Astro 7, and stop a print-only instance calling a route it has switched off
CI / check (push) Has been cancelled
CI / check (push) Has been cancelled
The critical advisory in the dependency tree (GHSA-26w7-cxv4-gfx2, remote code execution through AVIF image optimisation) has no fix inside Astro 5, so this moves to Astro 7.3.2 with @astrojs/node 11 and current sharp. `npm audit` now reports nothing. The only code the jump needed: `csp` graduated out of `experimental`, and sharp's `Sharp` type is a named export now. Also fixed, both found by testing with every module switched on rather than only the print-only default: - `src/pages/index.astro` passed `dict` to the studio island without ever defining it, so the studio page returned 500 on any instance with the AI module on. The print-only default redirects away from that page, which is why the earlier run never hit it. - The print studio fetched `/api/delivery-targets` even with the delivery module off. The route answered 404 exactly as designed, but it left a red line in the console of every print-only instance, which reads like a fault. It now asks only when there is a module to ask, and hides the card otherwise. Plus: the first-run box sizes itself to its content instead of miscounting padding, and the README's counts are recounted rather than remembered. Verified against a live instance on a fresh database, in both module sets: sign-in, module gating, the German interface, an eight-up passport sheet and its PDF. 124 tests, type check, build and secret scan all clean. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01Nh4A79bbqT9dcd2inzYUdg
This commit is contained in:
13 files changed
+1681
-3890
No files matched your search
@@ -3,13 +3,16 @@ import Base from '../layouts/Base.astro';
|
||||
import StudioApp from '../components/StudioApp.tsx';
|
||||
import { query } from '../lib/db';
|
||||
import { has } from '../lib/modules';
|
||||
import { tFor, dictFor } from '../lib/i18n.server';
|
||||
|
||||
// Without the AI module there is no studio, and the print studio is the product.
|
||||
if (!has('ai')) return Astro.redirect('/print', 302);
|
||||
|
||||
const locale = Astro.locals.locale ?? 'en';
|
||||
const t = tFor(locale);
|
||||
const dict = dictFor(locale);
|
||||
const recipes = await query('SELECT * FROM recipes ORDER BY is_default DESC, name').catch(() => []);
|
||||
---
|
||||
<Base title="Studio · Klarbild">
|
||||
<Base title={t('Studio · Klarbild')}>
|
||||
<StudioApp client:load recipes={recipes} locale={locale} dict={dict} />
|
||||
</Base>
|
||||
Reference in new issue
Block a user