astroidjs 0.7.2 → 0.8.0

package/dist/config.d.ts

@@ -288,6 +288,23 @@ export interface TenancyConfig {
      * makes local dev work, since `wrangler dev` cannot serve subdomains.
      */
     apps?: Record<string, string>;
+    /**
+     * What a syntactically-valid tenant host whose label resolves to NOTHING
+     * (`resolveTenant` returned `null`) should get.
+     *
+     * `"fallthrough"` (the default) renders the ordinary site — which means a
+     * stranger who points a CNAME at your zone gets your homepage. `"404"` emits
+     * a guard that refuses the request instead, which is the right answer the
+     * moment tenant hosts are commercial surfaces: an unknown storefront must be
+     * unambiguously *not a page*, not a copy of the marketing site under someone
+     * else's name.
+     *
+     * Either way the decision stays visible in config rather than buried in the
+     * seam: `resolveTenant` decides *what exists*; this decides what not-existing
+     * means. Reserved labels, app labels, the apex, and off-pattern hosts are
+     * never affected — they aren't tenant candidates at all.
+     */
+    unknown?: "fallthrough" | "404";
 }
 export interface AstroidCron {
     /** Standard 5-field cron, UTC — e.g. `"*&#47;15 * * * *"`. */

package/dist/tenancy/index.js

@@ -115,8 +115,8 @@ export function generateAstroidTenancy(config) {
         " *",
         " * `null` falls through to the ordinary site — which is a real choice, not a",
         " * default: a stranger's subdomain then renders your homepage. If that is wrong",
-        " * for this project, return null here and refuse it in the middleware's `guard`",
-        " * with a 404, so an unknown host is unambiguously not a page.",
+        ' * for this project, set `tenancy.unknown: "404"` in astroid.config.ts and the',
+        " * generated middleware refuses the host instead — unambiguously not a page.",
         " *",
         " * This runs on EVERY request to a tenant host, so a database lookup here is a",
         " * query per request. Cache it — a module-scope Map is enough within an isolate,",

package/dist/worker/generate.js

@@ -475,12 +475,11 @@ export function generateAstroidMiddleware(config) {
         // two import statements for the same module is legal and reads as an
         // oversight in a file nobody is supposed to hand-edit.
         `import { ${[
+            ...(tenancy && Object.keys(tenancy.apps ?? {}).length ? ["appPrefix"] : []),
             ...(portal ? ["astroidPortalGuardConfig"] : []),
             "astroidRateRules",
             ...(portal ? ["guardResponse", "portalGuard", "resolvePortalSession"] : []),
-            ...(tenancy
-                ? [...(Object.keys(tenancy.apps ?? {}).length ? ["appPrefix"] : []), "tenantLabel"]
-                : []),
+            ...(tenancy ? ["tenantLabel"] : []),
         ].join(", ")} } from "astroidjs";`,
         'import astroidConfig from "../astroid.config.js";',
         ...(tenancy
@@ -548,20 +547,36 @@ export function generateAstroidMiddleware(config) {
                 "  },",
             ]
             : []),
-        ...(portal
+        ...(portal || tenancy?.unknown === "404"
             ? [
-                "  // Route guard: the declarative prefix→roles table from your config.",
-                "  // An /api/* route always answers in JSON — redirecting fetch() to an",
-                "  // HTML login page returns 200 and markup, which reads as success.",
                 "  guard: (context) => {",
-                "    const decision = portalGuard(",
-                "      context.url.pathname,",
-                "      context.locals.portalUser,",
-                "      PORTAL_GUARD,",
-                "    );",
-                "    if (!decision) return undefined;",
-                '    if (decision.kind === "redirect") return context.redirect(decision.location);',
-                "    return guardResponse(decision) ?? undefined;",
+                ...(tenancy?.unknown === "404"
+                    ? [
+                        "    // A syntactically-valid tenant host whose label resolved to nothing is",
+                        '    // NOT a page (config `tenancy.unknown: "404"`). Falling through would',
+                        "    // render the marketing homepage on a stranger's subdomain. Reserved",
+                        "    // labels, app labels, and the apex never reach here — tenantLabel",
+                        "    // returns null for all of them, so they are not tenant candidates.",
+                        "    if (tenantLabel(context.url.hostname, TENANCY) && !context.locals.tenant) {",
+                        '      return new Response("Not found", { status: 404 });',
+                        "    }",
+                    ]
+                    : []),
+                ...(portal
+                    ? [
+                        "    // Route guard: the declarative prefix→roles table from your config.",
+                        "    // An /api/* route always answers in JSON — redirecting fetch() to an",
+                        "    // HTML login page returns 200 and markup, which reads as success.",
+                        "    const decision = portalGuard(",
+                        "      context.url.pathname,",
+                        "      context.locals.portalUser,",
+                        "      PORTAL_GUARD,",
+                        "    );",
+                        "    if (!decision) return undefined;",
+                        '    if (decision.kind === "redirect") return context.redirect(decision.location);',
+                        "    return guardResponse(decision) ?? undefined;",
+                    ]
+                    : ["    return undefined;"]),
                 "  },",
             ]
             : []),
@@ -573,8 +588,8 @@ export function generateAstroidMiddleware(config) {
                 "  // redirect — so links built from Astro.url stay correct.",
                 "  //",
                 "  // An unknown subdomain is YOUR decision: `resolveTenant` returning null",
-                "  // falls through to the ordinary site below. Return a 404 from `guard`",
-                "  // instead if a stranger's subdomain should not render your homepage.",
+                "  // falls through to the ordinary site below — or 404s first, when the",
+                '  // config sets `tenancy.unknown: "404"` (see the guard above).',
                 "  rewrite: (context) => {",
                 ...(Object.keys(tenancy.apps ?? {}).length
                     ? [

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "astroidjs",
-  "version": "0.7.2",
+  "version": "0.8.0",
   "description": "Astroid — an opinionated meta-framework over Louise Toolkit and Astro for building editable, multi-editor sites on Cloudflare Workers.",
   "keywords": [
     "astro",
@@ -60,7 +60,7 @@
     "access": "public"
   },
   "dependencies": {
-    "louise-toolkit": "0.25.0"
+    "louise-toolkit": "0.25.1"
   },
   "devDependencies": {
     "@types/node": "^24.13.3",