@saastemly/voidcommerce 0.8.0 → 0.10.0

package/dist/cli.js

@@ -21,7 +21,7 @@ import {
   runVoid,
   version,
   voidAppsIn
-} from "./index-y6qzjd9h.js";
+} from "./index-mb1p1rh0.js";
 import {
   LOCAL_KEY_FILE,
   PRIVATE_KEY_VAR,
@@ -50,7 +50,7 @@ import {
   setVariable,
   variableNames,
   verifyCloudflareToken
-} from "./index-j5xjh6qp.js";
+} from "./index-vhsq8jpy.js";
 import {
   LAYOUTS,
   oneOrigin,

package/dist/generate/frontend.d.ts

@@ -23,7 +23,7 @@ export declare const FRONTEND_BRANCH = "frontend-static";
 export declare function renderFrontendApiTs(manifest: Manifest): string;
 export declare function renderFrontendEnvProduction(manifest: Manifest): string;
 /** The Vite config for a static Void site. Deliberately small: this is yours. */
-export declare function renderFrontendViteConfig(): string;
+export declare function renderFrontendViteConfig(manifest: Manifest): string;
 /**
  * `target: node` because Void 0.10.13's Cloudflare prerender calls miniflare
  * with the single-worker shorthand that the miniflare its own dependencies

package/dist/{index-y6qzjd9h.js → index-mb1p1rh0.js}

@@ -9,7 +9,7 @@ import {
   renderEnvLocal,
   renderEnvProduction,
   renderEnvTs
-} from "./index-j5xjh6qp.js";
+} from "./index-vhsq8jpy.js";
 import {
   MANIFEST_FILE,
   has,
@@ -422,7 +422,33 @@ function renderFrontendEnvProduction(manifest) {
 VITE_API_ORIGIN=https://api.${manifest.shop.domain}
 `;
 }
-function renderFrontendViteConfig() {
+function renderFrontendViteConfig(manifest) {
+  if (oneOrigin(manifest.layout)) {
+    return `import { defineConfig } from "vite";
+import { voidPlugin } from "void";
+import { voidReact } from "@void/react/plugin";
+
+/**
+ * The storefront.
+ *
+ * In production one worker serves this page and the API it calls, so the
+ * client uses relative URLs and there is nothing to configure. In DEV they
+ * are two processes on two ports, and a relative /api call would hit this
+ * dev server instead of the worker — so it is proxied. Without this, local
+ * development is the only place the shop is broken.
+ *
+ * Start the worker first: it takes 5173, and this lands on the next port.
+ */
+export default defineConfig({
+  plugins: [voidPlugin(), voidReact()],
+  server: {
+    proxy: {
+      "/api": { target: "http://127.0.0.1:5173", changeOrigin: false },
+    },
+  },
+});
+`;
+  }
   return `import { defineConfig } from "vite";
 import { voidPlugin } from "void";
 import { voidReact } from "@void/react/plugin";
@@ -1344,7 +1370,7 @@ import color from "picocolors";
 // package.json
 var package_default = {
   name: "@saastemly/voidcommerce",
-  version: "0.8.0",
+  version: "0.10.0",
   description: "Void, with a shop in it. `vc init` walks you through Better Auth, betterCommerce and every plugin; everything else passes through to `void`.",
   type: "module",
   license: "MIT",
@@ -2293,6 +2319,39 @@ async function exists(path) {
     return false;
   }
 }
+async function putEnv(root, file, rendered, result) {
+  const path = join4(root, file);
+  if (!await exists(path)) {
+    await mkdir2(dirname2(path), { recursive: true });
+    await writeFile2(path, rendered, "utf8");
+    result.written.push(file);
+    return;
+  }
+  const read = (text) => {
+    const out = new Map;
+    for (const line2 of text.split(`
+`)) {
+      const match = /^\s*([A-Z][A-Z0-9_]*)\s*=\s*(.*)$/.exec(line2);
+      if (match)
+        out.set(match[1], match[2]);
+    }
+    return out;
+  };
+  const existing = read(await readFile2(path, "utf8"));
+  const wanted = read(rendered);
+  const merged = rendered.split(`
+`).map((line2) => {
+    const match = /^\s*([A-Z][A-Z0-9_]*)\s*=\s*(.*)$/.exec(line2);
+    if (!match)
+      return line2;
+    const had = existing.get(match[1]);
+    return had !== undefined && had !== "" && had !== "unset" ? `${match[1]}=${had}` : line2;
+  }).join(`
+`);
+  const dropped = [...existing.keys()].filter((key) => !wanted.has(key) && !key.startsWith("VITE_"));
+  await writeFile2(path, merged, "utf8");
+  result.written.push(dropped.length > 0 ? `${file} ${`(dropped ${dropped.join(", ")})`}` : file);
+}
 async function put(root, file, content, result, mode) {
   const path = join4(root, file);
   if (mode === "own" && await exists(path)) {
@@ -2364,7 +2423,7 @@ async function generateApi(root, dir, manifest, result, opts) {
   await put(root, at(".env.production"), renderEnvProduction(manifest), result, "regenerate");
   await put(root, at("lib/deploy/requirements.ts"), renderRequirementsTs(manifest), result, "regenerate");
   if (opts.env)
-    await put(root, at(".env"), renderEnvLocal(manifest), result, "own");
+    await putEnv(root, at(".env"), renderEnvLocal(manifest), result);
   await put(root, at("lib/domain.ts"), renderDomainTs(manifest.layout), result, own);
   await put(root, at("lib/payment.ts"), renderPaymentTs(manifest), result, own);
   await put(root, at("lib/notifications.ts"), renderNotificationsTs(), result, own);
@@ -2424,7 +2483,7 @@ async function generateFrontend(root, dir, manifest, result) {
   const at = (file) => join4(dir, file);
   await put(root, at("lib/api.ts"), renderFrontendApiTs(manifest), result, "own");
   await put(root, at(".env.production"), renderFrontendEnvProduction(manifest), result, "regenerate");
-  await put(root, at("vite.config.ts"), renderFrontendViteConfig(), result, "own");
+  await put(root, at("vite.config.ts"), renderFrontendViteConfig(manifest), result, "own");
   await put(root, at("void.json"), renderFrontendVoidJson(), result, "own");
   await put(root, at("tsconfig.json"), renderFrontendTsconfig(), result, "own");
   await put(root, at("pages/index.tsx"), renderStorefrontPage(manifest), result, "own");
@@ -2517,7 +2576,7 @@ bunx vc guard
   await put(root, ".github/workflows/deploy.yml", renderDistWorkflow(manifest), result, "regenerate");
   await retire(root, ".github/workflows/void-dist.yml", result);
   await put(root, "DEPLOY.md", renderDeployReadme(manifest, zone(manifest), workerHosts(manifest)), result, "regenerate");
-  await put(root, ".env", renderEnvLocal(manifest), result, "own");
+  await putEnv(root, ".env", renderEnvLocal(manifest), result);
   await put(root, "data/README.md", DATA_README, result, "own");
   await put(root, "branding/README.md", BRANDING_README, result, "own");
   await put(root, "migrations/README.md", MIGRATIONS_README, result, "own");
@@ -3372,4 +3431,4 @@ async function importHelp() {
   return 0;
 }
 
-export { renderAuthTs, FRONTEND_BRANCH, renderFrontendApiTs, renderFrontendEnvProduction, renderStorefrontPage, renderFrontendWorkflow, runVoid, runInherit, captureVoid, isVoidApp, voidAppsIn, STRICT_APP, VOID_VERSION, strictDependencies, renderVoidPatch, renderViteConfig, renderStrictTsconfig, renderVoidJson, renderDbSchema, renderDbSeed, renderLayoutTsx, renderAppCss, renderIndexServer, INDEX_PAGE, renderDashboardPage, CLIENT_ONLY, renderSignInPage, renderAuthClient, renderContentTs, renderCron, renderQueue, renderLiveStream, renderLiveRoute, renderStrictAppPackageJson, DATA_README, BRANDING_README, MIGRATIONS_README, finishStrict, line, row, box, fullHelp, initHelp, version, findProject, ensureGenerated, DIST_DIR, DIST_BRANCH, distCommand, distHelp, renderDistWorkflow, renderDeployReadme, renderRequirementsTs, renderDomainTs, generate, parseJsonc, upsertJsonc, findWrangler, parseWhoAmI, productionEnv, routeProblem, preflight, printPreflight, deployCloudflare, importCommand, importHelp };
+export { renderAuthTs, FRONTEND_BRANCH, renderFrontendApiTs, renderFrontendEnvProduction, renderFrontendViteConfig, renderStorefrontPage, renderFrontendWorkflow, runVoid, runInherit, captureVoid, isVoidApp, voidAppsIn, STRICT_APP, VOID_VERSION, strictDependencies, renderVoidPatch, renderViteConfig, renderStrictTsconfig, renderVoidJson, renderDbSchema, renderDbSeed, renderLayoutTsx, renderAppCss, renderIndexServer, INDEX_PAGE, renderDashboardPage, CLIENT_ONLY, renderSignInPage, renderAuthClient, renderContentTs, renderCron, renderQueue, renderLiveStream, renderLiveRoute, renderStrictAppPackageJson, DATA_README, BRANDING_README, MIGRATIONS_README, finishStrict, line, row, box, fullHelp, initHelp, version, findProject, ensureGenerated, DIST_DIR, DIST_BRANCH, distCommand, distHelp, renderDistWorkflow, renderDeployReadme, renderRequirementsTs, renderDomainTs, generate, parseJsonc, upsertJsonc, findWrangler, parseWhoAmI, productionEnv, routeProblem, preflight, printPreflight, deployCloudflare, importCommand, importHelp };

package/dist/{index-j5xjh6qp.js → index-vhsq8jpy.js}

@@ -2,6 +2,7 @@ import {
   envKeysOf,
   hasFrontend,
   isApex,
+  oneOrigin,
   zone
 } from "./index-tjy6yygc.js";
 import {
@@ -247,7 +248,7 @@ function renderEnvLocal(manifest) {
     "# Local development. Gitignored; .env.example documents every key.",
     "",
     ...keys.map((key) => `${key.key}=${local[key.key] ?? key.dev ?? "unset"}`),
-    ...hasFrontend(manifest.layout) ? ["", "# The storefront, reaching the worker. Start the worker first.", "VITE_API_ORIGIN=http://localhost:5173"] : [],
+    ...hasFrontend(manifest.layout) && !oneOrigin(manifest.layout) ? ["", "# The storefront, reaching the worker. Start the worker first.", "VITE_API_ORIGIN=http://localhost:5173"] : [],
     ""
   ].join(`
 `);
@@ -384,7 +385,7 @@ async function decryptSecrets(project) {
   }
   const expected = committedPublicKey(root);
   if (expected) {
-    const { publicKeyFor } = await import("./keys-3zjezaxk.js");
+    const { publicKeyFor } = await import("./keys-2q3qzntw.js");
     const derived = await publicKeyFor(privateKey);
     if (derived && derived.toLowerCase() !== expected.toLowerCase()) {
       return {
@@ -432,7 +433,7 @@ async function secretsCommand(project, args) {
   if (args[0] === "set")
     return setSecretValue(project, args.slice(1));
   if (args.includes("--sync"))
-    return syncSecrets(project);
+    return syncSecrets(project, args.includes("--prune"));
   if (!existsSync2(join2(root, SECRETS_FILE))) {
     console.log(`
 ${color.yellow("No " + SECRETS_FILE + " yet.")} Secrets are set by hand with \`wrangler secret put\`,
@@ -625,7 +626,7 @@ function upsertLine(path, name, value) {
 `)}${name}=${value}
 `);
 }
-async function syncSecrets(project) {
+async function syncSecrets(project, prune) {
   const root = project.root;
   const path = join2(root, SECRETS_FILE);
   if (!existsSync2(path)) {
@@ -656,13 +657,39 @@ ${color.green("+")} ${missing.length} key${missing.length === 1 ? "" : "s"} adde
 ${color.green("✓")} every secret this shop needs is already declared.
 `);
   }
-  if (extra.length > 0) {
+  if (extra.length > 0 && prune) {
+    const body = readFileSync(path, "utf8");
+    const kept = [];
+    const lines = body.split(`
+`);
+    for (let i = 0;i < lines.length; i++) {
+      const match = /^\s*([A-Z][A-Z0-9_]*)\s*=/.exec(lines[i] ?? "");
+      if (match && extra.includes(match[1])) {
+        while (kept.length > 0 && (kept[kept.length - 1].startsWith("#") || kept[kept.length - 1].trim() === ""))
+          kept.pop();
+        if (lines[i + 1]?.trim() === "")
+          i++;
+        continue;
+      }
+      kept.push(lines[i]);
+    }
+    writeFileSync(path, `${kept.join(`
+`).replace(/\n{3,}/g, `
+
+`).replace(/\n*$/, "")}
+`);
+    console.log(`${color.red("-")} ${extra.length} key${extra.length === 1 ? "" : "s"} removed from ${SECRETS_FILE}: ${extra.join(", ")}
+
+` + color.dim(`  Their ciphertext is still in git history, so nothing is unrecoverable —
+  but nothing in this shop reads them any more.
+`));
+  } else if (extra.length > 0) {
     console.log(`${color.yellow("!")} ${extra.length} declared key${extra.length === 1 ? " is" : "s are"} no longer required by this shop:
     ${extra.join(`
     `)}
 
-` + color.dim(`  Left alone — they cost nothing, and deleting a value you may still want
-  is not this command's call. Remove them by hand when you are sure.
+` + color.dim(`  Left alone: deleting a value you may still want is not this command's
+  call to make by default. \`vc secrets --sync --prune\` makes it.
 `));
   }
   return 0;

package/dist/index.d.ts

@@ -18,7 +18,7 @@ export { parseJsonc, upsertJsonc } from "./deploy/jsonc";
 export { parseWhoAmI, findWrangler } from "./deploy/wrangler";
 export { preflight, printPreflight, productionEnv, routeProblem } from "./deploy/preflight";
 export { deployCloudflare } from "./deploy/cloudflare";
-export { FRONTEND_BRANCH, renderFrontendApiTs, renderFrontendEnvProduction, renderFrontendWorkflow, renderStorefrontPage, } from "./generate/frontend";
+export { FRONTEND_BRANCH, renderFrontendViteConfig, renderFrontendApiTs, renderFrontendEnvProduction, renderFrontendWorkflow, renderStorefrontPage, } from "./generate/frontend";
 export { distCommand, DIST_BRANCH, DIST_DIR } from "./dist";
 export { renderDistWorkflow, renderDeployReadme } from "./generate/ci";
 export { importCommand } from "./import";

package/dist/index.js

@@ -34,6 +34,7 @@ import {
   renderDomainTs,
   renderFrontendApiTs,
   renderFrontendEnvProduction,
+  renderFrontendViteConfig,
   renderFrontendWorkflow,
   renderIndexServer,
   renderLayoutTsx,
@@ -51,7 +52,7 @@ import {
   routeProblem,
   strictDependencies,
   upsertJsonc
-} from "./index-y6qzjd9h.js";
+} from "./index-mb1p1rh0.js";
 import {
   allEnvKeys,
   envSummary,
@@ -59,7 +60,7 @@ import {
   renderEnvLocal,
   renderEnvProduction,
   renderEnvTs
-} from "./index-j5xjh6qp.js";
+} from "./index-vhsq8jpy.js";
 import {
   LAYOUTS,
   MANIFEST_FILE,
@@ -124,6 +125,7 @@ export {
   renderLayoutTsx,
   renderIndexServer,
   renderFrontendWorkflow,
+  renderFrontendViteConfig,
   renderFrontendEnvProduction,
   renderFrontendApiTs,
   renderEnvTs,

package/dist/{keys-3zjezaxk.js → keys-2q3qzntw.js}

@@ -8,7 +8,7 @@ import {
   localPrivateKey,
   provisionKey,
   publicKeyFor
-} from "./index-j5xjh6qp.js";
+} from "./index-vhsq8jpy.js";
 import"./index-tjy6yygc.js";
 import"./index-mnb7fz2t.js";
 import"./index-0v6na3yp.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@saastemly/voidcommerce",
-  "version": "0.8.0",
+  "version": "0.10.0",
   "description": "Void, with a shop in it. `vc init` walks you through Better Auth, betterCommerce and every plugin; everything else passes through to `void`.",
   "type": "module",
   "license": "MIT",

package/src/deploy/secrets.ts

@@ -250,7 +250,7 @@ export async function secretsCommand(project: Project, args: string[]): Promise<
 
 	if (args.includes("--init")) return initSecrets(project);
 	if (args[0] === "set") return setSecretValue(project, args.slice(1));
-	if (args.includes("--sync")) return syncSecrets(project);
+	if (args.includes("--sync")) return syncSecrets(project, args.includes("--prune"));
 
 	if (!existsSync(join(root, SECRETS_FILE))) {
 		console.log(
@@ -482,7 +482,7 @@ function upsertLine(path: string, name: string, value: string): void {
  * claims — the value may still be wanted, and it is not this command's to
  * destroy. Extras are reported instead.
  */
-async function syncSecrets(project: Project): Promise<number> {
+async function syncSecrets(project: Project, prune: boolean): Promise<number> {
 	const root = project.root;
 	const path = join(root, SECRETS_FILE);
 	if (!existsSync(path)) {
@@ -505,11 +505,33 @@ async function syncSecrets(project: Project): Promise<number> {
 		console.log(`\n${color.green("✓")} every secret this shop needs is already declared.\n`);
 	}
 
-	if (extra.length > 0) {
+	if (extra.length > 0 && prune) {
+		// Deleting a value is the operator's call, and --prune is them making
+		// it. The whole entry goes — its comment line too — so the file reads
+		// as though the key was never required.
+		const body = readFileSync(path, "utf8");
+		const kept: string[] = [];
+		const lines = body.split("\n");
+		for (let i = 0; i < lines.length; i++) {
+			const match = /^\s*([A-Z][A-Z0-9_]*)\s*=/.exec(lines[i] ?? "");
+			if (match && extra.includes(match[1]!)) {
+				// Drop the comment that introduces it, and the blank line after.
+				while (kept.length > 0 && (kept[kept.length - 1]!.startsWith("#") || kept[kept.length - 1]!.trim() === "")) kept.pop();
+				if (lines[i + 1]?.trim() === "") i++;
+				continue;
+			}
+			kept.push(lines[i]!);
+		}
+		writeFileSync(path, `${kept.join("\n").replace(/\n{3,}/g, "\n\n").replace(/\n*$/, "")}\n`);
+		console.log(
+			`${color.red("-")} ${extra.length} key${extra.length === 1 ? "" : "s"} removed from ${SECRETS_FILE}: ${extra.join(", ")}\n\n` +
+				color.dim(`  Their ciphertext is still in git history, so nothing is unrecoverable —\n  but nothing in this shop reads them any more.\n`),
+		);
+	} else if (extra.length > 0) {
 		console.log(
 			`${color.yellow("!")} ${extra.length} declared key${extra.length === 1 ? " is" : "s are"} no longer required by this shop:\n` +
 				`    ${extra.join("\n    ")}\n\n` +
-				color.dim("  Left alone — they cost nothing, and deleting a value you may still want\n  is not this command's call. Remove them by hand when you are sure.\n"),
+				color.dim(`  Left alone: deleting a value you may still want is not this command's\n  call to make by default. \`vc secrets --sync --prune\` makes it.\n`),
 		);
 	}
 	return 0;

package/src/generate/env.ts

@@ -1,5 +1,5 @@
 import { type EnvKey } from "../catalog";
-import { type Manifest, envKeysOf, has, hasFrontend, isApex, zone } from "../manifest";
+import { type Manifest, envKeysOf, has, hasFrontend, isApex, zone , oneOrigin} from "../manifest";
 
 /**
  * `env.ts`, `.env.example` and `.env.production` — from the manifest.
@@ -123,7 +123,10 @@ export function renderEnvLocal(manifest: Manifest): string {
 		// One file for both halves in a strict repo, where the storefront and
 		// the worker share a root. The worker takes 5173 because it is started
 		// first; the storefront lands on the next free port and calls back here.
-		...(hasFrontend(manifest.layout)
+		// Only a monorepo bakes the API's address in. Where one worker serves
+		// both, the client uses relative URLs and dev proxies /api instead —
+		// so a VITE_API_ORIGIN here would be read by nothing.
+		...(hasFrontend(manifest.layout) && !oneOrigin(manifest.layout)
 			? ["", "# The storefront, reaching the worker. Start the worker first.", "VITE_API_ORIGIN=http://localhost:5173"]
 			: []),
 		"",

package/src/generate/frontend.ts

@@ -74,7 +74,33 @@ VITE_API_ORIGIN=https://api.${manifest.shop.domain}
 }
 
 /** The Vite config for a static Void site. Deliberately small: this is yours. */
-export function renderFrontendViteConfig(): string {
+export function renderFrontendViteConfig(manifest: Manifest): string {
+	if (oneOrigin(manifest.layout)) {
+		return `import { defineConfig } from "vite";
+import { voidPlugin } from "void";
+import { voidReact } from "@void/react/plugin";
+
+/**
+ * The storefront.
+ *
+ * In production one worker serves this page and the API it calls, so the
+ * client uses relative URLs and there is nothing to configure. In DEV they
+ * are two processes on two ports, and a relative /api call would hit this
+ * dev server instead of the worker — so it is proxied. Without this, local
+ * development is the only place the shop is broken.
+ *
+ * Start the worker first: it takes 5173, and this lands on the next port.
+ */
+export default defineConfig({
+  plugins: [voidPlugin(), voidReact()],
+  server: {
+    proxy: {
+      "/api": { target: "http://127.0.0.1:5173", changeOrigin: false },
+    },
+  },
+});
+`;
+	}
 	return `import { defineConfig } from "vite";
 import { voidPlugin } from "void";
 import { voidReact } from "@void/react/plugin";

package/src/generate/index.ts

@@ -89,6 +89,57 @@ async function exists(path: string): Promise<boolean> {
 	}
 }
 
+/**
+ * Write a dotenv file that RECONCILES rather than freezes.
+ *
+ * `.env` used to be written once and never touched, so a shop that swapped a
+ * carrier or a payment rail kept the old keys forever and never gained the
+ * new ones. devprints ended up carrying five Adyen keys and a Resend key for
+ * a shop that uses neither, while missing two it needed. That is the same
+ * owned-file drift that shipped a `.gitignore` without `.env.keys` and an
+ * api.ts pointing at another shop's domain.
+ *
+ * So: the template decides which keys EXIST, and the file on disk decides
+ * what they are SET TO. A value a person put there is always kept; a key the
+ * manifest no longer declares goes, and is reported rather than vanishing.
+ */
+async function putEnv(root: string, file: string, rendered: string, result: GenerateResult) {
+	const path = join(root, file);
+	if (!(await exists(path))) {
+		await mkdir(dirname(path), { recursive: true });
+		await writeFile(path, rendered, "utf8");
+		result.written.push(file);
+		return;
+	}
+
+	const read = (text: string): Map<string, string> => {
+		const out = new Map<string, string>();
+		for (const line of text.split("\n")) {
+			const match = /^\s*([A-Z][A-Z0-9_]*)\s*=\s*(.*)$/.exec(line);
+			if (match) out.set(match[1]!, match[2]!);
+		}
+		return out;
+	};
+	const existing = read(await readFile(path, "utf8"));
+	const wanted = read(rendered);
+
+	const merged = rendered
+		.split("\n")
+		.map((line) => {
+			const match = /^\s*([A-Z][A-Z0-9_]*)\s*=\s*(.*)$/.exec(line);
+			if (!match) return line;
+			const had = existing.get(match[1]!);
+			// A real value the operator set beats the template's placeholder.
+			// `unset` and empty are placeholders, not answers.
+			return had !== undefined && had !== "" && had !== "unset" ? `${match[1]}=${had}` : line;
+		})
+		.join("\n");
+
+	const dropped = [...existing.keys()].filter((key) => !wanted.has(key) && !key.startsWith("VITE_"));
+	await writeFile(path, merged, "utf8");
+	result.written.push(dropped.length > 0 ? `${file} ${`(dropped ${dropped.join(", ")})`}` : file);
+}
+
 async function put(root: string, file: string, content: string, result: GenerateResult, mode: "regenerate" | "own") {
 	const path = join(root, file);
 	if (mode === "own" && (await exists(path))) {
@@ -182,7 +233,7 @@ async function generateApi(root: string, dir: string, manifest: Manifest, result
 	await put(root, at(".env.production"), renderEnvProduction(manifest), result, "regenerate");
 	await put(root, at("lib/deploy/requirements.ts"), renderRequirementsTs(manifest), result, "regenerate");
 
-	if (opts.env) await put(root, at(".env"), renderEnvLocal(manifest), result, "own");
+	if (opts.env) await putEnv(root, at(".env"), renderEnvLocal(manifest), result);
 	await put(root, at("lib/domain.ts"), renderDomainTs(manifest.layout), result, own);
 	await put(root, at("lib/payment.ts"), renderPaymentTs(manifest), result, own);
 	await put(root, at("lib/notifications.ts"), renderNotificationsTs(), result, own);
@@ -263,7 +314,7 @@ async function generateFrontend(root: string, dir: string, manifest: Manifest, r
 
 	await put(root, at("lib/api.ts"), renderFrontendApiTs(manifest), result, "own");
 	await put(root, at(".env.production"), renderFrontendEnvProduction(manifest), result, "regenerate");
-	await put(root, at("vite.config.ts"), renderFrontendViteConfig(), result, "own");
+	await put(root, at("vite.config.ts"), renderFrontendViteConfig(manifest), result, "own");
 	await put(root, at("void.json"), renderFrontendVoidJson(), result, "own");
 	await put(root, at("tsconfig.json"), renderFrontendTsconfig(), result, "own");
 	await put(root, at("pages/index.tsx"), renderStorefrontPage(manifest), result, "own");
@@ -395,7 +446,7 @@ bunx vc guard
 	// build. Two workflows on the same push would deploy the shop twice.
 	await retire(root, ".github/workflows/void-dist.yml", result);
 	await put(root, "DEPLOY.md", renderDeployReadme(manifest, zone(manifest), workerHosts(manifest)), result, "regenerate");
-	await put(root, ".env", renderEnvLocal(manifest), result, "own");
+	await putEnv(root, ".env", renderEnvLocal(manifest), result);
 	await put(root, "data/README.md", DATA_README, result, "own");
 	await put(root, "branding/README.md", BRANDING_README, result, "own");
 	await put(root, "migrations/README.md", MIGRATIONS_README, result, "own");

package/src/index.ts

@@ -27,6 +27,7 @@ export { preflight, printPreflight, productionEnv, routeProblem } from "./deploy
 export { deployCloudflare } from "./deploy/cloudflare";
 export {
 	FRONTEND_BRANCH,
+	renderFrontendViteConfig,
 	renderFrontendApiTs,
 	renderFrontendEnvProduction,
 	renderFrontendWorkflow,