@saastemly/voidcommerce 0.20.0 → 0.22.0

package/dist/catalog.d.ts

@@ -24,6 +24,19 @@ export interface EnvKey {
     dev?: string | undefined;
     /** Where the real value comes from. */
     where?: string | undefined;
+    /**
+     * Needed to DEPLOY the shop, not to run it.
+     *
+     * The Cloudflare credentials are the case. They belong in `.env.secrets`
+     * so a push carries them, and preflight must insist on them — but the
+     * worker has no business seeing one. Left unmarked they ended up in three
+     * wrong places at once: `env.ts`, so the worker refused to boot without a
+     * deploy token; `.env`, where wrangler read `CLOUDFLARE_ACCOUNT_ID=unset`
+     * and addressed `accounts/unset/...`; and `--secrets-file`, which would
+     * have uploaded the deploy credential INTO the worker for any code
+     * running there to read.
+     */
+    deployOnly?: boolean | undefined;
 }
 export interface Choice {
     id: string;

package/dist/cli.js

@@ -6,6 +6,7 @@ import {
   distHelp,
   ensureGenerated,
   findProject,
+  findWrangler,
   finishStrict,
   fullHelp,
   generate,
@@ -14,14 +15,17 @@ import {
   initHelp,
   isVoidApp,
   line,
+  parseJsonc,
   preflight,
   printPreflight,
   row,
   runInherit,
   runVoid,
+  upsertJsonc,
   version,
-  voidAppsIn
-} from "./index-07ppzmgt.js";
+  voidAppsIn,
+  wrangler
+} from "./index-2kqz80nx.js";
 import {
   LOCAL_KEY_FILE,
   PRIVATE_KEY_VAR,
@@ -34,13 +38,16 @@ import {
   plaintextSecretEntries,
   plaintextSecretNames,
   run,
+  secretValue,
   secretsCommand
-} from "./index-vpcnasre.js";
+} from "./index-t1ggktg8.js";
 import {
   LAYOUTS,
   oneOrigin,
   readManifest,
   validate,
+  workerHosts,
+  writeManifest,
   zoneOf
 } from "./index-30y19qz5.js";
 import {
@@ -50,9 +57,119 @@ import"./index-6e4eh08g.js";
 import"./index-0v6na3yp.js";
 
 // src/deploy/index.ts
-import color from "picocolors";
-import { existsSync } from "node:fs";
+import color2 from "picocolors";
+import { existsSync as existsSync2 } from "node:fs";
+import { join as join2 } from "node:path";
+
+// src/deploy/teardown.ts
+import { existsSync, readFileSync, writeFileSync } from "node:fs";
 import { join } from "node:path";
+import color from "picocolors";
+var fail = (message) => {
+  console.error(`
+${color.red("✗")} ${message}
+`);
+  return 1;
+};
+function teardownPlan(config, fallbackWorker) {
+  const queues = new Set;
+  for (const producer of config.queues?.producers ?? [])
+    if (producer.queue)
+      queues.add(producer.queue);
+  for (const consumer of config.queues?.consumers ?? [])
+    if (consumer.queue)
+      queues.add(consumer.queue);
+  const d1 = config.d1_databases?.find((db) => db.binding === "DB");
+  return {
+    worker: config.name || fallbackWorker,
+    d1: d1?.database_name && d1.database_id !== "local" ? d1.database_name : null,
+    queues: [...queues]
+  };
+}
+async function teardownCloudflare(project, opts) {
+  const app = project.appDir;
+  const configPath = join(app, "wrangler.jsonc");
+  if (!existsSync(configPath))
+    return fail("wrangler.jsonc is missing — there is nothing here to tear down.");
+  if (!process.env["CLOUDFLARE_API_TOKEN"]) {
+    const token = await secretValue(project, "CLOUDFLARE_API_TOKEN");
+    if (token)
+      process.env["CLOUDFLARE_API_TOKEN"] = token;
+  }
+  if (!process.env["CLOUDFLARE_ACCOUNT_ID"]) {
+    const account = await secretValue(project, "CLOUDFLARE_ACCOUNT_ID");
+    if (account)
+      process.env["CLOUDFLARE_ACCOUNT_ID"] = account;
+  }
+  const bin = findWrangler(app);
+  if (!bin)
+    return fail("wrangler is not installed. `bun add -d wrangler`.");
+  const config = parseJsonc(readFileSync(configPath, "utf8"));
+  const plan = teardownPlan(config, project.manifest.shop.domain.split(".")[0]);
+  const host = workerHosts(project.manifest)[0] ?? project.manifest.shop.domain;
+  console.log(`
+${color.bold("This will destroy, on Cloudflare:")}
+`);
+  console.log(`  worker    ${plan.worker}   ${color.dim(`(and its custom domain ${host})`)}`);
+  console.log(plan.d1 ? `  database  ${plan.d1}   ${opts.keepData ? color.green("KEPT — --keep-data") : color.red("DELETED, with every order in it")}` : `  database  ${color.dim("none recorded")}`);
+  console.log(plan.queues.length ? `  queues    ${plan.queues.join(", ")}` : `  queues    ${color.dim("none recorded")}`);
+  console.log("");
+  if (opts.dryRun) {
+    console.log(color.dim(`--dry-run: nothing was touched.
+`));
+    return 0;
+  }
+  if (!opts.confirm) {
+    return fail(`refusing to destroy anything without --confirm.
+` + `  This is not reversible: D1 has no undo, and the orders go with it.
+
+` + `  ${color.cyan(`vc teardown --cloudflare --confirm ${project.manifest.shop.domain}`)}`);
+  }
+  console.log(`▸ wrangler delete (${plan.worker})`);
+  const deleted = await wrangler(bin, ["delete", "--name", plan.worker, "--force"], app, true);
+  if (deleted.code !== 0 && !/not found|does not exist|10007|10090/i.test(deleted.out)) {
+    return fail(`could not delete the worker:
+${deleted.out.trim().split(`
+`).slice(-3).join(`
+`)}`);
+  }
+  console.log(`${color.green("✓")} worker gone${/not found|does not exist/i.test(deleted.out) ? color.dim(" (it was already)") : ""}`);
+  for (const queue of plan.queues) {
+    const dropped = await wrangler(bin, ["queues", "delete", queue], app, true);
+    if (dropped.code !== 0 && !/not found|does not exist|11009|11018/i.test(dropped.out)) {
+      console.error(`${color.yellow("!")} queue "${queue}" could not be deleted: ${dropped.out.trim().split(`
+`).slice(-1)[0]}`);
+    } else {
+      console.log(`${color.green("✓")} queue "${queue}" gone`);
+    }
+  }
+  if (plan.d1 && !opts.keepData) {
+    const dropped = await wrangler(bin, ["d1", "delete", plan.d1, "--skip-confirmation"], app, true);
+    if (dropped.code !== 0 && !/not found|does not exist|7404/i.test(dropped.out)) {
+      return fail(`the worker and queues are gone but D1 "${plan.d1}" is not:
+${dropped.out.trim().split(`
+`).slice(-3).join(`
+`)}`);
+    }
+    console.log(`${color.green("✓")} database "${plan.d1}" gone`);
+  }
+  if (!opts.keepData) {
+    writeFileSync(configPath, upsertJsonc(readFileSync(configPath, "utf8"), "d1_databases", []));
+    if (project.manifest.cloudflare?.d1) {
+      const { d1: _dropped, ...rest } = project.manifest.cloudflare;
+      project.manifest.cloudflare = rest;
+      await writeManifest(project.root, project.manifest);
+    }
+    console.log(`${color.green("✓")} the database id is out of wrangler.jsonc and the manifest, so the next deploy provisions afresh`);
+  }
+  console.log(`
+${color.bold("Torn down.")} ${color.dim(`The shop's secrets are untouched in ${SECRETS_FILE} — this removed infrastructure, not configuration.`)}
+` + `  Push again, or ${color.cyan("vc deploy --cloudflare --provision")}, and it rebuilds.
+`);
+  return 0;
+}
+
+// src/deploy/index.ts
 async function deployCommand(args) {
   const own = new Set(["--cloudflare", "--provision", "--force"]);
   const cloudflare = args.includes("--cloudflare");
@@ -75,12 +192,12 @@ async function deployCommand(args) {
   const check = await preflight(project, "void");
   printPreflight(project, check, "void");
   if (!check.ready && check.remote !== null && !args.includes("--force")) {
-    console.error(`${color.red("✗")} refusing to deploy a shop that is not ready for customers. Fix the above, or pass --force.
+    console.error(`${color2.red("✗")} refusing to deploy a shop that is not ready for customers. Fix the above, or pass --force.
 `);
     return 1;
   }
   if (!check.ready && check.remote === null) {
-    console.log(color.dim(`Secrets could not be verified here; void's own deploy gate is the next check.
+    console.log(color2.dim(`Secrets could not be verified here; void's own deploy gate is the next check.
 `));
   }
   return runVoid(["deploy", ...voids], project.appDir);
@@ -98,7 +215,7 @@ async function preflightCommand(args) {
     return result.ready ? 0 : 1;
   const pending = await uncommittedMigrations(project.root);
   if (pending.length > 0) {
-    console.error(`${color.red("✗")} ${pending.length} migration file${pending.length === 1 ? " is" : "s are"} not committed:
+    console.error(`${color2.red("✗")} ${pending.length} migration file${pending.length === 1 ? " is" : "s are"} not committed:
 ` + `    ${pending.join(`
     `)}
 
@@ -123,13 +240,13 @@ async function deployHelp() {
     line("vc's preflight — every required key set, the hostnames right — then", width),
     line("void deploy, untouched. Or, with --cloudflare, your own account via wrangler.", width),
     line("", width),
-    line(color.bold("Usage"), width),
+    line(color2.bold("Usage"), width),
     ...row("vc deploy [void's flags]", "preflight, then void deploy — the Void platform, void's login", width, 2),
     ...row("vc deploy --cloudflare", "wrangler, your Cloudflare account, no Void login: preflight, build, scrub baked secrets, migrate D1, deploy", width, 2),
     ...row("vc deploy --cloudflare --provision", "first time: create the D1 database and the queue, record them", width, 2),
     ...row("vc deploy --cloudflare --force", "deploy a shop preflight says is not ready — deliberately", width, 2),
     line("", width),
-    line(color.bold("Needs, for --cloudflare"), width),
+    line(color2.bold("Needs, for --cloudflare"), width),
     ...row("CLOUDFLARE_API_TOKEN", "in the environment; the account is pinned for you when there is one", width, 2),
     ...row(PRIVATE_KEY_VAR, "to decrypt the shop's own secrets", width, 2),
     line("", width),
@@ -225,9 +342,9 @@ async function guardCommand() {
   if (!project)
     return 0;
   const root = project.root;
-  if (existsSync(join(root, LOCAL_KEY_FILE)) && !ignoresKeyFile(root)) {
+  if (existsSync2(join2(root, LOCAL_KEY_FILE)) && !ignoresKeyFile(root)) {
     console.error(`
-${color.red("✗ refusing the commit")}: ${LOCAL_KEY_FILE} exists and is NOT gitignored.
+${color2.red("✗ refusing the commit")}: ${LOCAL_KEY_FILE} exists and is NOT gitignored.
 
 ` + `  It holds the private key that opens every secret in this repository.
 ` + `  Add ${LOCAL_KEY_FILE} to .gitignore before committing anything.
@@ -240,14 +357,14 @@ ${color.red("✗ refusing the commit")}: ${LOCAL_KEY_FILE} exists and is NOT git
   const publicKey = committedPublicKey(root);
   if (!publicKey) {
     console.error(`
-${color.red("✗ refusing the commit")}: ${bare.length} value${bare.length === 1 ? "" : "s"} in ${SECRETS_FILE} ${bare.length === 1 ? "is" : "are"} in the clear, and there is no key to encrypt ${bare.length === 1 ? "it" : "them"} with.
+${color2.red("✗ refusing the commit")}: ${bare.length} value${bare.length === 1 ? "" : "s"} in ${SECRETS_FILE} ${bare.length === 1 ? "is" : "are"} in the clear, and there is no key to encrypt ${bare.length === 1 ? "it" : "them"} with.
 
 ` + `    ${bare.map((entry) => entry.name).join(`
     `)}
 
-` + `  ${color.cyan("vc keys --init")}  makes one — no GitHub repository needed yet.
+` + `  ${color2.cyan("vc keys --init")}  makes one — no GitHub repository needed yet.
 
-` + color.dim(`  Committing a secret in the clear cannot be undone by a later commit;
+` + color2.dim(`  Committing a secret in the clear cannot be undone by a later commit;
   the value stays in the history and must be treated as burned.
 `));
     return 1;
@@ -257,7 +374,7 @@ ${color.red("✗ refusing the commit")}: ${bare.length} value${bare.length === 1
     const sealed = await encryptInto(root, publicKey, entry.name, entry.value);
     if (!sealed.ok) {
       console.error(`
-${color.red("✗ refusing the commit")}: ${sealed.error}
+${color2.red("✗ refusing the commit")}: ${sealed.error}
 `);
       return 1;
     }
@@ -265,7 +382,7 @@ ${color.red("✗ refusing the commit")}: ${sealed.error}
   const left = plaintextSecretNames(root);
   if (left.length > 0) {
     console.error(`
-${color.red("✗ refusing the commit")}: ${left.join(", ")} could not be encrypted.
+${color2.red("✗ refusing the commit")}: ${left.join(", ")} could not be encrypted.
 `);
     return 1;
   }
@@ -273,28 +390,81 @@ ${color.red("✗ refusing the commit")}: ${left.join(", ")} could not be encrypt
     const added = await run("git", ["add", "--", SECRETS_FILE], root);
     if (added.code !== 0) {
       console.error(`
-${color.red("✗ refusing the commit")}: ${SECRETS_FILE} was encrypted but could not be re-staged,
+${color2.red("✗ refusing the commit")}: ${SECRETS_FILE} was encrypted but could not be re-staged,
 ` + `  so the commit would still carry the plaintext you staged. \`git add ${SECRETS_FILE}\`.
 `);
       return 1;
     }
   }
   console.log(`
-${color.green("✓")} encrypted ${bare.length} value${bare.length === 1 ? "" : "s"} in ${SECRETS_FILE}${staged ? " and re-staged it" : ""}: ${bare.map((entry) => entry.name).join(", ")}
-` + color.dim(`  Encryption needs only the public key, so this needs no credential.
+${color2.green("✓")} encrypted ${bare.length} value${bare.length === 1 ? "" : "s"} in ${SECRETS_FILE}${staged ? " and re-staged it" : ""}: ${bare.map((entry) => entry.name).join(", ")}
+` + color2.dim(`  Encryption needs only the public key, so this needs no credential.
 `));
   return 0;
 }
+async function teardownCliCommand(args) {
+  const project = await findProject();
+  if (!project) {
+    console.error("vc: no voidcommerce.json here.");
+    return 1;
+  }
+  if (!args.includes("--cloudflare")) {
+    console.error("vc: teardown only knows how to undo a Cloudflare deploy. `vc teardown --cloudflare`.");
+    return 1;
+  }
+  const typed = args[args.indexOf("--confirm") + 1];
+  const confirmed = args.includes("--confirm") && typed === project.manifest.shop.domain;
+  if (args.includes("--confirm") && !confirmed) {
+    console.error(`
+vc: --confirm needs this shop's domain, exactly:
+
+` + `    vc teardown --cloudflare --confirm ${project.manifest.shop.domain}
+
+` + `  You typed ${typed ? `"${typed}"` : "nothing"}. Naming the shop is the check — it is
+` + `  what stops this running in the wrong directory.
+`);
+    return 1;
+  }
+  return teardownCloudflare(project, {
+    confirm: confirmed,
+    keepData: args.includes("--keep-data"),
+    dryRun: args.includes("--dry-run")
+  });
+}
+async function teardownHelp() {
+  const width = 80;
+  console.log(box("vc teardown", [
+    line("Destroy this shop's Cloudflare infrastructure, so the whole", width),
+    line("publish-to-live flow can be proved again from nothing.", width),
+    line("", width),
+    ...row("vc teardown --cloudflare --dry-run", "list what would be destroyed, touch nothing", width, 2),
+    ...row("vc teardown --cloudflare --confirm <domain>", "do it", width, 2),
+    ...row("--keep-data", "leave the D1 database alone", width, 2),
+    line("", width),
+    line(color2.bold("Read this first"), width),
+    line("D1 deletion has NO UNDO. Every order, customer and address in the", width),
+    line("database goes with it, and there is no snapshot unless you took one.", width),
+    line("", width),
+    line("So --confirm takes the shop's DOMAIN, not `y`: a `y` is muscle memory,", width),
+    line("and typing the domain is what stops this running in the wrong shop.", width),
+    line("", width),
+    line("It is idempotent — deleting what is already gone is success — and it", width),
+    line("clears the recorded database id, because `wrangler deploy` FAILS on a", width),
+    line("dangling id rather than making a new database. Secrets are untouched:", width),
+    line("this removes infrastructure, not configuration.", width)
+  ], width));
+  return 0;
+}
 
 // src/init.ts
 import * as p2 from "@clack/prompts";
 import { mkdir } from "node:fs/promises";
-import { basename, join as join2 } from "node:path";
-import color3 from "picocolors";
+import { basename, join as join3 } from "node:path";
+import color4 from "picocolors";
 
 // src/wizard.ts
 import * as p from "@clack/prompts";
-import color2 from "picocolors";
+import color3 from "picocolors";
 var bail = () => {
   p.cancel("Nothing was written.");
   process.exit(0);
@@ -316,8 +486,8 @@ async function askGroup(group2, previous, alsoRequired = []) {
   const required = group2.choices.filter((choice) => requiredIds.has(choice.id));
   const optional = group2.choices.filter((choice) => !requiredIds.has(choice.id));
   const message = group2.title + (group2.intro ? `
-${color2.dim(group2.intro)}` : "") + (required.length ? `
-${color2.dim(`Included: ${required.map((choice) => choice.label).join(", ")}`)}` : "");
+${color3.dim(group2.intro)}` : "") + (required.length ? `
+${color3.dim(`Included: ${required.map((choice) => choice.label).join(", ")}`)}` : "");
   if (optional.length === 0) {
     p.log.info(message);
     return required.map((choice) => choice.id);
@@ -348,7 +518,7 @@ async function runWizard(existing, layout) {
       validate: (value) => value.trim() ? undefined : "A shop has a name."
     }),
     domain: () => p.text({
-      message: `Domain ${color2.dim(monorepo ? "— the storefront; api.<domain> is the worker; the CORS list and DNS records derive from it" : "— the shop answers here; the worker's custom domain")}`,
+      message: `Domain ${color3.dim(monorepo ? "— the storefront; api.<domain> is the worker; the CORS list and DNS records derive from it" : "— the shop answers here; the worker's custom domain")}`,
       placeholder: "northwind.com",
       initialValue: existing?.shop.domain ?? "",
       validate: (value) => /^[a-z0-9-]+(\.[a-z0-9-]+)+\.[a-z]{2,}$|^[a-z0-9-]+\.[a-z]{2,}$/i.test(value.trim()) ? undefined : "A hostname, like northwind.com or shop.northwind.com."
@@ -359,7 +529,7 @@ async function runWizard(existing, layout) {
       if (!domain || domain === guess)
         return Promise.resolve(undefined);
       return p.text({
-        message: `DNS zone ${color2.dim(`— ${domain} lives inside it; records go here, and this zone must be on your DNS provider`)}`,
+        message: `DNS zone ${color3.dim(`— ${domain} lives inside it; records go here, and this zone must be on your DNS provider`)}`,
         placeholder: guess,
         initialValue: existing?.shop.zone ?? guess,
         validate: (value) => {
@@ -371,13 +541,13 @@ async function runWizard(existing, layout) {
       });
     },
     country: () => p.text({
-      message: `Country ${color2.dim("— sets the declared VAT rate and the default region")}`,
+      message: `Country ${color3.dim("— sets the declared VAT rate and the default region")}`,
       placeholder: "US",
       initialValue: existing?.shop.country ?? "",
       validate: (value) => /^[A-Za-z]{2}$/.test(value.trim()) ? undefined : "ISO-3166 alpha-2, like DK."
     }),
     taxRegistered: () => p.select({
-      message: `Registered to charge tax? ${color2.dim("— a business below its registration threshold must NOT add tax to a price, and one above it must")}`,
+      message: `Registered to charge tax? ${color3.dim("— a business below its registration threshold must NOT add tax to a price, and one above it must")}`,
       options: [
         { value: "no", label: "Not registered", hint: "prices are what the customer pays; no tax is added. The common case for a new shop" },
         { value: "yes", label: "Registered", hint: "the country's standard rate is declared and added" }
@@ -391,14 +561,14 @@ async function runWizard(existing, layout) {
       validate: (value) => /^[A-Za-z]{3}$/.test(value.trim()) ? undefined : "ISO-4217, like dkk."
     }),
     locale: () => p.text({
-      message: `Locale ${color2.dim("— the language of emails and launch content")}`,
+      message: `Locale ${color3.dim("— the language of emails and launch content")}`,
       placeholder: "en",
       initialValue: existing?.shop.locale ?? "",
       validate: (value) => /^[a-z]{2}(-[A-Z]{2})?$/.test(value.trim()) ? undefined : "like da, or en-GB."
     }),
     ...onPages ? {
       pagesHost: () => p.text({
-        message: `GitHub Pages host ${color2.dim("— where the storefront is published; leave blank if you serve the branch elsewhere")}`,
+        message: `GitHub Pages host ${color3.dim("— where the storefront is published; leave blank if you serve the branch elsewhere")}`,
         placeholder: "northwind.github.io",
         initialValue: existing?.shop.pagesHost ?? "",
         validate: (value) => !value.trim() || /^[a-z0-9-]+\.github\.io$/i.test(value.trim()) ? undefined : "<owner>.github.io, or blank"
@@ -409,7 +579,7 @@ async function runWizard(existing, layout) {
   for (const group2 of GROUPS) {
     if (group2.id === "ui" && layout === "strict") {
       p.log.info(`${group2.title}
-${color2.dim("The generated storefront and panel. Strict has no custom code to host anything else.")}`);
+${color3.dim("The generated storefront and panel. Strict has no custom code to host anything else.")}`);
       chosen[group2.id] = ["admin"];
       continue;
     }
@@ -434,14 +604,14 @@ ${color2.dim("The generated storefront and panel. Strict has no custom code to h
 }
 function summarise(manifest) {
   const lines = [
-    `${color2.dim("Layout".padEnd(34))} ${LAYOUTS.find((l) => l.id === manifest.layout)?.label ?? manifest.layout}`
+    `${color3.dim("Layout".padEnd(34))} ${LAYOUTS.find((l) => l.id === manifest.layout)?.label ?? manifest.layout}`
   ];
   for (const group2 of GROUPS) {
     const ids = manifest.chosen[group2.id] ?? [];
     if (ids.length === 0)
       continue;
     const labels = ids.map((id) => group2.choices.find((choice) => choice.id === id)?.label ?? id).join(", ");
-    lines.push(`${color2.dim(group2.title.padEnd(34))} ${labels}`);
+    lines.push(`${color3.dim(group2.title.padEnd(34))} ${labels}`);
   }
   return lines.join(`
 `);
@@ -482,10 +652,10 @@ async function init(args) {
   if (flags.voids.length > 0)
     return runVoid(["init", ...flags.voids]);
   let root = process.cwd();
-  p2.intro(color3.bgCyan(color3.black(" voidcommerce ")));
+  p2.intro(color4.bgCyan(color4.black(" voidcommerce ")));
   const existing = await readManifest(root);
   if (existing) {
-    p2.log.info(`Found ${color3.cyan("voidcommerce.json")} for ${color3.bold(existing.shop.name)} — answers are pre-filled; the layout (${existing.layout}) is fixed.`);
+    p2.log.info(`Found ${color4.cyan("voidcommerce.json")} for ${color4.bold(existing.shop.name)} — answers are pre-filled; the layout (${existing.layout}) is fixed.`);
     if (flags.layout && flags.layout !== existing.layout) {
       p2.log.error(`This shop is laid out as "${existing.layout}". The layout cannot change after init — moving files is not a regeneration.`);
       return 1;
@@ -493,10 +663,10 @@ async function init(args) {
   }
   const layout = existing?.layout ?? flags.layout ?? await askLayout();
   if (layout === "strict") {
-    p2.log.step(`Strict: the app will be generated under ${color3.cyan(".vc/app")} — nothing there is yours to edit.`);
+    p2.log.step(`Strict: the app will be generated under ${color4.cyan(".vc/app")} — nothing there is yours to edit.`);
   } else if (layout === "app") {
     if (!isVoidApp(root)) {
-      p2.log.step(`No Void app here yet — ${color3.cyan("void init")} first, then the shop.`);
+      p2.log.step(`No Void app here yet — ${color4.cyan("void init")} first, then the shop.`);
       const before = new Set(voidAppsIn(root));
       const code = await runVoid(["init"]);
       if (code !== 0)
@@ -509,7 +679,7 @@ async function init(args) {
         }
         root = created[0];
         process.chdir(root);
-        p2.log.step(`Continuing in ${color3.cyan(`${basename(root)}/`)}`);
+        p2.log.step(`Continuing in ${color4.cyan(`${basename(root)}/`)}`);
       }
     }
   } else {
@@ -518,11 +688,11 @@ async function init(args) {
       ["frontend", "the storefront — prerendered and served from the worker's own assets"]
     ];
     for (const [dir, starter] of parts) {
-      const target = join2(root, dir);
+      const target = join3(root, dir);
       if (isVoidApp(target))
         continue;
       await mkdir(target, { recursive: true });
-      p2.log.step(`${color3.cyan("void init")} in ${color3.cyan(`${dir}/`)} — choose ${starter}.`);
+      p2.log.step(`${color4.cyan("void init")} in ${color4.cyan(`${dir}/`)} — choose ${starter}.`);
       const code = await runVoid(["init"], target);
       if (code !== 0)
         return code;
@@ -540,7 +710,7 @@ async function init(args) {
   if (problems.length > 0) {
     p2.log.error("These answers contradict each other:");
     for (const problem of problems)
-      p2.log.message(`  ${color3.red("✗")} ${problem}`);
+      p2.log.message(`  ${color4.red("✗")} ${problem}`);
     p2.cancel("Nothing was written.");
     return 1;
   }
@@ -556,16 +726,16 @@ async function init(args) {
   spinner2.stop("Generated");
   const { secrets, plaintext } = envSummary(manifest);
   p2.note([
-    ...result.written.map((file) => `${color3.green("+")} ${file}`),
-    ...result.kept.map((file) => `${color3.dim("=")} ${file} ${color3.dim("(kept — yours)")}`),
-    ...result.retired.map((file) => `${color3.red("-")} ${file} ${color3.dim("(retired — no longer generated)")}`)
+    ...result.written.map((file) => `${color4.green("+")} ${file}`),
+    ...result.kept.map((file) => `${color4.dim("=")} ${file} ${color4.dim("(kept — yours)")}`),
+    ...result.retired.map((file) => `${color4.red("-")} ${file} ${color4.dim("(retired — no longer generated)")}`)
   ].join(`
 `), "Files");
   p2.note([
-    `${color3.bold(String(secrets.length))} secrets  ${color3.dim("→ wrangler secret put <NAME>")}`,
+    `${color4.bold(String(secrets.length))} secrets  ${color4.dim("→ wrangler secret put <NAME>")}`,
     ...secrets.map((key) => `  ${key}`),
     "",
-    `${color3.bold(String(plaintext.length))} plaintext ${color3.dim("→ .env.production, already written")}`,
+    `${color4.bold(String(plaintext.length))} plaintext ${color4.dim("→ .env.production, already written")}`,
     ...plaintext.map((key) => `  ${key}`)
   ].join(`
 `), "Before going live");
@@ -575,21 +745,21 @@ async function init(args) {
       return code;
   }
   const next = layout === "app" ? [
-    `  ${color3.cyan("bun install")}`,
-    `  ${color3.cyan("bun run maildev")}      ${color3.dim("local inbox at http://localhost:1080")}`,
-    `  ${color3.cyan("vc dev")}`,
-    `  ${color3.cyan("vc preflight")}        ${color3.dim("what is still missing, and why it matters")}`
+    `  ${color4.cyan("bun install")}`,
+    `  ${color4.cyan("bun run maildev")}      ${color4.dim("local inbox at http://localhost:1080")}`,
+    `  ${color4.cyan("vc dev")}`,
+    `  ${color4.cyan("vc preflight")}        ${color4.dim("what is still missing, and why it matters")}`
   ] : layout === "strict" ? [
-    `  ${color3.cyan("bun install")}`,
-    `  ${color3.cyan("vc generate")}         ${color3.dim("the app under .vc/app, void's artifacts, the migrations")}`,
-    `  ${color3.cyan("bun run maildev")}      ${color3.dim("local inbox at http://localhost:1080")}`,
-    `  ${color3.cyan("vc dev")}               ${color3.dim("runs in .vc/app")}`
+    `  ${color4.cyan("bun install")}`,
+    `  ${color4.cyan("vc generate")}         ${color4.dim("the app under .vc/app, void's artifacts, the migrations")}`,
+    `  ${color4.cyan("bun run maildev")}      ${color4.dim("local inbox at http://localhost:1080")}`,
+    `  ${color4.cyan("vc dev")}               ${color4.dim("runs in .vc/app")}`
   ] : [
-    `  ${color3.cyan("bun install")}          ${color3.dim("one install for both workspaces")}`,
-    `  ${color3.cyan("bun run maildev")}      ${color3.dim("local inbox at http://localhost:1080")}`,
-    `  ${color3.cyan("bun run dev:api")}      ${color3.dim("the worker, with the panel")}`,
-    `  ${color3.cyan("bun run dev:frontend")} ${color3.dim("the storefront, against the local API")}`,
-    `  ${color3.cyan("bun run preflight")}    ${color3.dim("what is still missing, and why it matters")}`
+    `  ${color4.cyan("bun install")}          ${color4.dim("one install for both workspaces")}`,
+    `  ${color4.cyan("bun run maildev")}      ${color4.dim("local inbox at http://localhost:1080")}`,
+    `  ${color4.cyan("bun run dev:api")}      ${color4.dim("the worker, with the panel")}`,
+    `  ${color4.cyan("bun run dev:frontend")} ${color4.dim("the storefront, against the local API")}`,
+    `  ${color4.cyan("bun run preflight")}    ${color4.dim("what is still missing, and why it matters")}`
   ];
   p2.outro(["Next:", ...next].join(`
 `));
@@ -598,7 +768,7 @@ async function init(args) {
 
 // src/regenerate.ts
 import * as p3 from "@clack/prompts";
-import color4 from "picocolors";
+import color5 from "picocolors";
 async function generateCommand() {
   const project = await findProject();
   if (!project) {
@@ -614,9 +784,9 @@ async function generateCommand() {
   }
   const result = await generate(project.root, project.manifest);
   p3.log.step([
-    ...result.written.map((file) => `${color4.green("+")} ${file}`),
-    ...result.kept.map((file) => `${color4.dim("=")} ${file} ${color4.dim("(kept)")}`),
-    ...result.retired.map((file) => `${color4.red("-")} ${file} ${color4.dim("(retired — no longer generated)")}`)
+    ...result.written.map((file) => `${color5.green("+")} ${file}`),
+    ...result.kept.map((file) => `${color5.dim("=")} ${file} ${color5.dim("(kept)")}`),
+    ...result.retired.map((file) => `${color5.red("-")} ${file} ${color5.dim("(retired — no longer generated)")}`)
   ].join(`
 `));
   return project.manifest.layout === "strict" ? finishStrict(project.root) : 0;
@@ -635,8 +805,8 @@ async function generateHelp() {
 }
 
 // src/scripts.ts
-import { existsSync as existsSync2, readFileSync } from "node:fs";
-import { join as join3, relative } from "node:path";
+import { existsSync as existsSync3, readFileSync as readFileSync2 } from "node:fs";
+import { join as join4, relative } from "node:path";
 function appScript(name) {
   return async (args) => {
     const project = await findProject();
@@ -645,8 +815,8 @@ function appScript(name) {
     const code = await ensureGenerated(project);
     if (code !== 0)
       return code;
-    const pkgPath = join3(project.appDir, "package.json");
-    const scripts = existsSync2(pkgPath) ? JSON.parse(readFileSync(pkgPath, "utf8")).scripts ?? {} : {};
+    const pkgPath = join4(project.appDir, "package.json");
+    const scripts = existsSync3(pkgPath) ? JSON.parse(readFileSync2(pkgPath, "utf8")).scripts ?? {} : {};
     if (!scripts[name]) {
       console.error(`vc: ${relative(process.cwd(), pkgPath) || "package.json"} has no "${name}" script — void init writes one.`);
       return 1;
@@ -681,6 +851,7 @@ var EXTENDED = {
   preflight: { run: preflightCommand, help: preflightHelp },
   secrets: { run: secretsCliCommand, help: secretsHelp },
   keys: { run: keysCliCommand, help: keysHelp },
+  teardown: { run: teardownCliCommand, help: teardownHelp },
   guard: { run: guardCommand, help: async () => guardCommand() },
   dev: { run: appScript("dev"), help: appScriptHelp("dev") },
   build: { run: appScript("build"), help: appScriptHelp("build") },

package/dist/deploy/index.d.ts

@@ -43,3 +43,12 @@ export declare function keysHelp(): Promise<number>;
  * Exit code is the whole interface — a hook cares about nothing else.
  */
 export declare function guardCommand(): Promise<number>;
+/**
+ * `vc teardown` — destroy this shop's Cloudflare infrastructure.
+ *
+ * The confirmation is the shop's DOMAIN, not `y`. A `y` is muscle memory;
+ * typing `devprints.saastemly.com` is not, and this deletes a database that
+ * has no undo.
+ */
+export declare function teardownCliCommand(args: string[]): Promise<number>;
+export declare function teardownHelp(): Promise<number>;