create-astroid 0.3.1 → 0.3.3

package/index.mjs

@@ -34,9 +34,15 @@ import {
 
 const TEMPLATE_DIR = join(dirname(fileURLToPath(import.meta.url)), "template");
 
-// Files whose leading `_` is stripped on copy (npm strips real dotfiles from a
-// published package, so they ship as `_gitignore` / `_env.example`).
-const DOTFILE_RENAMES = { _gitignore: ".gitignore", "_env.example": ".env.example" };
+// Files (and dirs) whose leading `_` is stripped on copy (npm strips real
+// dotfiles from a published package, so they ship as `_gitignore` /
+// `_env.example` / `_github/…`). Applied per entry in `copyTemplate`, so a
+// directory renames too — `_github` becomes `.github` and its contents follow.
+const DOTFILE_RENAMES = {
+  _gitignore: ".gitignore",
+  "_env.example": ".env.example",
+  _github: ".github",
+};
 
 // Archetype → default editable home sections. Imported from astroidjs rather
 // than duplicated here: as a literal in this file it could name a section that
@@ -68,7 +74,12 @@ function parseArgs(argv) {
 }
 
 const slugify = (s) =>
-  s.trim().toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 40);
+  s
+    .trim()
+    .toLowerCase()
+    .replace(/[^a-z0-9]+/g, "-")
+    .replace(/^-+|-+$/g, "")
+    .slice(0, 40);
 
 // --- toolkit versions ------------------------------------------------------
 
@@ -252,17 +263,20 @@ async function main() {
   const dirArg = positionals[0] ?? flags.dir;
   const rawName = flags.name || (dirArg ? basename(resolve(dirArg)) : undefined);
   const name = await prompt("Brand / site name", rawName || "My Astroid Site");
-  const key = slugify(flags.key || (await prompt("Project key (slug)", slugify(name) || "my-site")));
+  const key = slugify(
+    flags.key || (await prompt("Project key (slug)", slugify(name) || "my-site")),
+  );
   const dir = resolve(dirArg || (await prompt("Directory", key)) || key);
-  const archetypeRaw = (flags.archetype || (await prompt(`Archetype (${ARCHETYPES.join("/")})`, "marketing"))).toLowerCase();
+  const archetypeRaw = (
+    flags.archetype || (await prompt(`Archetype (${ARCHETYPES.join("/")})`, "marketing"))
+  ).toLowerCase();
   const archetype = ARCHETYPES.includes(archetypeRaw) ? archetypeRaw : "marketing";
   const color = flags.color || (await prompt("Brand color (hex)", "#5b4bff"));
   const host = flags.host && flags.host !== true ? flags.host : undefined;
   // The customer PORTAL is opt-in via --portal, but a storefront IMPLIES one — a
   // shop has customers who sign in, reorder, and track orders — so enable it there
   // by default. (Commerce below stays opt-in: infra a marketing site shouldn't carry.)
-  const portal =
-    flags.portal === true || flags.portal === "true" || archetype === "storefront";
+  const portal = flags.portal === true || flags.portal === "true" || archetype === "storefront";
   // The map module is opt-in and pulls real weight (maplibre-gl is ~1 MB), so
   // it is never on by default.
   const map = flags.map === true || flags.map === "true";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-astroid",
-  "version": "0.3.1",
+  "version": "0.3.3",
   "description": "Scaffold a new Astroid site — an editable, multi-editor Astro app on Cloudflare Workers — in one command.",
   "keywords": [
     "astro",
@@ -18,7 +18,6 @@
     "url": "git+https://github.com/bowenlabs/louise-toolkit.git",
     "directory": "packages/create-astroid"
   },
-  "type": "module",
   "bin": {
     "create-astroid": "./index.mjs"
   },
@@ -26,14 +25,15 @@
     "index.mjs",
     "template"
   ],
+  "type": "module",
   "publishConfig": {
     "access": "public"
   },
   "dependencies": {
     "@better-auth/passkey": "^1.6.23",
     "better-auth": "^1.6.23",
-    "astroidjs": "0.3.1",
-    "louise-toolkit": "0.17.1"
+    "louise-toolkit": "0.19.0",
+    "astroidjs": "0.4.0"
   },
   "engines": {
     "node": ">=24.0.0"

package/template/README.md

@@ -103,6 +103,20 @@ pnpm doctor         # validate config, bindings, and generated-file freshness
 wrangler deploy     # or: pnpm astroid deploy
 ```
 
+## Taking payments
+
+Storefront sites (`--commerce square`) are scaffolded with a server-authoritative
+payment route at `src/pages/api/checkout.ts` and a `<SquareCard>` input. **Keep
+its sequence** — extend it (shipping, tax, an order row, a receipt), don't replace
+it. It re-prices every line from the D1 catalog mirror (the client's price is a
+_staleness check_, never an input to the charge — accept a `unitPrice` from the
+request body and anyone buys anything for a penny) and derives the Square
+idempotency key from the verified cart **and** the cart id. Hand-rolling
+`createPayment` without a stable, cart-scoped idempotency key is the failure this
+route exists to prevent: a double-clicked Pay button charges twice, and a
+constant (or omitted) key lets two customers' identical carts collide into a
+single charge.
+
 ## Layout
 
 | Path | What |

package/template/_github/workflows/ci.yml

@@ -0,0 +1,54 @@
+name: CI
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+
+# Cancel superseded runs on the same ref (a force-push mid-run).
+concurrency:
+  group: ci-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    env:
+      # corepack pins pnpm from `packageManager` in package.json; in CI it must
+      # fetch that version without an interactive prompt.
+      COREPACK_ENABLE_DOWNLOAD_PROMPT: 0
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 24
+
+      # pnpm via corepack, pinned by `packageManager` — the same version you
+      # develop with, so `--frozen-lockfile` below always matches the committed
+      # pnpm-lock.yaml. (Commit that lockfile; this step relies on it.)
+      - name: Enable pnpm (corepack)
+        run: corepack enable
+
+      - name: Install
+        run: pnpm install --frozen-lockfile
+
+      # Validate the config, bindings, and that the generated
+      # src/schema.ts · src/worker.ts · src/middleware.ts trio is still in sync
+      # with astroid.config.ts. A fast fail before the heavier steps.
+      - name: Doctor
+        run: pnpm doctor
+
+      # No-ops on a fresh scaffold; runs automatically once you add a `lint`
+      # script (oxlint/biome) — same for `test` (vitest) further down.
+      - name: Lint
+        run: pnpm run --if-present lint
+
+      - name: Type-check
+        run: pnpm check
+
+      - name: Test
+        run: pnpm run --if-present test
+
+      - name: Build
+        run: pnpm build

package/template/package.json

@@ -39,5 +39,6 @@
   },
   "engines": {
     "node": ">=24.0.0"
-  }
+  },
+  "packageManager": "pnpm@11.13.0"
 }