create-astroid 0.7.0 → 0.7.2

package/README.md

@@ -1,7 +1,7 @@
 # create-astroid
 
-Scaffold a new **Astroid** site — an editable, multi-editor Astro app on
-Cloudflare Workers — in one command.
+Scaffold a new **Astroid** site—an editable, multi-editor Astro app on
+Cloudflare Workers—in one command.
 
 ```sh
 pnpm create astroid my-site
@@ -14,8 +14,8 @@ pnpm create astroid my-site
 
 A working floor, not a blank page:
 
-- `astroid.config.ts` — the one typed config the rest is generated from
-- The generated trio — `src/schema.ts`, `src/worker.ts`, `src/middleware.ts`
+- `astroid.config.ts`—the one typed config the rest is generated from
+- The generated trio—`src/schema.ts`, `src/worker.ts`, `src/middleware.ts`
   (Drizzle schema, editor routes in collision-free order, the shared middleware)
 - `wrangler.jsonc` with every binding stubbed and clearly marked for you to fill
 - A baseline Astro app with an **inline-editable home page**, magic-link editor
@@ -73,10 +73,10 @@ Astro        →  renderer / router / build
     Astroid  →  opinions: theme, sections, config, scaffold  (astroidjs)
 ```
 
-- [`astroidjs`](https://github.com/bowenlabs/louise-toolkit/tree/main/packages/astroid)
-  — the meta-framework and the `astroid` CLI this scaffold writes a project for
-- [`louise-toolkit`](https://github.com/bowenlabs/louise-toolkit/tree/main/packages/louise)
-  — the underlying toolkit
+- [`astroidjs`](https://github.com/bowenlabs/louise-toolkit/tree/main/packages/astroid)—the
+  meta-framework and the `astroid` CLI this scaffold writes a project for
+- [`louise-toolkit`](https://github.com/bowenlabs/louise-toolkit/tree/main/packages/louise)—the
+  underlying toolkit
 
 ## License
 

package/index.mjs

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 // Copyright (c) 2026 BowenLabs. Astroid is MIT licensed.
 //
-// `create-astroid` — scaffold a new Astroid site in one command:
+// `create-astroid`—scaffold a new Astroid site in one command:
 //
 //   pnpm create astroid@latest my-site
 //   pnpm create astroid@latest my-site --key coracle --name "Coracle Coffee" --color "#1f6f78" --host coracle.coffee
@@ -9,7 +9,7 @@
 // It writes the floor: the `defineAstroid` config, the generated
 // schema/worker/middleware trio + wrangler.jsonc (via astroidjs), the Better Auth
 // migration (via louise-toolkit/auth), and the baseline Astro app from ./template.
-// Binding ids are placeholders — provision them, then `astroid deploy` (or
+// Binding ids are placeholders—provision them, then `astroid deploy` (or
 // wrangler) fills them in. The generators are the SAME ones `astroid generate`
 // uses, so a fresh project is already in sync.
 
@@ -37,7 +37,7 @@ const TEMPLATE_DIR = join(dirname(fileURLToPath(import.meta.url)), "template");
 // Files (and dirs) whose leading `_` is stripped on copy (npm strips real
 // dotfiles from a published package, so they ship as `_gitignore` /
 // `_env.example` / `_github/…`). Applied per entry in `copyTemplate`, so a
-// directory renames too — `_github` becomes `.github` and its contents follow.
+// directory renames too—`_github` becomes `.github` and its contents follow.
 const DOTFILE_RENAMES = {
   _gitignore: ".gitignore",
   "_env.example": ".env.example",
@@ -46,7 +46,7 @@ const DOTFILE_RENAMES = {
 
 // Archetype → default editable home sections. Imported from astroidjs rather
 // than duplicated here: as a literal in this file it could name a section that
-// doesn't exist and nothing would say so (it did — `marquee`, `featured`,
+// doesn't exist and nothing would say so (it did—`marquee`, `featured`,
 // `story`, and `visit` had no component for months). Over there it's typed
 // against the section catalog, so a stale name fails the build. See #277.
 const ARCHETYPE_SECTIONS = ASTROID_ARCHETYPE_SECTIONS;
@@ -96,19 +96,19 @@ const slugify = (s) =>
  * every release, and when it rots the failure is silent and total: the template
  * imported `astroidjs/astro` while pinning `^0.1.0`, a range whose newest match
  * had no such export, so every scaffolded project died before Astro loaded its
- * config. CI could not see it — the clean-room smoke test pins both packages to
+ * config. CI could not see it—the clean-room smoke test pins both packages to
  * tarballs via pnpm `overrides`, which is exactly what erases these ranges.
  *
  * Three shapes reach the `declared` value, and all three have to end up as one
  * caret range:
  *
- *   - `workspace:*` — a sibling in this repo (`astroidjs`). Falls back to the
+ *   - `workspace:*`—a sibling in this repo (`astroidjs`). Falls back to the
  *     version of the copy actually resolved on disk, which is what the scaffold
  *     would install anyway. `pnpm pack` rewrites these to a concrete version, so
  *     a PUBLISHED create-astroid never carries one.
- *   - an exact version — what `pnpm pack` leaves behind for a former
+ *   - an exact version—what `pnpm pack` leaves behind for a former
  *     `workspace:*`.
- *   - an already-caretted range — what an external dependency is written as now
+ *   - an already-caretted range—what an external dependency is written as now
  *     that `louise-toolkit` and `@louise-toolkit/astro` live in another repo.
  *
  * That last one is why `stripRange` exists. Prefixing `^` onto `^0.27.0` yields
@@ -182,7 +182,7 @@ function astroidConfigSource(config) {
   const parts = [
     'import { defineAstroid } from "astroidjs";',
     "",
-    "// The whole shape of this site — one typed config. `astroid generate` (run by",
+    "// The whole shape of this site—one typed config. `astroid generate` (run by",
     "// `astroid dev`/`build`) turns it into src/schema.ts, src/worker.ts, and",
     "// src/middleware.ts; `astroid doctor` keeps them honest.",
     "export default defineAstroid({",
@@ -208,14 +208,14 @@ function astroidConfigSource(config) {
       : []),
     // Must be emitted, for the same reason the portal is: `astroid generate`
     // rebuilds the middleware and CSP from THIS file, so a config that dropped
-    // `modules` would regenerate a project missing whatever they contribute —
-    // for the map, a policy without `worker-src blob:`, which renders an empty
+    // `modules` would regenerate a project missing whatever they contribute—for
+    // the map, a policy without `worker-src blob:`, which renders an empty
     // canvas with no obvious cause.
     ...(config.modules?.length ? [`  modules: ${JSON.stringify(config.modules)},`] : []),
     // Must be emitted: `astroid generate` rebuilds the middleware from THIS
     // file, so a config that omitted the portal would regenerate a middleware
     // with no guard while src/portal-auth.ts sat there unused. And the FULL shape
-    // (tablePrefix, signUp) — not a bare `{ enabled: true }` — so a regenerate
+    // (tablePrefix, signUp)—not a bare `{ enabled: true }`—so a regenerate
     // reproduces the SAME unprefixed `user`/`session` seam the 0002_portal_auth
     // migration created, rather than defaulting the prefix back to `portal_`.
     ...(config.portal?.enabled
@@ -279,7 +279,7 @@ async function main() {
   const argv = process.argv.slice(2);
   const { flags, positionals } = parseArgs(argv);
 
-  // Handle these before any prompting — otherwise `--help` reads as a truthy
+  // Handle these before any prompting—otherwise `--help` reads as a truthy
   // flag and drops the user into the interactive scaffold instead. The short
   // forms are read off argv directly: parseArgs only treats `--` as a flag, so
   // a bare `-h` would otherwise be taken as the target directory.
@@ -306,8 +306,8 @@ async function main() {
   const archetype = ARCHETYPES.includes(archetypeRaw) ? archetypeRaw : "marketing";
   const color = flags.color || (await prompt("Brand color (hex)", "#5b4bff"));
   const host = flags.host && flags.host !== true ? flags.host : undefined;
-  // The customer PORTAL is opt-in via --portal, but a storefront IMPLIES one — a
-  // shop has customers who sign in, reorder, and track orders — so enable it there
+  // The customer PORTAL is opt-in via --portal, but a storefront IMPLIES one—a
+  // shop has customers who sign in, reorder, and track orders—so enable it there
   // by default. (Commerce below stays opt-in: infra a marketing site shouldn't carry.)
   const portal = flags.portal === true || flags.portal === "true" || archetype === "storefront";
   // The map module is opt-in and pulls real weight (maplibre-gl is ~1 MB), so
@@ -336,7 +336,7 @@ async function main() {
   }
   // Refused, not ignored, without Square: the checkout route is scaffolded ONCE,
   // so a multi-merchant store that silently got the single-location route would
-  // ring every sale against one ambient SQUARE_LOCATION_ID — and look fine doing it.
+  // ring every sale against one ambient SQUARE_LOCATION_ID—and look fine doing it.
   const squareLocationsRaw = flags["square-locations"];
   const squareLocations =
     typeof squareLocationsRaw === "string" ? squareLocationsRaw.toLowerCase() : undefined;
@@ -371,7 +371,7 @@ async function main() {
           },
         }
       : {}),
-    // Unprefixed `user`/`session` (customers — email + password), so the studio's
+    // Unprefixed `user`/`session` (customers—email + password), so the studio's
     // `louise_`-prefixed tables and the portal's never collide (mirrors the
     // reference storefront). `signUp: true` because a shop lets customers register.
     ...(portal ? { portal: { enabled: true, tablePrefix: "", signUp: true } } : {}),
@@ -385,7 +385,7 @@ async function main() {
   const siteUrl = host ? `https://${host}` : `https://${key}.workers.dev`;
   const envBindings = generateAstroidEnvBindings(config);
   const portalLocals = generateAstroidPortalLocals(config);
-  // The realtime DO namespace, or nothing — same rule as the queue bindings: a
+  // The realtime DO namespace, or nothing—same rule as the queue bindings: a
   // declaration is a promise, so never type a binding wrangler.jsonc won't create.
   const realtimeEnv = generateAstroidRealtimeEnv(config);
   // The Square Web Payments public vars, or nothing.
@@ -397,17 +397,17 @@ async function main() {
     ARCHETYPE: archetype,
     SITE_URL: siteUrl,
     // Extra CloudflareEnv members the queue pipeline needs, or nothing. A
-    // declaration is a promise — a marketing site must not claim a binding its
+    // declaration is a promise—a marketing site must not claim a binding its
     // wrangler.jsonc never creates.
     ASTROID_ENV_BINDINGS: [envBindings, realtimeEnv, checkoutEnv].filter(Boolean).join("\n")
       ? `\n${[envBindings, realtimeEnv, checkoutEnv].filter(Boolean).join("\n")}`
       : "",
-    // The portal session on App.Locals, or nothing — a project that types a
+    // The portal session on App.Locals, or nothing—a project that types a
     // local it never sets invites a null-check nobody needs.
     ASTROID_PORTAL_LOCALS: portalLocals ? `\n${portalLocals}` : "",
     // Placeholder-seeded secrets for whichever modules this project enabled, so
-    // a fresh clone has a COMPLETE binding set that all reads as unconfigured —
-    // every module takes its dormant path deliberately rather than tripping over
+    // a fresh clone has a COMPLETE binding set that all reads as unconfigured—every
+    // module takes its dormant path deliberately rather than tripping over
     // an undefined binding. Empty for a project with no credentialed module.
     ASTROID_MODULE_SECRETS: generateAstroidSecretsEnv(config),
   };
@@ -419,11 +419,11 @@ async function main() {
   //
   //     Merged by PARSING the file rather than substituting a token into it:
   //     a `__TOKEN__` inside a JSON object makes template/package.json invalid
-  //     JSON, and everything that scans a repo for manifests — Snyk, Dependabot,
-  //     editors, workspace tooling — parses it and fails. (It did.)
+  //     JSON, and everything that scans a repo for manifests—Snyk, Dependabot,
+  //     editors, workspace tooling—parses it and fails. (It did.)
   //
   //     The `astroidjs` / `louise-toolkit` ranges are DERIVED (see
-  //     `toolkitRanges`), never taken from template/package.json — a hand-written
+  //     `toolkitRanges`), never taken from template/package.json—a hand-written
   //     range there silently rots into a scaffold that can't build. The literals
   //     it still carries are placeholders that keep the file valid JSON.
   //
@@ -446,15 +446,15 @@ async function main() {
   for (const file of generateAstroidProject(config)) write(dir, file.path, file.contents);
   write(dir, "wrangler.jsonc", generateAstroidWrangler(config));
 
-  // 3b. Every scaffold-once module file this config implies — the queue seam and
+  // 3b. Every scaffold-once module file this config implies—the queue seam and
   //     webhook receivers, the portfolio gallery page, the PWA service worker +
   //     manifest + headers, the map tile route + embed, the portal's second auth
   //     instance and its mounted catch-all.
   //
   //     ONE list, imported from astroidjs, because `astroid generate` writes the
   //     same files when a config gains a module after scaffold. Hand-listing them
-  //     here was the only way to produce them, so editing the config — the entire
-  //     premise of the framework — regenerated a trio importing `./queue.js` and
+  //     here was the only way to produce them, so editing the config—the entire
+  //     premise of the framework—regenerated a trio importing `./queue.js` and
   //     `./portal-auth.js` that nothing had written, and `astroid doctor` called
   //     it healthy. Sharing the list is what keeps the two paths honest.
   for (const file of generateAstroidScaffoldFiles(config)) {
@@ -471,7 +471,7 @@ async function main() {
     write(dir, file.path, file.contents);
   }
 
-  // 4. The Better Auth migration (louise-toolkit) — auth tables are fenced out of
+  // 4. The Better Auth migration (louise-toolkit)—auth tables are fenced out of
   //    drizzle-kit, so they're generated rather than diffed from schema.ts. Loaded
   //    dynamically: it pulls in `better-auth` (an optional peer), which may not be
   //    resolvable at scaffold time. If not, leave a stub + a one-liner to generate
@@ -479,12 +479,12 @@ async function main() {
   let authMigrationOk = false;
   try {
     const { generateAuthSchemaSql } = await import("louise-toolkit/auth");
-    // The EDITOR instance's tables — `louise_`-prefixed (the editor convention),
+    // The EDITOR instance's tables—`louise_`-prefixed (the editor convention),
     // leaving the unprefixed `user`/`session` names free for a second/portal
     // instance. Must match the `tablePrefix` in src/auth.ts and the `louise_user`
     // table the generated `editorsRoute` reads.
     write(dir, "migrations/0001_auth.sql", generateAuthSchemaSql({ tablePrefix: "louise_" }));
-    // The portal's own auth tables — a SECOND Better Auth instance sharing one D1
+    // The portal's own auth tables—a SECOND Better Auth instance sharing one D1
     // but never a row, so a portal account can't sign into the studio and an
     // editor doesn't appear in the portal. `customers: true` (email + password)
     // and the config's tablePrefix, so this schema matches the scaffolded
@@ -506,7 +506,7 @@ async function main() {
     );
     // Same stub for the portal's prefixed set. Without it a portal scaffold
     // looks complete, builds, and fails on the first sign-in with a missing
-    // table — the one failure mode a stub exists to prevent.
+    // table—the one failure mode a stub exists to prevent.
     if (config.portal?.enabled) {
       write(
         dir,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-astroid",
-  "version": "0.7.0",
+  "version": "0.7.2",
   "description": "Scaffold a new Astroid site — an editable, multi-editor Astro app on Cloudflare Workers — in one command.",
   "keywords": [
     "astro",
@@ -31,10 +31,10 @@
   },
   "dependencies": {
     "@better-auth/passkey": "^1.7.2",
-    "@louise-toolkit/astro": "^0.2.1",
+    "@louise-toolkit/astro": "^0.2.2",
     "better-auth": "^1.7.2",
-    "louise-toolkit": "^0.30.1",
-    "astroidjs": "0.12.0"
+    "louise-toolkit": "^0.31.0",
+    "astroidjs": "0.13.0"
   },
   "engines": {
     "node": ">=26.0.0"

package/template/README.md

@@ -1,11 +1,11 @@
 # __BRAND_NAME__
 
-An editable, multi-editor site on Cloudflare Workers — scaffolded with
+An editable, multi-editor site on Cloudflare Workers—scaffolded with
 [Astroid](https://github.com/bowenlabs/louise-toolkit) (Astro + Louise Toolkit).
 
 The whole shape of this site lives in one typed config, [`astroid.config.ts`](./astroid.config.ts).
 `src/schema.ts`, `src/worker.ts`, and `src/middleware.ts` are **generated** from it
-(they carry a "do not hand-edit" banner) — run `pnpm generate` after any config
+(they carry a "do not hand-edit" banner)—run `pnpm generate` after any config
 change, or just use `pnpm dev`/`pnpm build`, which regenerate first.
 
 ## Develop
@@ -19,26 +19,26 @@ pnpm dev                    # astroid dev: regenerate, then astro dev
 > **Previewing the built worker?** `pnpm dev` (astro dev) serves on localhost, so
 > an empty `SESSION_SECRET` is fine there. A local `wrangler dev` against the
 > built `dist/` output routes the request through your `hosts` domain instead of
-> localhost, so the editor routes need a real `SESSION_SECRET` in `.dev.vars` —
-> otherwise sign-in 500s with "SESSION_SECRET is not configured".
+> localhost, so the editor routes need a real `SESSION_SECRET` in `.dev.vars`—
+> otherwise sign-in returns 500 with "SESSION_SECRET is not configured".
 
 ## Deploy
 
 Astroid wrote `wrangler.jsonc` with placeholder binding ids. Pick a path to
-provision them and ship — then seed content + your first editor (below).
+provision them and ship—then seed content + your first editor (below).
 
-### Zero-CLI — Deploy to Cloudflare
+### Zero-CLI—Deploy to Cloudflare
 
 Push this repo to GitHub and drop this button in place (swap in your repo URL).
 Cloudflare clones the repo, provisions the D1/R2/KV bindings declared in
-`wrangler.jsonc`, and deploys — no local tooling:
+`wrangler.jsonc`, and deploys—no local tooling:
 
 [![Deploy to Cloudflare](https://deploy.workers.cloudflare.com/button)](https://deploy.workers.cloudflare.com/?url=<YOUR_GITHUB_REPO_URL>)
 
-### One command — `astroid deploy`
+### One command—`astroid deploy`
 
 Provisions the still-placeholder bindings, applies migrations, prompts for
-secrets, and deploys — through your local `wrangler`:
+secrets, and deploys—through your local `wrangler`:
 
 ```sh
 pnpm astroid deploy --dry-run   # preview the exact commands it will run
@@ -79,10 +79,10 @@ There are no passwords and no editor list in env to keep in sync.
 
 1. Go to **`/login`** and enter a seeded editor's email. In local dev there's no
    email binding, so the magic link is printed to the `wrangler`/`astro dev`
-   console — open it from there. In production it's emailed.
-2. The link signs you in and drops you at **`/?louise`** — edit mode. The **edit
+   console—open it from there. In production it's emailed.
+2. The link signs you in and drops you at **`/?louise`**—edit mode. The **edit
    bar** appears with **Settings** and **Done**.
-3. The home page's **title and body are editable in place** — click into them and
+3. The home page's **title and body are editable in place**—click into them and
    type. Edits stage a **draft**; **Publish** (in the edit bar) promotes it live.
    **Settings** opens the drawer: **Pages** (create/edit other pages), **Media**,
    **Settings** (brand, nav, contact, SEO), and **Users** (invite/remove editors).
@@ -107,9 +107,9 @@ wrangler deploy     # or: pnpm astroid deploy
 
 Storefront sites (`--commerce square`) are scaffolded with a server-authoritative
 payment route at `src/pages/api/checkout.ts` and a `<SquareCard>` input. **Keep
-its sequence** — extend it (shipping, tax, an order row, a receipt), don't replace
+its sequence**—extend it (shipping, tax, an order row, a receipt), don't replace
 it. It re-prices every line from the D1 catalog mirror (the client's price is a
-_staleness check_, never an input to the charge — accept a `unitPrice` from the
+_staleness check_, never an input to the charge—accept a `unitPrice` from the
 request body and anyone buys anything for a penny) and derives the Square
 idempotency key from the verified cart **and** the cart id. Hand-rolling
 `createPayment` without a stable, cart-scoped idempotency key is the failure this
@@ -121,27 +121,27 @@ single charge.
 
 | Path | What |
 | --- | --- |
-| `astroid.config.ts` | The one typed config — brand, archetype, sections. |
-| `src/schema.ts` · `src/worker.ts` · `src/middleware.ts` | **Generated** — don't hand-edit. |
-| `wrangler.jsonc` | Yours to edit — real binding ids, routes, secrets. |
+| `astroid.config.ts` | The one typed config—brand, archetype, sections. |
+| `src/schema.ts` · `src/worker.ts` · `src/middleware.ts` | **Generated**—don't hand-edit. |
+| `wrangler.jsonc` | Yours to edit—real binding ids, routes, secrets. |
 | `src/auth.ts` | The editor auth seam (Better Auth, DB-managed editors). |
 | `src/pages/` · `src/components/` · `src/layouts/` | Your Astro app. |
 | `migrations/` | `0000_content.sql` (content + FTS) · `0001_auth.sql` (Better Auth). |
 | `scripts/seed-editors.mjs` | Bootstrap the first editor. |
-| `docs/` | ARCHITECTURE · RUNBOOK · DECISIONS — stubs to fill in as you go. |
+| `docs/` | ARCHITECTURE · RUNBOOK · DECISIONS—stubs to fill in as you go. |
 
 ## The docs/ trio
 
 Three near-empty documents, scaffolded on purpose. Three production Astroid sites
 each wrote the same three without coordinating, and converged on the same
-headings — so you inherit the questions rather than a blank directory.
+headings—so you inherit the questions rather than a blank directory.
 
 | | What goes in it |
 | --- | --- |
-| `docs/ARCHITECTURE.md` | How this site is put together — request flow, content model, bindings. |
-| `docs/RUNBOOK.md` | Operating it — local dev, migrations, secrets, deploy, and **common breakages**. |
+| `docs/ARCHITECTURE.md` | How this site is put together—request flow, content model, bindings. |
+| `docs/RUNBOOK.md` | Operating it—local dev, migrations, secrets, deploy, and **common breakages**. |
 | `docs/DECISIONS.md` | Choices the framework leaves open, and why you made yours. |
 
 `DECISIONS.md` ships with a list of the questions every Astroid site has to
-answer — editors, rich-text storage, sections, commerce, migrations, CSP, edge
+answer—editors, rich-text storage, sections, commerce, migrations, CSP, edge
 caching. Delete each one as it becomes a real entry.

package/template/astro.config.mjs

@@ -22,14 +22,14 @@ export default defineConfig({
     build: { ...ASTROID_VITE_BUILD },
   },
   // Route caching (ADR 0004). This provider is what turns `Astro.cache.set(...)`
-  // into a `Cloudflare-CDN-Cache-Control` header — which the generated worker's
+  // into a `Cloudflare-CDN-Cache-Control` header—which the generated worker's
   // `withEdgeCache` layer reads as its "store this" signal and then STRIPS, so
   // Cloudflare's own cookie-blind edge cache never sees it.
   //
   // Opt-in per response: a route that never calls `Astro.cache.set` (or calls
   // `set(false)`, as an edit-mode render does) goes out `no-store`. Nothing
   // personalized is ever cached. Published pages opt in from index.astro, gated
-  // on the ASTROID_EDGE_CACHE var — which is "false" until you have walked the
+  // on the ASTROID_EDGE_CACHE var—which is "false" until you have walked the
   // activation runbook on a preview deploy.
   cache: { provider: cacheCloudflare() },
   // Content-Security-Policy, composed by Astroid from your config: it derives the
@@ -41,7 +41,7 @@ export default defineConfig({
   // 'unsafe-inline' and a hash in that directive would void it.
   //
   // This is why the inline scripts here (login.astro, LouiseEdit.astro) avoid
-  // is:inline/define:vars — those can't be hashed and would be blocked. Need
+  // is:inline/define:vars—those can't be hashed and would be blocked. Need
   // another origin? Add it to `security.cspOrigins` in astroid.config.ts.
   security: astroidSecurity(astroidConfig),
 });

package/template/docs/ARCHITECTURE.md

@@ -4,7 +4,7 @@ How __BRAND_NAME__ is put together: what happens to a request, where content
 lives, and which pieces are the framework's rather than yours.
 
 > Scaffolded by `create-astroid`. Describe what is TRUE of this site, not what
-> Astroid does in general — that is documented at
+> Astroid does in general—that is documented at
 > <https://docs.astroidjs.org>. The useful content here is the part that would
 > surprise someone who knows the framework.
 
@@ -25,14 +25,14 @@ request → middleware (session, edit mode, rate limits)
 
 <!-- The collections this site defines and what each one is for. Note which
      fields are rich text, which are structured, and anything a section depends
-     on being present. The schema is generated from astroid.config.ts — link to
+     on being present. The schema is generated from astroid.config.ts—link to
      it rather than restating it, and record the REASONING here. -->
 
 ## Editing
 
 <!-- Which parts of a page are editable and how they are marked. Sections vs
      inline fields vs settings. If a section is deliberately not editable, that
-     is worth a line — the next person will assume it was an oversight. -->
+     is worth a line—the next person will assume it was an oversight. -->
 
 ## Auth
 

package/template/docs/DECISIONS.md

@@ -6,7 +6,7 @@ Choices __BRAND_NAME__ made that the framework deliberately leaves open, and why
 > decision's *reasoning* is the part nobody can reconstruct later. Record the
 > choice when you make it, while the alternatives are still fresh.
 >
-> Not an ADR log — no status field, no numbering ceremony. One heading per
+> Not an ADR log—no status field, no numbering ceremony. One heading per
 > decision, newest at the top, and a line about what you did instead.
 
 ## Template
@@ -28,19 +28,19 @@ have cost. If there wasn't one, say so; "no real alternative" is a finding.
 Delete each one as it becomes a real entry above. Every Astroid site meets these,
 and the framework takes no position on any of them:
 
-- **Editors** — DB-managed rows, or an environment allowlist? One auth instance
+- **Editors**—DB-managed rows, or an environment allowlist? One auth instance
   or two, if customers sign in as well?
-- **Rich text storage** — HTML or document JSON? This is very hard to change
+- **Rich text storage**—HTML or document JSON? This is very hard to change
   later; the sites that picked HTML did it for portability and said so.
-- **Sections** — the shipped library as-is, fixed slots, or bespoke sections
+- **Sections**—the shipped library as-is, fixed slots, or bespoke sections
   injected into the catalog?
-- **Commerce** — none, or which provider? If there is a catalog: live reads, or a
+- **Commerce**—none, or which provider? If there is a catalog: live reads, or a
   D1 mirror? Where money is calculated, and what makes that server-authoritative.
-- **Migrations** — hand-authored SQL is the default. If you adopt a generator,
+- **Migrations**—hand-authored SQL is the default. If you adopt a generator,
   write down what happens to the existing hand-authored files.
-- **Content security policy** — generated, or hand-maintained in
+- **Content security policy**—generated, or hand-maintained in
   `astro.config.mjs`? A section that needs an inline style forces this question.
-- **Edge caching** — off by default. Turning it on has a revalidation story that
+- **Edge caching**—off by default. Turning it on has a revalidation story that
   belongs here, not in a commit message.
-- **Service worker / PWA** — a manifest is cheap; a service worker is a cache
+- **Service worker / PWA**—a manifest is cheap; a service worker is a cache
   invalidation problem you now own.

package/template/docs/RUNBOOK.md

@@ -4,7 +4,7 @@ Operating __BRAND_NAME__: local dev, migrations, secrets, deploy, and what to do
 when something breaks.
 
 > Scaffolded by `create-astroid`. The headings are the ones three production
-> Astroid sites arrived at independently — fill them in as you go. A heading with
+> Astroid sites arrived at independently—fill them in as you go. A heading with
 > nothing under it is a question you have not had to answer yet, which is useful
 > information on its own.
 
@@ -23,7 +23,7 @@ pnpm exec wrangler d1 migrations apply DB --local
 OWNER_EMAIL=you@example.com pnpm seed:editors
 ```
 
-Then open `/louise` and request the magic link — in local dev it is **printed to
+Then open `/louise` and request the magic link—in local dev it is **printed to
 the dev console**, since there is no email binding. Follow it to `/?louise` for
 edit mode.
 
@@ -49,7 +49,7 @@ wrangler deploy
 ```
 
 <!-- Who deploys, from where, and what gates it? If deploys are automatic on push
-     to main, say so here — that is the first thing a new person asks. -->
+     to main, say so here—that is the first thing a new person asks. -->
 
 ## D1 migrations
 
@@ -82,13 +82,13 @@ wrangler secret put SESSION_SECRET
 ## Editing the live site
 
 <!-- Who the editors are and how they are added. Astroid ships DB-managed editors
-     by default — `pnpm seed:editors` writes the first one — rather than an env
+     by default—`pnpm seed:editors` writes the first one—rather than an env
      allowlist. If you changed that, this is where it is written down. -->
 
 ## Common breakages
 
 <!-- The section that pays for the whole document. Add an entry every time
-     something surprises you, with the symptom FIRST — that is what someone
+     something surprises you, with the symptom FIRST—that is what someone
      searches for at the time.
 
      Format that works:

package/template/drizzle.config.ts

@@ -4,10 +4,10 @@ import { defineConfig } from "drizzle-kit";
 // by `wrangler d1 migrations apply DB`. The schema is the astroid-generated
 // content tables (louise-toolkit/db column sets).
 //
-// Better Auth owns its own tables (user/session/account/verification/passkey) —
-// they're generated by `louise gen-auth-schema` (see migrations/0001_auth.sql),
-// NOT by Drizzle, so they're fenced out here to keep drizzle-kit from trying to
-// drop or recreate them.
+// Better Auth owns its own tables
+// (user/session/account/verification/passkey)—they're generated by `louise
+// gen-auth-schema` (see migrations/0001_auth.sql), NOT by Drizzle, so they're
+// fenced out here to keep drizzle-kit from trying to drop or recreate them.
 export default defineConfig({
   dialect: "sqlite",
   schema: "./src/schema.ts",

package/template/scripts/seed-editors.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-// Seed the first editor(s) — an admin `louise_user` row per OWNER_EMAIL / ENGINEER_EMAIL.
+// Seed the first editors—an admin `louise_user` row per OWNER_EMAIL / ENGINEER_EMAIL.
 // A row here IS an editor and IS the magic-link allowlist, so this bootstraps
 // access before anyone can sign in. Idempotent (INSERT OR IGNORE on unique email).
 // After this, add more editors from the Users panel (never by editing env).
@@ -37,7 +37,7 @@ const now = new Date().toISOString();
 /**
  * Quote a value as a SQL string literal, doubling any embedded single quote.
  * `wrangler d1 execute` takes raw SQL via `--command` with no parameter binding,
- * so values have to be escaped rather than bound — and an apostrophe is legal in
+ * so values have to be escaped rather than bound—and an apostrophe is legal in
  * an email local part, so this is a correctness fix as much as a safety one.
  */
 const q = (value) => `'${String(value).replace(/'/g, "''")}'`;

package/template/src/auth.ts

@@ -4,7 +4,7 @@
 // DB-managed editors: an admin `louise_user` row IS an editor. The editor
 // instance's tables are `louise_`-prefixed (the editor convention), leaving the
 // unprefixed `user`/`session` names free for a second/portal instance. That
-// table is BOTH the role source and the magic-link allowlist — `resolveAdmins`
+// table is BOTH the role source and the magic-link allowlist—`resolveAdmins`
 // reads it, so only an existing editor's email can request a sign-in link. Seed
 // the first editor with `pnpm seed:editors`; add more from the Users panel
 // (editorsRoute), never by editing env. Magic-link + passkey come from
@@ -37,7 +37,7 @@ async function resolveAdmins(): Promise<string[]> {
   return results.map((r) => r.email);
 }
 
-/** The branded sign-in email — Astroid's template over your mail theme. */
+/** The branded sign-in email—Astroid's template over your mail theme. */
 function renderMagicLinkEmail({ url, toEmail }: { url: string; toEmail: string }): MagicLinkEmail {
   return magicLinkEmail(MAIL_THEME, { url, toEmail });
 }
@@ -57,7 +57,7 @@ function getAuth(request: Request): Promise<LouiseAuth> {
 
 /**
  * Re-derive the editor session from the signed Better Auth session on every
- * request — the seam the generated worker.ts + middleware.ts call. Null when the
+ * request—the seam the generated worker.ts + middleware.ts call. Null when the
  * caller isn't a signed-in editor, which is what denies edit/write access.
  */
 export async function resolveEditor(request: Request): Promise<EditorSession | null> {

package/template/src/components/LouiseEdit.astro

@@ -1,5 +1,5 @@
 ---
-// Boots the in-page Louise editor — the edit bar + the Settings drawer (Pages,
+// Boots the in-page Louise editor—the edit bar + the Settings drawer (Pages,
 // Media, Settings, Users). Drop it before </body> in your layout.
 //
 // Gated on `Astro.locals.editMode`, which the generated middleware sets for a
@@ -25,7 +25,7 @@ const sectionsJson = Array.isArray(sections) ? JSON.stringify(sections) : undefi
 
 // Is the live multi-editor session on? Read from the config rather than baked in
 // at scaffold time, so adding `realtime` to `modules` later takes effect here
-// too — `astroid generate` regenerates the worker and scaffolds the Durable
+// too—`astroid generate` regenerates the worker and scaffolds the Durable
 // Object, but this file is yours and is never rewritten.
 const realtimeOn = (astroidConfig.modules ?? []).includes("realtime");
 ---
@@ -36,7 +36,7 @@ const realtimeOn = (astroidConfig.modules ?? []).includes("realtime");
       {/* Per-render values (editor name, versioned page id) ride as data-* on this
           marker element rather than a define:vars inline script. define:vars forces
           is:inline, whose content varies per request and so can't be hashed by
-          Astro's security.csp — it would be CSP-blocked. The boot script below
+          Astro's security.csp—it would be CSP-blocked. The boot script below
           reads them from here; being static, it hashes cleanly into script-src.
           The element also gates the editor: no marker (a non-edit page swapped in
           by a view transition) → boot() no-ops. */}
@@ -53,10 +53,10 @@ const realtimeOn = (astroidConfig.modules ?? []).includes("realtime");
         // the edit bar; `mountSettings` renders the drawer (Pages/Media/Settings +
         // Users, backed by editorsRoute). When the page passes `versionedPageId`,
         // the bar gains Save draft + Publish, and this page's `<Editable>` fields
-        // are edited in place — their changes stage a draft, promoted on Publish.
+        // are edited in place—their changes stage a draft, promoted on Publish.
         // The sections editor currently mounted on this <body>, and which boot
-        // owns it. `boot()` runs at parse AND on `astro:page-load` — which Astro's
-        // ClientRouter fires on the initial load, not only on navigations — so two
+        // owns it. `boot()` runs at parse AND on `astro:page-load`—which Astro's
+        // ClientRouter fires on the initial load, not only on navigations—so two
         // boots race, and the second lands while the first one's dynamic import is
         // still in flight. Without a guard both mount, and the page gets two
         // on-canvas chromes, two toolbars and two Publish buttons over one store.
@@ -65,7 +65,7 @@ const realtimeOn = (astroidConfig.modules ?? []).includes("realtime");
         // not, and it is also the one that needs disposing on a view-transition
         // nav so its flush and unsaved-changes listeners don't outlive the page.
         // Annotated, not inferred: `= null` alone infers `null`, and `astro check`
-        // runs strict — the scaffold smoke fails on ts(7034)/ts(7005) before a
+        // runs strict—the scaffold smoke fails on ts(7034)/ts(7005) before a
         // scaffolded site ever builds.
         let teardown: (() => void) | null = null;
         let generation = 0;
@@ -82,7 +82,7 @@ const realtimeOn = (astroidConfig.modules ?? []).includes("realtime");
             import("astroidjs/components/sections"),
           ])
             .then(([client, settings, lib]) => {
-              // Superseded while importing — a later boot owns the page now.
+              // Superseded while importing—a later boot owns the page now.
               if (gen !== generation) return;
               settings.mountSettings({
                 userName: el.dataset.louiseUser || "Editor",

package/template/src/layouts/Site.astro

@@ -53,7 +53,7 @@ try {
      FROM site_settings WHERE id = 1`,
   ).first<Settings>();
 } catch {
-  // No DB binding yet — fall through to the config defaults below.
+  // No DB binding yet—fall through to the config defaults below.
 }
 
 const settings = {
@@ -99,7 +99,7 @@ const settings = {
     <LouiseEdit versionedPageId={versionedPageId} sections={sections} />
     {
       /* Real-visitor Core Web Vitals. A static file from public/, so it is
-         same-origin and already covered by `script-src 'self'` — an inline
+         same-origin and already covered by `script-src 'self'`—an inline
          script with generated content couldn't be hashed into the CSP.
          `defer` keeps it off the critical path; it reports once per page on
          visibilitychange via sendBeacon. Skipped in edit mode: an editor's

package/template/src/pages/api/auth/[...all].ts

@@ -1,4 +1,4 @@
-// Better Auth catch-all — magic-link sign-in, passkey, session. The allowlist
+// Better Auth catch-all—magic-link sign-in, passkey, session. The allowlist
 // gate (handleAuth → handleAuthRequest) rejects magic-link requests from
 // non-editor emails before Better Auth runs, enumeration-safe.
 import type { APIRoute } from "astro";

package/template/src/pages/contact.astro

@@ -1,14 +1,14 @@
 ---
 // The public contact form.
 //
-// The `contact` section — and the scaffolded hero/cta defaults — link here, so
+// The `contact` section—and the scaffolded hero/cta defaults—link here, so
 // without this page a fresh site ships a dead link. It posts to the generated
 // worker's `formRoute`, mounted at /api/louise/forms/inquiries: same-origin POST
 // only, a honeypot field plus a minimum time-on-page, a KV rate limit, then
 // validation against the inquiries form before the row is written. Submissions
 // land in the Inquiries tab of the editor drawer.
 //
-// Yours to edit — the copy, the fields, the layout. (If you remove the `contact`
+// Yours to edit—the copy, the fields, the layout. (If you remove the `contact`
 // section from astroid.config.ts, the form route stops being mounted and this
 // page's POST will 404; delete the page too, or keep the section.)
 import Site from "../layouts/Site.astro";
@@ -76,7 +76,7 @@ const renderedAt = Date.now();
 
 <script>
   // Progressive enhancement: without JS the form still submits (the route accepts
-  // form-encoded bodies) — the visitor just lands on the JSON response. A
+  // form-encoded bodies)—the visitor just lands on the JSON response. A
   // processed <script> (no is:inline) is bundled to a same-origin file, which is
   // what keeps it inside the CSP's `script-src 'self'`.
   const form = document.querySelector<HTMLFormElement>("#contact-form");
@@ -98,7 +98,7 @@ const renderedAt = Date.now();
 
       if (response.ok) {
         form.reset();
-        if (status) status.textContent = "Thanks — we've got it, and we'll be in touch.";
+        if (status) status.textContent = "Thanks—we've got it, and we'll be in touch.";
         return;
       }
 

package/template/src/pages/index.astro

@@ -1,5 +1,5 @@
 ---
-// The home page — an editable `pages` row rendered in place. Reads the published
+// The home page—an editable `pages` row rendered in place. Reads the published
 // `home` row for the public view; in edit mode it reads the latest DRAFT so an
 // editor's in-progress edits resume. The <Editable> fields carry the markers the
 // Louise client turns into inline editors; saves stage a draft (versionedPageId),
@@ -17,7 +17,7 @@ const { editMode } = Astro.locals;
 // Edge caching (ADR 0004). Opting in emits `Cloudflare-CDN-Cache-Control`, which
 // the worker's `withEdgeCache` layer reads as "store this", then strips.
 //
-// Both conditions matter. Edit mode must NEVER opt in — a cached editor render
+// Both conditions matter. Edit mode must NEVER opt in—a cached editor render
 // would carry draft content and the inline-edit hooks into the shared public
 // entry. And the var is off by default because `caches.default` survives
 // Cloudflare Dev Mode and Purge Everything; walk the activation runbook in
@@ -33,8 +33,8 @@ if (editMode || env.ASTROID_EDGE_CACHE !== "true") {
   Astro.cache.set({ maxAge: 60 });
 }
 
-// `seo_*` are the page's SEO overrides, deliberately separate from `title` —
-// which is the on-page H1. The home page passes NO title to <Site>, so <title>
+// `seo_*` are the page's SEO overrides, deliberately separate from `title`—which
+// is the on-page H1. The home page passes NO title to <Site>, so <title>
 // is the site-wide default ("Acme Coffee", not "Acme Coffee | Acme Coffee");
 // set `seo_title` on the row to override just the head.
 interface HomeRow {
@@ -54,12 +54,12 @@ try {
     "SELECT id, title, body, sections, seo_title, seo_description, og_image, noindex FROM pages WHERE slug = 'home'",
   ).first<HomeRow>();
 } catch {
-  // No DB binding yet (pre-provision) — fall through to the seed-me prompt.
+  // No DB binding yet (pre-provision)—fall through to the seed-me prompt.
 }
 
 let title = page?.title ?? "__BRAND_NAME__";
 let body = page?.body ?? "";
-// `sections` is a JSON string in D1. Bad JSON is a render-time non-event — the
+// `sections` is a JSON string in D1. Bad JSON is a render-time non-event—the
 // page falls back to its prose body rather than 500ing on one malformed row.
 function parseSections(raw: string | null | undefined): unknown[] {
   if (!raw) return [];
@@ -89,13 +89,13 @@ if (editMode && page) {
       if (typeof d.title === "string") title = d.title;
       if (typeof d.body === "string") body = d.body;
       // Sections stage as drafts like any other field, so edit mode must render
-      // the draft's array — otherwise an editor's in-progress section edits
+      // the draft's array—otherwise an editor's in-progress section edits
       // vanish on reload while their title edits survive.
       if (Array.isArray(d.sections)) sections = d.sections;
       else if (typeof d.sections === "string") sections = parseSections(d.sections);
     }
   } catch {
-    // Non-fatal — fall back to the live row.
+    // Non-fatal—fall back to the live row.
   }
 }
 ---

package/template/src/pages/login.astro

@@ -1,8 +1,8 @@
 ---
 // Editor sign-in. Emails a magic link (Better Auth) to an allowlisted editor;
 // clicking it starts a session and lands on `/?louise` (edit mode on). The gate
-// is enumeration-safe — the response is identical whether or not the email is an
-// editor — so the UI always says "check your email".
+// is enumeration-safe—the response is identical whether or not the email is an
+// editor—so the UI always says "check your email".
 import { env } from "cloudflare:workers";
 import { turnstileSiteKey } from "louise-toolkit/auth";
 import Site from "../layouts/Site.astro";
@@ -14,8 +14,8 @@ export const prerender = false;
 // This has to match the server exactly. `getLouiseAuth` registers Better Auth's
 // captcha plugin on /sign-in/magic-link the moment BOTH halves of the pair are
 // real, and that plugin rejects any request without an `x-captcha-response`
-// header. So a page that never rendered a widget meant provisioning Turnstile —
-// which .env.example openly invites you to do — locked the owner out of their
+// header. So a page that never rendered a widget meant provisioning Turnstile—which
+// .env.example openly invites you to do—locked the owner out of their
 // own sign-in, with a 403 and no clue why.
 //
 // `turnstileSiteKey` returns null for the always-passing TEST key, which is the
@@ -46,7 +46,7 @@ const siteKey = turnstileSiteKey(env);
           {
             siteKey && (
               /* Rendered explicitly by the script below, which reads the key
-                 from here — a processed script can't take `define:vars`. */
+                 from here—a processed script can't take `define:vars`. */
               <div id="captcha" data-sitekey={siteKey} />
             )
           }
@@ -68,7 +68,7 @@ const siteKey = turnstileSiteKey(env);
     const msg = document.getElementById("msg");
     const captcha = document.getElementById("captcha");
 
-    // Absent when no real site key is set — then the server's captcha plugin is
+    // Absent when no real site key is set—then the server's captcha plugin is
     // off too, and the request goes without a token.
     let widget: TurnstileWidget | null = null;
     const ready = captcha?.dataset.sitekey
@@ -79,7 +79,7 @@ const siteKey = turnstileSiteKey(env);
           .catch(() => {
             // The server will refuse a request without a token, so say so now
             // rather than after the owner has typed their email.
-            if (msg) msg.textContent = "The sign-in check didn't load — reload the page to try again.";
+            if (msg) msg.textContent = "The sign-in check didn't load—reload the page to try again.";
           })
       : Promise.resolve();
 
@@ -107,9 +107,9 @@ const siteKey = turnstileSiteKey(env);
         // editor, so a failure here is the captcha, a rate limit, or an outage.
         msg.textContent = res.ok
           ? "If that email is an editor, a sign-in link is on its way."
-          : "That didn't go through — please try again.";
+          : "That didn't go through—please try again.";
       } catch {
-        msg.textContent = "Something went wrong — please try again.";
+        msg.textContent = "Something went wrong—please try again.";
       } finally {
         // A token is single-use, and this one is spent whatever happened. Without
         // a fresh one, "send it again" posts the spent token and is refused.

package/template/src/pages/robots.txt.ts

@@ -1,4 +1,4 @@
-// robots.txt — origin-aware, with the disallow list derived from your Astroid
+// robots.txt—origin-aware, with the disallow list derived from your Astroid
 // config (the editor + its API always; portal and checkout routes when those
 // modules are on). Scaffolded once and yours to edit: add a Disallow here when
 // you add a route crawlers shouldn't reach.
@@ -10,7 +10,7 @@ import astroidConfig from "../../astroid.config.js";
 export const prerender = false;
 
 export const GET: APIRoute = async (context) => {
-  // The origin actually serving this request — never a configured domain. A
+  // The origin actually serving this request—never a configured domain. A
   // preview deploy that advertises the production host invites its content to
   // be indexed under the real domain.
   const origin = new URL(context.request.url).origin;
@@ -24,7 +24,7 @@ export const GET: APIRoute = async (context) => {
     }>();
     disableIndexing = Boolean(row?.disable_indexing);
   } catch {
-    // No DB binding yet (pre-provision) — fall through to the crawlable default.
+    // No DB binding yet (pre-provision)—fall through to the crawlable default.
   }
 
   return new Response(astroidRobotsTxt(astroidConfig, { origin, disableIndexing }), {

package/template/src/pages/sitemap.xml.ts

@@ -1,4 +1,4 @@
-// sitemap.xml — the published `pages` rows, plus whatever else this site serves.
+// sitemap.xml—the published `pages` rows, plus whatever else this site serves.
 // Scaffolded once and yours to edit: add your own routes (a product catalog, a
 // gallery) to the `entries` array below.
 //
@@ -20,7 +20,7 @@ export const GET: APIRoute = async (context) => {
       "SELECT slug, updated_at FROM pages WHERE status = 'published' AND noindex = 0",
     ).all<{ slug: string; updated_at: number | null }>();
     for (const row of results ?? []) {
-      // `home` is served at "/", which is already listed — never at "/home".
+      // `home` is served at "/", which is already listed—never at "/home".
       if (row.slug === "home") continue;
       // Drizzle stores `updated_at` as a Unix timestamp in SECONDS; <lastmod>
       // wants a W3C datetime, so a raw epoch number would be invalid.
@@ -28,7 +28,7 @@ export const GET: APIRoute = async (context) => {
       entries.push({ path: `/${row.slug}`, lastmod });
     }
   } catch {
-    // No DB binding yet (pre-provision) — ship the root-only sitemap.
+    // No DB binding yet (pre-provision)—ship the root-only sitemap.
   }
 
   return new Response(astroidSitemapXml(astroidConfig, entries, { origin }), {