFile[];