create-astroid 0.7.2 → 0.7.4

package/index.mjs

@@ -14,7 +14,6 @@
 // uses, so a fresh project is already in sync.
 
 import { existsSync, mkdirSync, readdirSync, readFileSync, statSync, writeFileSync } from "node:fs";
-import { createRequire } from "node:module";
 import { basename, dirname, join, resolve } from "node:path";
 import { createInterface } from "node:readline/promises";
 import { fileURLToPath } from "node:url";
@@ -23,6 +22,7 @@ import {
   ASTROID_MAP_DEPENDENCIES,
   defineAstroid,
   generateAstroidEnvBindings,
+  generateAstroidHomeSeed,
   generateAstroidPortalLocals,
   generateAstroidProject,
   generateAstroidCheckoutEnv,
@@ -31,6 +31,7 @@ import {
   generateAstroidSecretsEnv,
   generateAstroidWrangler,
 } from "astroidjs";
+import { toolkitRanges } from "./toolkit-ranges.mjs";
 
 const TEMPLATE_DIR = join(dirname(fileURLToPath(import.meta.url)), "template");
 
@@ -86,67 +87,6 @@ const slugify = (s) =>
     .replace(/^-+|-+$/g, "")
     .slice(0, 40);
 
-// --- toolkit versions ------------------------------------------------------
-
-/**
- * The `astroidjs` + `louise-toolkit` ranges to write into the scaffold.
- *
- * DERIVED from this package's own resolved dependencies rather than hard-coded
- * in template/package.json. A literal there is a second place to remember on
- * every release, and when it rots the failure is silent and total: the template
- * imported `astroidjs/astro` while pinning `^0.1.0`, a range whose newest match
- * had no such export, so every scaffolded project died before Astro loaded its
- * config. CI could not see it—the clean-room smoke test pins both packages to
- * tarballs via pnpm `overrides`, which is exactly what erases these ranges.
- *
- * Three shapes reach the `declared` value, and all three have to end up as one
- * caret range:
- *
- *   - `workspace:*`—a sibling in this repo (`astroidjs`). Falls back to the
- *     version of the copy actually resolved on disk, which is what the scaffold
- *     would install anyway. `pnpm pack` rewrites these to a concrete version, so
- *     a PUBLISHED create-astroid never carries one.
- *   - an exact version—what `pnpm pack` leaves behind for a former
- *     `workspace:*`.
- *   - an already-caretted range—what an external dependency is written as now
- *     that `louise-toolkit` and `@louise-toolkit/astro` live in another repo.
- *
- * That last one is why `stripRange` exists. Prefixing `^` onto `^0.27.0` yields
- * `^^0.27.0`, which npm rejects as invalid, and every scaffolded project would
- * fail at `pnpm install` before anything type-checked. It cost nothing to guard
- * and would have been invisible until the first scaffold after the repo split.
- *
- * Caret on a 0.x is minor-locked (`^0.2.0` := `>=0.2.0 <0.3.0`), which is the
- * behaviour we want while the toolkit is pre-1.0 and marks breaking changes as
- * minors: patches flow, a breaking minor does not.
- */
-/** `^1.2.3` / `~1.2.3` / `>=1.2.3` → `1.2.3`. See {@link toolkitRanges}. */
-function stripRange(version) {
-  return String(version).replace(/^[\^~]|^>=\s*/, "");
-}
-
-function toolkitRanges() {
-  const req = createRequire(import.meta.url);
-  const self = JSON.parse(readFileSync(new URL("./package.json", import.meta.url), "utf8"));
-  const ranges = {};
-  for (const name of ["astroidjs", "louise-toolkit", "@louise-toolkit/astro"]) {
-    const declared = self.dependencies?.[name];
-    let version = declared && !declared.startsWith("workspace:") ? declared : undefined;
-    if (!version) {
-      // Both packages export `./package.json`, so this resolves the real copy.
-      version = JSON.parse(readFileSync(req.resolve(`${name}/package.json`), "utf8")).version;
-    }
-    if (!version) {
-      throw new Error(
-        `create-astroid could not determine the ${name} version to scaffold with. ` +
-          "This is a packaging fault — please file an issue rather than editing the scaffold by hand.",
-      );
-    }
-    ranges[name] = `^${stripRange(version)}`;
-  }
-  return ranges;
-}
-
 async function prompt(question, fallback) {
   if (!process.stdin.isTTY) return fallback;
   const rl = createInterface({ input: process.stdin, output: process.stdout });
@@ -446,6 +386,11 @@ async function main() {
   for (const file of generateAstroidProject(config)) write(dir, file.path, file.contents);
   write(dir, "wrangler.jsonc", generateAstroidWrangler(config));
 
+  // 3a. The home page seed, built from the config's own `sections`. It used to be
+  //     a fixed template file that seeded the marketing sections for every
+  //     archetype, and token substitution can't escape a brand name for SQL.
+  write(dir, "seed/home.seed.sql", generateAstroidHomeSeed(config));
+
   // 3b. Every scaffold-once module file this config implies—the queue seam and
   //     webhook receivers, the portfolio gallery page, the PWA service worker +
   //     manifest + headers, the map tile route + embed, the portal's second auth

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-astroid",
-  "version": "0.7.2",
+  "version": "0.7.4",
   "description": "Scaffold a new Astroid site — an editable, multi-editor Astro app on Cloudflare Workers — in one command.",
   "keywords": [
     "astro",
@@ -23,7 +23,8 @@
   },
   "files": [
     "index.mjs",
-    "template"
+    "template",
+    "toolkit-ranges.mjs"
   ],
   "type": "module",
   "publishConfig": {
@@ -31,10 +32,10 @@
   },
   "dependencies": {
     "@better-auth/passkey": "^1.7.2",
-    "@louise-toolkit/astro": "^0.2.2",
+    "@louise-toolkit/astro": "^0.2.3",
     "better-auth": "^1.7.2",
-    "louise-toolkit": "^0.31.0",
-    "astroidjs": "0.13.0"
+    "louise-toolkit": "^0.31.1",
+    "astroidjs": "0.14.0"
   },
   "engines": {
     "node": ">=26.0.0"

package/toolkit-ranges.mjs

@@ -0,0 +1,70 @@
+// Copyright (c) 2026 BowenLabs. Astroid is MIT licensed.
+//
+// The toolkit version ranges create-astroid writes into a new project. A module
+// of its own so the test suite can import it without running the scaffolder.
+
+import { readFileSync } from "node:fs";
+import { createRequire } from "node:module";
+
+/**
+ * The `astroidjs` + `louise-toolkit` ranges to write into the scaffold: a caret
+ * on the version of each package that create-astroid actually RESOLVED, which is
+ * the version the scaffold was built against.
+ *
+ * DERIVED rather than hard-coded in template/package.json. A literal there is a
+ * second place to remember on every release, and when it rots the failure is
+ * silent and total: the template imported `astroidjs/astro` while pinning
+ * `^0.1.0`, a range whose newest match had no such export, so every scaffolded
+ * project died before Astro loaded its config. CI could not see it—the
+ * clean-room smoke test pins `astroidjs` to a tarball via pnpm `overrides`,
+ * which is exactly what erases the declared range.
+ *
+ * Always the resolved version, never create-astroid's own DECLARED range. In the
+ * monorepo the two were the same thing: `pnpm pack` turned `workspace:*` into an
+ * exact version. Once the toolkit moved to another repo, create-astroid declared
+ * it as a caret range (`^0.31.0`), and reading that wrote the range's FLOOR
+ * rather than the version the generators and the auth migration had just run
+ * against. `scripts/ci/checks/scaffold-versions.mjs` holds the scaffold to the
+ * resolved version, so the moment a toolkit patch shipped (0.31.1) the two
+ * disagreed and the smoke test failed on every PR with no code change.
+ *
+ * A published `version` is always exact, so the caret goes straight on; there is
+ * no range to strip. The floor moves with each patch, which is the point: a new
+ * project starts from the newest patch it was built against. Caret on a 0.x is
+ * minor-locked (`^0.2.0` := `>=0.2.0 <0.3.0`), which is the behavior we want
+ * while the toolkit is pre-1.0 and marks breaking changes as minors: patches
+ * flow, a breaking minor does not.
+ *
+ * @param {(name: string) => string | undefined} [resolveVersion] Reads a
+ *   package's installed version. Tests pass their own; the default asks Node.
+ * @returns {Record<string, string>} Package name to caret range.
+ */
+export function toolkitRanges(resolveVersion = installedVersion) {
+  /** @type {Record<string, string>} */
+  const ranges = {};
+  for (const name of ["astroidjs", "louise-toolkit", "@louise-toolkit/astro"]) {
+    const version = resolveVersion(name);
+    if (!version) {
+      throw new Error(
+        `create-astroid could not determine the ${name} version to scaffold with. ` +
+          "This is a packaging fault — please file an issue rather than editing the scaffold by hand.",
+      );
+    }
+    ranges[name] = `^${version}`;
+  }
+  return ranges;
+}
+
+/**
+ * The version of the copy of `name` that create-astroid itself resolves. Rooted
+ * at `import.meta.url`, which is already the real path, so it sees the sibling
+ * packages pnpm places beside create-astroid rather than guessing at hoisting.
+ *
+ * @param {string} name
+ * @returns {string | undefined}
+ */
+function installedVersion(name) {
+  const req = createRequire(import.meta.url);
+  // All three packages export `./package.json`, so this reads the real copy.
+  return JSON.parse(readFileSync(req.resolve(`${name}/package.json`), "utf8")).version;
+}

package/template/seed/home.seed.sql

@@ -1,61 +0,0 @@
--- Seed the editable home page (slug `home`) that src/pages/index.astro renders.
--- Idempotent. Apply once after migrations:
---   wrangler d1 execute DB --file seed/home.seed.sql --remote
---   (drop --remote for the local dev D1)
---
--- `sections` is the page-builder array — the same shape the on-canvas editor
--- reads and the server validates against the section catalog on write. Each item
--- is `{"_type": …, …fields, "_settings": {…}}`, and `_settings` holds TOKENS
--- (colorway/align), never CSS, so a re-theme needs no content change.
---
--- Seeding it is deliberate: an empty array renders an empty page, and a blank
--- canvas is a worse first run than having something real to click on and edit.
---
--- Full-text search (the editor's Pages search) is kept in sync on PUBLISH, so a
--- row inserted with raw SQL like this is NOT in the index until you either
--- publish an edit to it or backfill once with `POST /api/louise/pages/reindex`
--- (signed in). The page renders fine either way — only in-editor search is
--- affected.
---
--- To override just the <head> title/description (not the on-page H1), add
--- `seo_title` / `seo_description` columns below. `seo_title` is run through the
--- config's title template, which already appends the brand — so set the page
--- part only ("Pricing"), not "Pricing | __BRAND_NAME__".
-INSERT OR IGNORE INTO pages (slug, title, body, sections, status, sort_order, created_at, updated_at)
-VALUES (
-  'home',
-  '__BRAND_NAME__',
-  '<p>Welcome to __BRAND_NAME__. Sign in at <code>/login</code>, switch on edit mode, and change this text in place — then hit Publish.</p>',
-  json_array(
-    json_object(
-      '_type', 'hero',
-      'heading', '__BRAND_NAME__',
-      'subheading', 'Edit this in place — sign in, switch on edit mode, and type.',
-      'ctaLabel', 'Get in touch',
-      'ctaHref', '/contact',
-      '_settings', json_object('colorway', 'base', 'align', 'center')
-    ),
-    json_object(
-      '_type', 'featureGrid',
-      'heading', 'What we do',
-      'items', json_array(
-        json_object('title', 'First thing', 'body', 'Describe it here.'),
-        json_object('title', 'Second thing', 'body', 'And this one.'),
-        json_object('title', 'Third thing', 'body', 'And this one too.')
-      ),
-      '_settings', json_object('colorway', 'base')
-    ),
-    json_object(
-      '_type', 'cta',
-      'heading', 'Ready when you are',
-      'body', 'Swap this copy for your own.',
-      'ctaLabel', 'Contact us',
-      'ctaHref', '/contact',
-      '_settings', json_object('colorway', 'brand', 'align', 'center')
-    )
-  ),
-  'published',
-  0,
-  unixepoch(),
-  unixepoch()
-);