astroidjs 0.19.0 → 0.21.0

package/dist/pages/index.js

@@ -0,0 +1,34 @@
+// Copyright (c) 2026 BowenLabs. Astroid is MIT licensed.
+//
+// `astroidjs/pages`—the editor's work-in-progress on a page, for a page route
+// in edit mode. A subpath of its own because it reads through louise-toolkit's
+// editor and Drizzle, which the main entry (loaded by astroid.config.ts and the
+// CLI) stays free of.
+//
+// The generated worker saves pages through the DRAFTS buffer, keyed by the pages
+// collection's slug, and flushes to `pages_versions` in D1 behind it. A page
+// route has to read the same way, buffer first, or an editor who reloads before
+// the flush sees an older page than the one they just saved. Every site that
+// read D1 alone hit that, and each wrapped louise-toolkit's `resumeDraft` in the
+// same few lines to fix it. This is those lines, with the slug and the versions
+// table derived from the config rather than restated.
+import { collectionVersionsTable } from "louise-toolkit/content";
+import { resumeDraft } from "louise-toolkit/editor";
+import { astroidPagesCollection } from "../schema/collections.js";
+/**
+ * The editor's work-in-progress snapshot of the page with id `pageId`, or
+ * `null` when there's none (render the live row). The buffer comes first, then
+ * the newest pending draft in D1, the same order a save builds on.
+ *
+ * Returns the whole snapshot: which fields a page renders from it (`sections`,
+ * `body`, `title`) is the site's call. Call it only in edit mode; a visitor
+ * sees the live row.
+ */
+export function astroidPageDraft(config, env, pageId) {
+    const collection = astroidPagesCollection(config);
+    return resumeDraft(env.DB, {
+        versionsTable: collectionVersionsTable(collection),
+        collection: collection.slug,
+        bufferKv: env.DRAFTS,
+    }, { id: pageId });
+}

package/dist/project/generate.js

@@ -17,10 +17,12 @@
 import { ASTROID_VITALS_BINDING, astroidVitalsDataset } from "../analytics/index.js";
 import { astroidCheckoutVars } from "../commerce/checkout-scaffold.js";
 import { astroidCommerceProviders } from "../commerce/roles.js";
-import { COMMERCE_PROVIDER_SECRETS, COMMERCE_PROVIDER_SETUP, commerceSecretNames, } from "../commerce/secrets.js";
+import { COMMERCE_PROVIDER_SECRETS, COMMERCE_PROVIDER_SETUP, commerceProviderWebhookSecrets, commerceSecretNames, } from "../commerce/secrets.js";
+import { ASTROID_INCIDENT_EVENTS_BINDING, ASTROID_VERSION_METADATA_BINDING, astroidIncidentEventsDataset, } from "../incidents/names.js";
 import { ASTROID_QUEUE_BINDING, ASTROID_QUEUE_RETRY_DELAY, astroidCrons, astroidQueueNames, astroidUsesQueues, } from "../queues/messages.js";
 import { ASTROID_EDIT_SESSION_CLASS, ASTROID_REALTIME_BINDING, ASTROID_REALTIME_MIGRATION_TAG, usesRealtime, } from "../realtime/scaffold.js";
 import { ASTROID_SECRET_PLACEHOLDER } from "../secrets.js";
+import { astroidHasEditor } from "../shape.js";
 import { tenancyZone } from "../tenancy/index.js";
 import { generateAstroidSchema } from "../schema/generate.js";
 import { ASTROID_AI_GATEWAY_VAR } from "../worker/gateway.js";
@@ -93,7 +95,10 @@ export function generateAstroidSecretsEnv(config) {
     for (const provider of providers) {
         const spec = COMMERCE_PROVIDER_SECRETS[provider];
         lines.push("#", `# ${provider}: ${COMMERCE_PROVIDER_SETUP[provider]}`);
-        for (const name of [...spec.credentials, spec.webhook]) {
+        for (const name of [
+            ...spec.credentials,
+            ...commerceProviderWebhookSecrets(provider, config.commerce),
+        ]) {
             lines.push(`${name}=${ASTROID_SECRET_PLACEHOLDER}`);
         }
     }
@@ -116,6 +121,12 @@ const COMPATIBILITY_DATE = "2026-06-20";
  */
 export function generateAstroidWrangler(config) {
     const key = config.key;
+    // An app with no editor binds none of what the editor uses: the media bucket
+    // and Images, the draft buffer, Workers AI, and the CWV dataset. It sends mail
+    // only for a portal's password resets.
+    const editor = astroidHasEditor(config);
+    const mail = editor || Boolean(config.portal?.enabled);
+    const crons = astroidCrons(config);
     const mediaBase = config.deploy?.mediaBase ?? "/media";
     const hosts = config.hosts ?? [];
     const primaryHost = hosts[0];
@@ -184,7 +195,10 @@ export function generateAstroidWrangler(config) {
     // Daily: the site-health scan (broken links, missing alt text, SEO gaps).
     // Hourly (commerce only): the catalog re-sync safety net, so a missed or DLQ'd
     // webhook can only leave the site stale until the next tick.
-    p(`  "triggers": { "crons": ${JSON.stringify(astroidCrons(config))} },`);
+    // None at all for an app with nothing scheduled: a trigger with no handler
+    // is an invocation that fails every time it fires.
+    if (crons.length > 0)
+        p(`  "triggers": { "crons": ${JSON.stringify(crons)} },`);
     if (astroidUsesQueues(config)) {
         const { queue, dlq } = astroidQueueNames(config);
         p("  // Provider webhooks are verified at the edge, then enqueued here so the");
@@ -205,44 +219,74 @@ export function generateAstroidWrangler(config) {
         p(`        "retry_delay": ${config.queues?.retryDelay ?? ASTROID_QUEUE_RETRY_DELAY},`);
         p(`        "dead_letter_queue": ${JSON.stringify(dlq)},`);
         p("      },");
+        p("      // The dead-letter queue's own consumer: the worker keeps each message");
+        p("      // in the `dead_letters` table and counts it as an incident, so a");
+        p("      // failed event is never lost unseen. No retries of its own.");
+        p(`      { "queue": ${JSON.stringify(dlq)}, "max_batch_size": 10, "max_retries": 0 },`);
         p("    ],");
         p("  },");
     }
-    p("  // D1 holds pages / site_settings / media / inquiries (schema in src/schema.ts,");
-    p("  // migrations in ./migrations). Create it: `wrangler d1 create <name>`.");
+    if (editor) {
+        p("  // D1 holds pages / site_settings / media / inquiries (schema in src/schema.ts,");
+        p("  // migrations in ./migrations). Create it: `wrangler d1 create <name>`.");
+    }
+    else {
+        p("  // D1: this app's tables (src/schema.ts), or the database of the app that");
+        p("  // owns the schema, bound by its id. Create one: `wrangler d1 create <name>`.");
+    }
+    p("  // The deployed version's ID, which each incident records as its release.");
+    p(`  "version_metadata": { "binding": ${JSON.stringify(ASTROID_VERSION_METADATA_BINDING)} },`);
+    if (!editor) {
+        // The editor shape lists this dataset beside the Core Web Vitals one below.
+        p("  // Analytics Engine: incident counts over time (louise-toolkit ADR 0022).");
+        p(`  "analytics_engine_datasets": [{ "binding": ${JSON.stringify(ASTROID_INCIDENT_EVENTS_BINDING)}, "dataset": ${JSON.stringify(astroidIncidentEventsDataset(config))} }],`);
+    }
     p('  "d1_databases": [');
     p("    {");
     p('      "binding": "DB",');
     p(`      "database_name": ${JSON.stringify(key)},`);
     p('      "database_id": "<run: wrangler d1 create ' + key + '>",');
-    p('      "migrations_dir": "migrations",');
+    // Left out when another app migrates this database (`deploy.migrations:
+    // false`), which `astroid doctor` would otherwise report as a contradiction.
+    if (config.deploy?.migrations !== false)
+        p('      "migrations_dir": "migrations",');
     p("    },");
     p("  ],");
-    p("  // R2 bucket for uploaded media, streamed back through the Worker at MEDIA_URL");
-    p("  // (no public bucket). Create it: `wrangler r2 bucket create <name>-media`.");
-    p(`  "r2_buckets": [{ "binding": "MEDIA", "bucket_name": ${JSON.stringify(`${key}-media`)} }],`);
-    p("  // Cloudflare Images: the media route reads upload dimensions + backs server-");
-    p("  // side re-encode. Also @astrojs/cloudflare's production image service.");
-    p('  "images": { "binding": "IMAGES" },');
-    p("  // Analytics Engine: real-visitor Core Web Vitals. Free, and the ingest");
-    p("  // route accepts-and-drops without it, so it costs nothing unused. Reading");
-    p("  // the p75 back out needs CF_ACCOUNT_ID + CF_API_TOKEN (see .env.example)—");
-    p("  // until those are real the Health badge reads 'not measured yet'.");
-    p(`  "analytics_engine_datasets": [{ "binding": ${JSON.stringify(ASTROID_VITALS_BINDING)}, "dataset": ${JSON.stringify(astroidVitalsDataset(config))} }],`);
-    p("  // Workers AI. Powers the editor's rewrite + SEO-suggest buttons and alt-text");
-    p("  // generation on upload—all of which SHIP IN THE EDITOR DRAWER already and,");
-    p("  // without this binding, were permanently invisible: their routes answer 503");
-    p("  // and the client hides the button. No account setup beyond the binding, and");
-    p("  // every call is editor-gated, so a visitor can never spend your AI budget.");
-    p('  "ai": { "binding": "AI" },');
-    p("  // KV: RL = the security rate limiter (it also holds the daily site-health");
-    p("  // summary under its own key—one small singleton blob, not worth a binding");
-    p("  // someone has to remember to provision); DRAFTS = the autosave write-buffer.");
-    p("  // Named for the project, so two sites in one account don't collide.");
-    p("  // `astroid provision` creates each and fills in its id.");
+    if (editor) {
+        p("  // R2 bucket for uploaded media, streamed back through the Worker at MEDIA_URL");
+        p("  // (no public bucket). Create it: `wrangler r2 bucket create <name>-media`.");
+        p(`  "r2_buckets": [{ "binding": "MEDIA", "bucket_name": ${JSON.stringify(`${key}-media`)} }],`);
+        p("  // Cloudflare Images: the media route reads upload dimensions + backs server-");
+        p("  // side re-encode. Also @astrojs/cloudflare's production image service.");
+        p('  "images": { "binding": "IMAGES" },');
+        p("  // Analytics Engine: real-visitor Core Web Vitals. Free, and the ingest");
+        p("  // route accepts-and-drops without it, so it costs nothing unused. Reading");
+        p("  // the p75 back out needs CF_ACCOUNT_ID + CF_API_TOKEN (see .env.example)—");
+        p("  // until those are real the Health badge reads 'not measured yet'. The");
+        p("  // second dataset counts incidents over time (louise-toolkit ADR 0022).");
+        p(`  "analytics_engine_datasets": [{ "binding": ${JSON.stringify(ASTROID_VITALS_BINDING)}, "dataset": ${JSON.stringify(astroidVitalsDataset(config))} }, { "binding": ${JSON.stringify(ASTROID_INCIDENT_EVENTS_BINDING)}, "dataset": ${JSON.stringify(astroidIncidentEventsDataset(config))} }],`);
+        p("  // Workers AI. Powers the editor's rewrite + SEO-suggest buttons and alt-text");
+        p("  // generation on upload—all of which SHIP IN THE EDITOR DRAWER already and,");
+        p("  // without this binding, were permanently invisible: their routes answer 503");
+        p("  // and the client hides the button. No account setup beyond the binding, and");
+        p("  // every call is editor-gated, so a visitor can never spend your AI budget.");
+        p('  "ai": { "binding": "AI" },');
+        p("  // KV: RL = the security rate limiter (it also holds the daily site-health");
+        p("  // summary under its own key—one small singleton blob, not worth a binding");
+        p("  // someone has to remember to provision); DRAFTS = the autosave write-buffer.");
+        p("  // Named for the project, so two sites in one account don't collide.");
+        p("  // `astroid provision` creates each and fills in its id.");
+    }
+    else {
+        p("  // KV: RL = the security rate limiter. Named for the project, so two apps in");
+        p("  // one account don't collide. `astroid provision` creates it and fills in");
+        p("  // its id.");
+    }
     p('  "kv_namespaces": [');
     p(`    { "binding": "RL", "id": "<run: wrangler kv namespace create ${key}-rl>" },`);
-    p(`    { "binding": "DRAFTS", "id": "<run: wrangler kv namespace create ${key}-drafts>" },`);
+    if (editor) {
+        p(`    { "binding": "DRAFTS", "id": "<run: wrangler kv namespace create ${key}-drafts>" },`);
+    }
     p("  ],");
     // Email Sending. NOT optional decoration: `src/env.d.ts` declares EMAIL as a
     // required member, and Better Auth's magic-link path console-logs the link in
@@ -251,31 +295,44 @@ export function generateAstroidWrangler(config) {
     // sign-in was impossible on every DEPLOYED site, while every local build
     // and every CI scaffold passed. Nothing in this repo runs a deployed scaffold,
     // which is why it survived.
-    p("  // Cloudflare Email Sending—magic-link sign-in + inquiry notifications.");
-    p("  // Sign-in DEPENDS on this: in production the magic link is emailed, not logged.");
-    p("  // Enable Email Sending for your zone, then verify the address in MAIL_FROM.");
-    p('  "send_email": [{ "name": "EMAIL" }],');
-    p("  // Public base for media URLs; same-origin keeps media self-contained. Read off");
-    p("  // the runtime env by the framework-agnostic media route, so it stays a `var`.");
+    if (editor) {
+        p("  // Cloudflare Email Sending—magic-link sign-in + inquiry notifications.");
+        p("  // Sign-in DEPENDS on this: in production the magic link is emailed, not logged.");
+    }
+    else if (mail) {
+        p("  // Cloudflare Email Sending—the portal's password-reset mail, which is");
+        p("  // logged in dev and emailed in production.");
+    }
+    if (mail) {
+        p("  // Enable Email Sending for your zone, then verify the address in MAIL_FROM.");
+        p('  "send_email": [{ "name": "EMAIL" }],');
+    }
+    if (editor) {
+        p("  // Public base for media URLs; same-origin keeps media self-contained. Read off");
+        p("  // the runtime env by the framework-agnostic media route, so it stays a `var`.");
+    }
     p('  "vars": {');
-    p(`    "MEDIA_URL": ${JSON.stringify(mediaBase)},`);
+    if (editor)
+        p(`    "MEDIA_URL": ${JSON.stringify(mediaBase)},`);
     p(`    "SITE_URL": ${JSON.stringify(primaryHost ? `https://${primaryHost}` : `https://${key}.workers.dev`)},`);
-    p("    // The editor allowlist / owner. Wire this into your auth seam (src/auth.ts).");
-    p('    "OWNER_EMAIL": "",');
-    p("    // AI Gateway for the editor's AI assists: request logs, latency and error");
-    p("    // rates, and caching. Empty calls Workers AI directly. Create a gateway,");
-    p("    // put its id here, and first say on the privacy page that its log holds");
-    p("    // the text editors send to the assists.");
-    p(`    "${ASTROID_AI_GATEWAY_VAR}": "",`);
-    p("    // Edge caching for published pages (ADR 0004). OFF by default, and the");
-    p("    // default is the safe state: with it off every render is `no-store` and");
-    p("    // the Worker cache layer stores nothing.");
-    p("    //");
-    p("    // Turn it on for a PREVIEW deploy first and walk the activation runbook");
-    p("    // (docs/adr/0004-edge-caching.md). `caches.default` is not cleared by");
-    p("    // Cloudflare Dev Mode or Purge Everything, so a bad prod flip is hard to");
-    p("    // undo—this feature was reverted twice for exactly that.");
-    p('    "ASTROID_EDGE_CACHE": "false",');
+    if (editor) {
+        p("    // The editor allowlist / owner. Wire this into your auth seam (src/auth.ts).");
+        p('    "OWNER_EMAIL": "",');
+        p("    // AI Gateway for the editor's AI assists: request logs, latency and error");
+        p("    // rates, and caching. Empty calls Workers AI directly. Create a gateway,");
+        p("    // put its id here, and first say on the privacy page that its log holds");
+        p("    // the text editors send to the assists.");
+        p(`    "${ASTROID_AI_GATEWAY_VAR}": "",`);
+        p("    // Edge caching for published pages (ADR 0004). OFF by default, and the");
+        p("    // default is the safe state: with it off every render is `no-store` and");
+        p("    // the Worker cache layer stores nothing.");
+        p("    //");
+        p("    // Turn it on for a PREVIEW deploy first and walk the activation runbook");
+        p("    // (docs/adr/0004-edge-caching.md). `caches.default` is not cleared by");
+        p("    // Cloudflare Dev Mode or Purge Everything, so a bad prod flip is hard to");
+        p("    // undo—this feature was reverted twice for exactly that.");
+        p('    "ASTROID_EDGE_CACHE": "false",');
+    }
     for (const v of astroidCheckoutVars(config)) {
         // Public, not secret—the app id ships to the browser to mount the card
         // field, and the environment is a choice. Keeping them out of the secret

package/dist/project/scaffold.js

@@ -26,11 +26,13 @@
 import { generateAstroidCheckoutRoute, generateAstroidSquareCard, } from "../commerce/checkout-scaffold.js";
 import { generateCatalogMigrationSql } from "../commerce/mirror.js";
 import { generateAstroidVitalsBeacon } from "../analytics/index.js";
+import { ASTROID_INCIDENTS_MIGRATION } from "../incidents/names.js";
 import { generateAstroidActions } from "./actions.js";
 import { cwvBeaconScript } from "louise-toolkit/analytics";
 import { generateMapEmbedComponent, generateMapTileRoute } from "../map/scaffold.js";
 import { generateAstroidGalleryPage } from "../portfolio/scaffold.js";
 import { astroidPortal } from "../portal/config.js";
+import { astroidHasEditor } from "../shape.js";
 import { generateAstroidPortalAuth, generateAstroidPortalAuthRoute } from "../portal/scaffold.js";
 import { generateAstroidTenancy } from "../tenancy/index.js";
 import { generateAstroidEditSession } from "../realtime/scaffold.js";
@@ -154,6 +156,10 @@ function generateAstroidSettingsHooks() {
  */
 export function generateAstroidScaffoldFiles(config) {
     const files = [];
+    // An app with no editor gets none of the editor's files: the content
+    // migrations, the CWV beacon its Health panel reads, the Actions surface
+    // over pages and settings, and the gallery page over the media library.
+    const editor = astroidHasEditor(config);
     // --- commerce: the catalog table's migration ------------------------------
     // Numbered 0003 so it lands after the template's 0000_content and the auth
     // pair (0001, 0002) that `create-astroid` writes. Without it `--commerce`
@@ -170,21 +176,38 @@ export function generateAstroidScaffoldFiles(config) {
     // filename. The CLI moves each into the site's `migrations_dir` and past
     // the site's own numbers (see migrations.ts), so a site that already has its
     // own 0004 gets the next free number instead of a second 0004.
-    files.push({
-        path: "migrations/0004_page_redirects.sql",
-        contents: ASTROID_PAGE_REDIRECTS_MIGRATION,
-        migration: true,
-    }, {
-        path: "migrations/0005_media_alt_undecided.sql",
-        contents: ASTROID_MEDIA_ALT_MIGRATION,
-        migration: true,
-    });
+    if (editor) {
+        files.push({
+            path: "migrations/0004_page_redirects.sql",
+            contents: ASTROID_PAGE_REDIRECTS_MIGRATION,
+            migration: true,
+        }, {
+            path: "migrations/0005_media_alt_undecided.sql",
+            contents: ASTROID_MEDIA_ALT_MIGRATION,
+            migration: true,
+        });
+    }
+    // --- incident capture's tables -------------------------------------------
+    // For every shape: the generated worker counts failures into `incidents`
+    // and keeps dead letters in `dead_letters` (louise-toolkit ADR 0022). Written
+    // into an existing site by `astroid generate`, like the two above, and
+    // renumbered past the site's own migrations. Not when another app migrates
+    // this database (`deploy.migrations: false`); that app owns the tables.
+    if (config.deploy?.migrations !== false) {
+        files.push({
+            path: "migrations/0006_incidents.sql",
+            contents: ASTROID_INCIDENTS_MIGRATION,
+            migration: true,
+        });
+    }
     // --- the CWV beacon -------------------------------------------------------
     // A static file under public/, so it is same-origin and covered by
     // `script-src 'self'`—an inline script carrying generated content could not
     // be hashed into the CSP and would be blocked.
-    const beacon = generateAstroidVitalsBeacon(config, cwvBeaconScript());
-    files.push({ path: beacon.path, contents: beacon.contents });
+    if (editor) {
+        const beacon = generateAstroidVitalsBeacon(config, cwvBeaconScript());
+        files.push({ path: beacon.path, contents: beacon.contents });
+    }
     // --- site-owned schema tables --------------------------------------------
     // Always: the generated src/schema.ts re-exports `./schema.site.js`, so the
     // file must exist even when empty. A project declares tables Astroid doesn't
@@ -218,10 +241,12 @@ export function generateAstroidScaffoldFiles(config) {
         files.push({ path: "src/settings-hooks.ts", contents: generateAstroidSettingsHooks() });
     }
     // --- the typed Astro Actions surface --------------------------------------
-    // Always: every project has editable pages, and the routes alone leave the
-    // Astro-native half of ADR 0001 unbuilt. Scaffold-once because it is meant to
-    // be added to.
-    files.push({ path: "src/actions/index.ts", contents: generateAstroidActions(config) });
+    // Every project with an editor: it has editable pages, and the routes alone
+    // leave the Astro-native half of ADR 0001 unbuilt. Scaffold-once because it
+    // is meant to be added to.
+    if (editor) {
+        files.push({ path: "src/actions/index.ts", contents: generateAstroidActions(config) });
+    }
     // --- commerce: the server-authoritative payment seam ----------------------
     // Scaffold-once: a real store adds shipping, tax, an order row, a receipt.
     // What's fixed is the sequence that keeps a charge correct.
@@ -243,7 +268,7 @@ export function generateAstroidScaffoldFiles(config) {
     }
     // --- portfolio: the gallery page -----------------------------------------
     // "Which assets appear, in what order" is the first thing a portfolio changes.
-    const gallery = generateAstroidGalleryPage(config);
+    const gallery = editor ? generateAstroidGalleryPage(config) : null;
     if (gallery)
         files.push({ path: "src/pages/work.astro", contents: gallery });
     // --- pwa: the service worker, manifest, and its headers -------------------

package/dist/queues/index.d.ts

@@ -1,4 +1,4 @@
 export { astroidQueueHandler, type QueueHandlerOptions } from "./consumer.js";
-export { affectsCatalog, ASTROID_DEFAULT_CRON, ASTROID_HEALTH_CRON, ASTROID_QUEUE_BINDING, ASTROID_QUEUE_RETRY_DELAY, type AstroidQueueMessage, astroidCron, astroidCrons, astroidQueueNames, astroidUsesQueues, type CatalogRefreshMessage, type WebhookMessage, } from "./messages.js";
+export { affectsCatalog, ASTROID_DEFAULT_CRON, ASTROID_HEALTH_CRON, ASTROID_QUEUE_BINDING, ASTROID_QUEUE_RETRY_DELAY, type AstroidQueueMessage, astroidCommercePipeline, astroidCron, astroidCrons, astroidQueueNames, astroidUsesQueues, type CatalogRefreshMessage, type WebhookMessage, } from "./messages.js";
 export { generateAstroidEnvBindings, generateAstroidQueueSeam, generateAstroidWebhookRoute, generateAstroidWebhookRoutes, } from "./scaffold.js";
 export { astroidQueue, handleWebhook, type QueueProducer, type WebhookRouteOptions, type WebhookVerifyInput, } from "./webhook.js";

package/dist/queues/index.js

@@ -1,5 +1,5 @@
 // Copyright (c) 2026 BowenLabs. Astroid is MIT licensed.
 export { astroidQueueHandler } from "./consumer.js";
-export { affectsCatalog, ASTROID_DEFAULT_CRON, ASTROID_HEALTH_CRON, ASTROID_QUEUE_BINDING, ASTROID_QUEUE_RETRY_DELAY, astroidCron, astroidCrons, astroidQueueNames, astroidUsesQueues, } from "./messages.js";
+export { affectsCatalog, ASTROID_DEFAULT_CRON, ASTROID_HEALTH_CRON, ASTROID_QUEUE_BINDING, ASTROID_QUEUE_RETRY_DELAY, astroidCommercePipeline, astroidCron, astroidCrons, astroidQueueNames, astroidUsesQueues, } from "./messages.js";
 export { generateAstroidEnvBindings, generateAstroidQueueSeam, generateAstroidWebhookRoute, generateAstroidWebhookRoutes, } from "./scaffold.js";
 export { astroidQueue, handleWebhook, } from "./webhook.js";

package/dist/queues/messages.d.ts

@@ -7,6 +7,12 @@ import type { AstroidConfig } from "../config.js";
  * provider's delivery timeout is shorter than your catalog sync.
  */
 export declare function astroidUsesQueues(config: AstroidConfig): boolean;
+/**
+ * Whether this project runs the commerce pipeline: the webhook receivers and the
+ * catalog re-sync. On whenever commerce is configured, unless the config sets
+ * `commerce.pipeline: false` because another project runs it.
+ */
+export declare function astroidCommercePipeline(config: AstroidConfig): boolean;
 /** Hourly. Frequent enough that stale data has a bounded lifetime, rare enough
  *  to be free. */
 export declare const ASTROID_DEFAULT_CRON = "0 * * * *";

package/dist/queues/messages.js

@@ -1,6 +1,7 @@
 // Copyright (c) 2026 BowenLabs. Astroid is MIT licensed.
 //
 // What flows through the project's queue, and when it matters.
+import { astroidHasEditor } from "../shape.js";
 /**
  * Whether this project runs a queue consumer + cron.
  *
@@ -9,7 +10,15 @@
  * provider's delivery timeout is shorter than your catalog sync.
  */
 export function astroidUsesQueues(config) {
-    return config.queues?.enabled ?? Boolean(config.commerce);
+    return config.queues?.enabled ?? astroidCommercePipeline(config);
+}
+/**
+ * Whether this project runs the commerce pipeline: the webhook receivers and the
+ * catalog re-sync. On whenever commerce is configured, unless the config sets
+ * `commerce.pipeline: false` because another project runs it.
+ */
+export function astroidCommercePipeline(config) {
+    return Boolean(config.commerce) && config.commerce?.pipeline !== false;
 }
 /** Hourly. Frequent enough that stale data has a bounded lifetime, rare enough
  *  to be free. */
@@ -18,6 +27,10 @@ export const ASTROID_DEFAULT_CRON = "0 * * * *";
 export function astroidCron(config) {
     if (!astroidUsesQueues(config))
         return null;
+    // The re-sync is part of the pipeline, so a project that leaves the pipeline
+    // to another one leaves this to it too, even when its queue runs for crons.
+    if (config.commerce && !astroidCommercePipeline(config))
+        return null;
     const cron = config.queues?.cron;
     if (cron === false)
         return null;
@@ -40,7 +53,9 @@ export const ASTROID_HEALTH_CRON = "17 4 * * *";
  * agree exactly, and a mismatch is a job that silently never runs.
  */
 export function astroidCrons(config) {
-    const crons = [ASTROID_HEALTH_CRON];
+    // The health scan reports to the editor's Health panel, over the editor's
+    // pages and media, so an app with no editor has nothing to scan or show.
+    const crons = astroidHasEditor(config) ? [ASTROID_HEALTH_CRON] : [];
     const catalog = astroidCron(config);
     if (catalog)
         crons.push(catalog);

package/dist/queues/scaffold.js

@@ -11,7 +11,7 @@
 import { astroidCatalogMirror } from "../commerce/mirror.js";
 import { astroidCommerceProviders, astroidCommerceRoles } from "../commerce/roles.js";
 import { COMMERCE_PROVIDER_SECRETS } from "../commerce/secrets.js";
-import { ASTROID_QUEUE_BINDING } from "./messages.js";
+import { ASTROID_QUEUE_BINDING, astroidCommercePipeline } from "./messages.js";
 /**
  * Per-provider webhook facts: the header, the verifier, and how it's called.
  *
@@ -244,6 +244,10 @@ export function generateAstroidWebhookRoute(config, forProvider) {
  * two roles still has one endpoint and one secret.
  */
 export function generateAstroidWebhookRoutes(config) {
+    // A project that leaves the pipeline to another one receives no webhooks: the
+    // provider delivers each event to one endpoint, and it's the other project's.
+    if (!astroidCommercePipeline(config))
+        return [];
     return astroidCommerceProviders(config.commerce).flatMap((provider) => {
         const contents = generateAstroidWebhookRoute(config, provider);
         return contents ? [{ path: `src/pages/api/webhooks/${provider}.ts`, contents }] : [];

package/dist/schema/generate.js

@@ -11,7 +11,69 @@
 // result to disk and formats it. Import ordering matches the site's schema.ts so
 // a formatter never re-flags the generated file.
 import { generateCatalogTable } from "../commerce/mirror.js";
+import { astroidHasEditor } from "../shape.js";
 import { astroidFrameworkTables } from "./framework.js";
+/** The Drizzle column builders a catalog table's source uses. */
+function catalogBuilders(catalog) {
+    const builders = ["integer", "sqliteTable", "text"];
+    if (catalog?.includes("real("))
+        builders.push("real");
+    return builders.sort();
+}
+/**
+ * The incident tables every shape re-exports (louise-toolkit ADR 0022): the
+ * worker counts failures into `incidents` and keeps dead-lettered messages in
+ * `dead_letters`, so an app owns both, even when it owns nothing else. Not when
+ * another app migrates its database (`deploy.migrations: false`): that app owns
+ * them, and drizzle-kit here must not write migrations for them.
+ */
+function incidentTables(config) {
+    return config.deploy?.migrations === false ? [] : INCIDENT_TABLES;
+}
+const INCIDENT_TABLES = [
+    "// Incident capture's tables (louise-toolkit ADR 0022): the generated worker",
+    "// counts failures into `incidents` and keeps dead-lettered queue messages in",
+    "// `dead_letters`.",
+    'export { deadLetters, incidents } from "louise-toolkit/incidents";',
+    "",
+];
+/**
+ * The schema of an app with no editor (`editor: false`): no `pages`, no
+ * versions, and no framework tables, because nothing here edits them. What's
+ * left is what the config itself implies, the commerce catalog, and the site's
+ * own tables.
+ *
+ * A framework table the app only READS, such as `siteSettings` in a database
+ * another app owns, is imported straight from `louise-toolkit/db` where it's
+ * queried. Re-exporting it here would put it in front of drizzle-kit, which
+ * would then write migrations for a table this app doesn't own.
+ */
+function generateAppSchema(config) {
+    const catalog = generateCatalogTable(config);
+    return [
+        "// Generated by astroidjs—do not hand-edit.",
+        "// Source: your defineAstroid config. This app has no editor (`editor: false`),",
+        "// so it owns no content tables. To read one that another app owns, such as",
+        '// `siteSettings`, import it from "louise-toolkit/db" where you query it.',
+        ...(catalog
+            ? [
+                `import { ${catalogBuilders(catalog).join(", ")} } from "drizzle-orm/sqlite-core";`,
+                // The catalog's JSON columns are typed with it; the editor schema
+                // imports it for `pages.sections` anyway.
+                ...(catalog.includes("JsonValue")
+                    ? ['import type { JsonValue } from "louise-toolkit/content";']
+                    : []),
+                "",
+                catalog,
+            ]
+            : [""]),
+        ...incidentTables(config),
+        "// Site-owned tables, declared in src/schema.site.ts and re-exported here so",
+        "// drizzle-kit and the worker see them. Empty until the app adds one.",
+        'export * from "./schema.site.js";',
+        "",
+    ].join("\n");
+}
 /**
  * Generate the TypeScript source of a site's Drizzle schema from an Astroid
  * config. The output is a drop-in replacement for the hand-written `schema.ts`:
@@ -19,6 +81,8 @@ import { astroidFrameworkTables } from "./framework.js";
  * table, and the re-exported framework tables the config selects.
  */
 export function generateAstroidSchema(config) {
+    if (!astroidHasEditor(config))
+        return generateAppSchema(config);
     const framework = astroidFrameworkTables(config); // sorted
     // pagesColumns is spread into `pages`; the framework tables are re-exported.
     // One import brings them all in (matching the site) so nothing is unused.
@@ -27,13 +91,11 @@ export function generateAstroidSchema(config) {
     // Only import the column builders the emitted source actually uses—an
     // unused import is a lint error in the project we're generating into, and a
     // missing one (`real`, from the catalog's price/sortOrder) is a type error.
-    const drizzleImports = ["integer", "sqliteTable", "text"];
-    if (catalog?.includes("real("))
-        drizzleImports.push("real");
+    const drizzleImports = catalogBuilders(catalog);
     return [
         "// Generated by astroidjs—do not hand-edit.",
         "// Source: your defineAstroid config.",
-        `import { ${drizzleImports.sort().join(", ")} } from "drizzle-orm/sqlite-core";`,
+        `import { ${drizzleImports.join(", ")} } from "drizzle-orm/sqlite-core";`,
         'import { collectionVersionsTable, type JsonValue } from "louise-toolkit/content";',
         `import { ${dbImports.join(", ")} } from "louise-toolkit/db";`,
         "",
@@ -53,6 +115,7 @@ export function generateAstroidSchema(config) {
         ...(catalog ? [catalog] : []),
         `export { ${framework.join(", ")} };`,
         "",
+        ...incidentTables(config),
         "// Site-owned tables (the ones Astroid doesn't manage): a project declares",
         "// its own Drizzle tables in src/schema.site.ts and they're re-exported here",
         "// so drizzle-kit sees them and the generated worker can import them. The file",

package/dist/security/index.d.ts

@@ -1 +1 @@
-export { ASTROID_CHECKOUT_PATH, ASTROID_PORTAL_BASE_PATH, astroidRateRules, type RateRule, } from "./rate-rules.js";
+export { ASTROID_API_PREFIX, ASTROID_CHECKOUT_PATH, ASTROID_PORTAL_BASE_PATH, astroidRateRules, type RateRule, } from "./rate-rules.js";

package/dist/security/index.js

@@ -1,2 +1,2 @@
 // Copyright (c) 2026 BowenLabs. Astroid is MIT licensed.
-export { ASTROID_CHECKOUT_PATH, ASTROID_PORTAL_BASE_PATH, astroidRateRules, } from "./rate-rules.js";
+export { ASTROID_API_PREFIX, ASTROID_CHECKOUT_PATH, ASTROID_PORTAL_BASE_PATH, astroidRateRules, } from "./rate-rules.js";

package/dist/security/rate-rules.d.ts

@@ -9,10 +9,17 @@ export type { RateRule };
 export declare const ASTROID_PORTAL_BASE_PATH = "/api/portal-auth";
 /** Path the commerce module's checkout POSTs to. */
 export declare const ASTROID_CHECKOUT_PATH = "/api/checkout";
+/**
+ * Where an app with no editor (`editor: false`) serves its versioned JSON API.
+ * A web client and a later native client call the same routes, so a new
+ * version is a new prefix rather than a change to the one clients already use.
+ */
+export declare const ASTROID_API_PREFIX = "/api/v1";
 /**
  * The rule set for a project, derived from its config: the editor sign-in
- * surface always, the portal's credential surfaces when a portal is enabled, and
- * checkout when commerce is configured.
+ * surface unless the project has no editor, the portal's credential surfaces
+ * when a portal is enabled, checkout when commerce is configured, and the
+ * versioned API for an app with no editor.
  *
  * Rules are matched first-wins, and `security.rateRules` from the config are
  * placed FIRST—so a site tightens or loosens any default by declaring its own