astroidjs 0.8.1 → 0.9.0

package/README.md

@@ -61,10 +61,21 @@ export default defineAstroid({
   theme: { name: "Meg Bowen Studio", colors: { brand: "#2b2b2b" } },
   sections: ["hero", "gallery", "aboutIntro", "contact"],
   portal: { enabled: true },
+  // The masters ARE the product here: 40 MB camera files upload once and only
+  // resized derivatives are ever served, so the size costs storage, not page
+  // weight. Omit to keep the 10 MB default.
+  media: { maxUploadBytes: 40 * 1024 * 1024 },
   deploy: { platform: "cloudflare" },
 });
 ```
 
+`media.maxUploadBytes` is checked at generate time, not in production: a value
+above Cloudflare's **100 MB request-body limit** is rejected outright, because
+the edge drops an oversized body before the Worker runs — the media route never
+gets to answer with its own `413`, so the editor would see an opaque failure.
+Zero, negatives, and non-integers are rejected too (that last one catches the
+megabytes-not-bytes slip).
+
 ## Commerce
 
 **Providers fill roles.** Not "the commerce provider" — the toolkit's clients

package/dist/config.d.ts

@@ -407,6 +407,23 @@ export interface SettingsConfig {
      *  settings values validated as media-library URLs on write. */
     imageKeys?: string[];
 }
+/** Media-library upload policy. */
+export interface MediaConfig {
+    /**
+     * Largest accepted upload, in bytes. Default 10 MB (louise-toolkit's
+     * `DEFAULT_MAX_BYTES`).
+     *
+     * Raise it when the masters ARE the product — a photographer's or painter's
+     * portfolio uploads 40 MB camera files and only ever serves Cloudflare-
+     * resized derivatives, so the master's size costs storage, not page weight.
+     *
+     * Bounded by the platform, not by this setting: a Cloudflare Worker rejects
+     * a request body over 100 MB before any handler runs, so a value above that
+     * would fail at the edge with no error you can catch. Validated at generate
+     * time rather than surfacing as a mystery upload failure in production.
+     */
+    maxUploadBytes?: number;
+}
 export interface DeployConfig {
     platform: "cloudflare";
     /** Media base for R2 + `cf-image` resizing — matches Louise's media route
@@ -483,6 +500,8 @@ export interface AstroidConfig {
     /** Site-specific editable settings — extra `custom` keys + image keys on top
      *  of Astroid's base `site_settings` columns. */
     settings?: SettingsConfig;
+    /** Media-library upload policy (e.g. a larger `maxUploadBytes`). */
+    media?: MediaConfig;
     /**
      * Force the contact form + `inquiries` table on or off. Omit to detect from
      * the config (a `contact` section, or a wholesale-inquiry module). Set `true`

package/dist/config.js

@@ -160,6 +160,23 @@ function assertTenancy(config) {
         }
     }
 }
+/** Cloudflare rejects a request body over 100 MB at the edge, before any Worker
+ *  handler runs — so an upload limit above it can never be honoured, and the
+ *  failure arrives as an opaque edge error rather than the route's own 413. */
+const WORKERS_MAX_REQUEST_BODY_BYTES = 100 * 1024 * 1024;
+function assertMediaConfig(media) {
+    const max = media?.maxUploadBytes;
+    if (max === undefined)
+        return;
+    if (!Number.isInteger(max) || max <= 0) {
+        throw new AstroidConfigError(`\`media.maxUploadBytes\` must be a positive integer number of BYTES; got ${max}`);
+    }
+    if (max > WORKERS_MAX_REQUEST_BODY_BYTES) {
+        throw new AstroidConfigError(`\`media.maxUploadBytes\` (${max}) exceeds Cloudflare's 100 MB request-body limit. ` +
+            "A body that large is rejected at the edge before the Worker runs, so the upload " +
+            "would fail with an error the media route never sees.");
+    }
+}
 export function defineAstroid(config) {
     if (!config.key || config.key.trim().length === 0) {
         throw new AstroidConfigError("Astroid config requires a non-empty `key` (it names the generated worker/D1/R2 bindings)");
@@ -174,6 +191,9 @@ export function defineAstroid(config) {
     // Fourthwall, a storefront over Stripe) fails here rather than at runtime on
     // the first invoice, as a missing function.
     assertCommerceRoles(config.commerce);
+    // A media limit above the platform's own body cap is unhonourable — reject it
+    // here rather than let an editor watch a 120 MB upload die at the edge.
+    assertMediaConfig(config.media);
     // A portal is a SECOND Better Auth instance beside the editor's. Reject any
     // isolation that would collide with the editor on the same origin (a shared
     // cookie prefix silently cross-signs-out; a shared table prefix merges the two

package/dist/worker/generate.js

@@ -123,11 +123,18 @@ export function generateAstroidWorker(config) {
                 return "aiRoute({ resolveEditor, ai: aiRunner })";
             case "seoFix":
                 return "seoFixRoute({ table: pages, resolveEditor, ai: aiRunner })";
-            case "media":
+            case "media": {
                 // `altText` fills a new upload's alt from the image itself. Best-effort
                 // by contract — a model error or a missing binding never fails the
                 // upload — so it costs nothing on a project that doesn't want it.
-                return "mediaRoute({ table: media, resolveEditor, referenceSources: MEDIA_REFERENCE_SOURCES, altText: aiRunner })";
+                //
+                // `maxBytes` is emitted only when the site raised it: omitted, the
+                // route keeps louise-toolkit's DEFAULT_MAX_BYTES, so the generated
+                // line stays identical for every project that doesn't care.
+                const maxBytes = config.media?.maxUploadBytes;
+                const maxArg = maxBytes ? `, maxBytes: ${maxBytes}` : "";
+                return `mediaRoute({ table: media, resolveEditor, referenceSources: MEDIA_REFERENCE_SOURCES, altText: aiRunner${maxArg} })`;
+            }
             case "editors":
                 // The editor instance's user table is `louise_`-prefixed (the editor
                 // convention — the unprefixed `user` table is left for a second/portal
@@ -606,11 +613,14 @@ export function generateAstroidMiddleware(config) {
                         "    // map, checked before the tenant — an app exists whether or not any",
                         "    // tenant does, and needs no lookup.",
                         "    const app = appPrefix(context.url.hostname, TENANCY);",
-                        "    if (app) return `${app}${context.url.pathname}`;",
+                        "    // `search` is preserved: the rewrite chooses which page renders, not",
+                        "    // what was asked of it. Dropping it silently loses filters, pagination,",
+                        "    // campaign tags — and every typed search param a routed island reads.",
+                        "    if (app) return `${app}${context.url.pathname}${context.url.search}`;",
                     ]
                     : []),
                 "    const tenant = context.locals.tenant;",
-                `    return tenant ? \`${rewritePrefix}/\${tenant.slug}\${context.url.pathname}\` : undefined;`,
+                `    return tenant ? \`${rewritePrefix}/\${tenant.slug}\${context.url.pathname}\${context.url.search}\` : undefined;`,
                 "  },",
             ]
             : []),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "astroidjs",
-  "version": "0.8.1",
+  "version": "0.9.0",
   "description": "Astroid — an opinionated meta-framework over Louise Toolkit and Astro for building editable, multi-editor sites on Cloudflare Workers.",
   "keywords": [
     "astro",