@we8/cloudflare 0.1.0

package/README.md

@@ -0,0 +1,57 @@
+# @we8/cloudflare
+
+The Cloudflare pack for a we8 CMS project. Three things, and only three:
+
+- **A real email sender.** `cloudflareEmailSender` plugs into the CMS email
+  seam and sends over Cloudflare Email Service. It is off until a site sets
+  `EMAIL_MODE=cloudflare`, binds `send_email` as `EMAIL`, and sets
+  `EMAIL_FROM`; short of all three it declines and the CMS keeps its own
+  behaviour, so installing the pack never changes how a site works. Sending
+  never throws: mail from a CMS is always a side effect of something that
+  already succeeded.
+- **The wrangler config generator.** `generateWranglerConfig(answers)` returns
+  the `wrangler.jsonc` a project deploys with, shaped after the CMS package's
+  own config. `create-we8` writes a new project's config with it.
+- **The `we8-cloudflare` CLI.** `doctor` says what is missing and the exact
+  command that fixes it; `migrate` applies the migrations that ship inside
+  `@we8/cms`; `seed` loads the development seed into the local database and
+  refuses, always, to touch a deployed one.
+
+```
+npx @we8/cloudflare doctor            # what is missing, and how to fix it
+npx @we8/cloudflare doctor --remote   # the same, including deployed secrets
+npx @we8/cloudflare migrate           # apply migrations locally
+npx @we8/cloudflare migrate --remote  # apply them to the deployed database
+npx @we8/cloudflare seed              # local development data, local only
+```
+
+## Requirements
+
+- Peer dependencies, declared and auto-installed by npm: `@we8/cms` (the
+  worker this pack configures) and `wrangler` (the CLI it wraps). A scaffolded
+  project also declares both explicitly.
+- Node 20 or newer.
+- A Cloudflare account only when you deploy; local development runs entirely
+  offline.
+## The guardrail
+
+`seed/local.sql` contains plaintext API keys, because that is what a
+development seed is for. The `seed` command has no remote mode, refuses
+`--remote`, `--preview`, and `--env`, and the doctor fails a project whose
+`db:seed` script points anywhere but the local database.
+
+## Dependencies
+
+None at runtime. `@we8/cms` and `wrangler` are peers rather than dependencies,
+so the two packages typecheck and build in either order; the seam's types are
+restated here and the generated project's own typecheck is what proves they
+still line up.
+
+Cloudflare is the only pack in 0.1, so the core may assume Workers runtime
+conventions. The seam between core and pack stays thin (database, object
+storage, analytics sink, email sender) so a second pack is a real possibility,
+but 0.1 ships no driver framework.
+
+See [docs/deploy.md](https://github.com/reveriext/we8-package/blob/main/docs/deploy.md) for the path from an empty directory
+to a deployed CMS, and [docs/quick-start.md](https://github.com/reveriext/we8-package/blob/main/docs/quick-start.md) for the
+three paths a project can take once it is deployed.

package/dist/cli-args.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Argument parsing for `we8-cloudflare`, kept apart from the CLI that spawns
+ * wrangler so the shapes below can be tested without a subprocess.
+ */
+export type CommandName = 'doctor' | 'migrate' | 'seed' | 'help' | 'version';
+export interface ParsedCommand {
+    command: CommandName;
+    /** Where the project lives. Defaults to the working directory. */
+    dir: string;
+    /** True when the command should act on the deployed database. */
+    remote: boolean;
+    /** Set when the arguments cannot be honoured. The CLI prints it and exits 1. */
+    error?: string;
+}
+export declare const USAGE = "we8-cloudflare - the Cloudflare pack for a we8 CMS project\n\nUsage:\n  we8-cloudflare doctor [--remote] [--dir <path>]\n      Check the project's configuration and print what is missing, with the\n      command that fixes each thing. --remote also checks the deployed\n      Worker's secrets.\n\n  we8-cloudflare migrate [--remote] [--dir <path>]\n      Apply the @we8/cms migrations in order. Local by default; --remote\n      applies them to the deployed D1 database.\n\n  we8-cloudflare seed [--dir <path>]\n      Load the development seed into the LOCAL database. It contains plaintext\n      API keys, so this command has no remote mode and refuses to be given one.\n\n  we8-cloudflare help | --version\n";
+/**
+ * Parses argv (without the node and script entries). Unknown flags are an
+ * error rather than a silent no-op, because a typo in `--remote` on a migrate
+ * would otherwise quietly do the wrong half of the job.
+ */
+export declare function parseCliArgs(argv: readonly string[], cwd: string): ParsedCommand;
+//# sourceMappingURL=cli-args.d.ts.map

package/dist/cli-args.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-args.d.ts","sourceRoot":"","sources":["../src/cli-args.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,MAAM,MAAM,WAAW,GAAG,QAAQ,GAAG,SAAS,GAAG,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;AAE7E,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,WAAW,CAAC;IACrB,kEAAkE;IAClE,GAAG,EAAE,MAAM,CAAC;IACZ,iEAAiE;IACjE,MAAM,EAAE,OAAO,CAAC;IAChB,gFAAgF;IAChF,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,eAAO,MAAM,KAAK,2sBAiBjB,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,EAAE,GAAG,EAAE,MAAM,GAAG,aAAa,CAoDhF"}

package/dist/cli-args.js

@@ -0,0 +1,76 @@
+/**
+ * Argument parsing for `we8-cloudflare`, kept apart from the CLI that spawns
+ * wrangler so the shapes below can be tested without a subprocess.
+ */
+import { seedTargetsRemote } from './doctor.js';
+export const USAGE = `we8-cloudflare - the Cloudflare pack for a we8 CMS project
+
+Usage:
+  we8-cloudflare doctor [--remote] [--dir <path>]
+      Check the project's configuration and print what is missing, with the
+      command that fixes each thing. --remote also checks the deployed
+      Worker's secrets.
+
+  we8-cloudflare migrate [--remote] [--dir <path>]
+      Apply the @we8/cms migrations in order. Local by default; --remote
+      applies them to the deployed D1 database.
+
+  we8-cloudflare seed [--dir <path>]
+      Load the development seed into the LOCAL database. It contains plaintext
+      API keys, so this command has no remote mode and refuses to be given one.
+
+  we8-cloudflare help | --version
+`;
+/**
+ * Parses argv (without the node and script entries). Unknown flags are an
+ * error rather than a silent no-op, because a typo in `--remote` on a migrate
+ * would otherwise quietly do the wrong half of the job.
+ */
+export function parseCliArgs(argv, cwd) {
+    const base = { command: 'help', dir: cwd, remote: false };
+    const [first, ...rest] = argv;
+    if (first === undefined || first === 'help' || first === '--help' || first === '-h') {
+        return base;
+    }
+    if (first === '--version' || first === '-v' || first === 'version') {
+        return { ...base, command: 'version' };
+    }
+    if (first !== 'doctor' && first !== 'migrate' && first !== 'seed') {
+        return { ...base, error: `unknown command "${first}"` };
+    }
+    const parsed = { ...base, command: first };
+    for (let i = 0; i < rest.length; i += 1) {
+        const arg = rest[i];
+        if (arg === '--remote') {
+            parsed.remote = true;
+            continue;
+        }
+        if (arg === '--local') {
+            parsed.remote = false;
+            continue;
+        }
+        if (arg === '--dir') {
+            const value = rest[i + 1];
+            if (value === undefined)
+                return { ...parsed, error: '--dir needs a path' };
+            parsed.dir = value;
+            i += 1;
+            continue;
+        }
+        if (arg.startsWith('--dir=')) {
+            parsed.dir = arg.slice('--dir='.length);
+            continue;
+        }
+        return { ...parsed, error: `unknown option "${arg}"` };
+    }
+    // The guardrail, stated once and enforced here: the development seed carries
+    // plaintext API keys, so it never goes anywhere but the local database.
+    if (parsed.command === 'seed' && (parsed.remote || seedTargetsRemote(rest))) {
+        return {
+            ...parsed,
+            error: 'seed is local-only. seed/local.sql contains plaintext API keys, and loading it into a deployed database publishes them. To put real content into a deployed site, use the admin API.',
+        };
+    }
+    return parsed;
+}
+//# sourceMappingURL=cli-args.js.map

package/dist/cli-args.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-args.js","sourceRoot":"","sources":["../src/cli-args.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAchD,MAAM,CAAC,MAAM,KAAK,GAAG;;;;;;;;;;;;;;;;;CAiBpB,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,IAAuB,EAAE,GAAW;IAC/D,MAAM,IAAI,GAAkB,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAEzE,MAAM,CAAC,KAAK,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;IAE9B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACpF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,KAAK,KAAK,WAAW,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACnE,OAAO,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;IACzC,CAAC;IACD,IAAI,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;QAClE,OAAO,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,oBAAoB,KAAK,GAAG,EAAE,CAAC;IAC1D,CAAC;IAED,MAAM,MAAM,GAAkB,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAE1D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACxC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAW,CAAC;QAC9B,IAAI,GAAG,KAAK,UAAU,EAAE,CAAC;YACvB,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC;YACrB,SAAS;QACX,CAAC;QACD,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC;YACtB,SAAS;QACX,CAAC;QACD,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;YACpB,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAC1B,IAAI,KAAK,KAAK,SAAS;gBAAE,OAAO,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC;YAC3E,MAAM,CAAC,GAAG,GAAG,KAAK,CAAC;YACnB,CAAC,IAAI,CAAC,CAAC;YACP,SAAS;QACX,CAAC;QACD,IAAI,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7B,MAAM,CAAC,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACxC,SAAS;QACX,CAAC;QACD,OAAO,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,mBAAmB,GAAG,GAAG,EAAE,CAAC;IACzD,CAAC;IAED,6EAA6E;IAC7E,wEAAwE;IACxE,IAAI,MAAM,CAAC,OAAO,KAAK,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,iBAAiB,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QAC5E,OAAO;YACL,GAAG,MAAM;YACT,KAAK,EACH,sLAAsL;SACzL,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/cli.d.ts

@@ -0,0 +1,15 @@
+#!/usr/bin/env node
+/**
+ * `we8-cloudflare`: the three commands a scaffolded project needs that are not
+ * just wrangler. Each one gathers facts, checks them, and only then shells out
+ * to wrangler, so the failure a stranger sees is a sentence about their
+ * project rather than a stack trace from a tool they have not met yet.
+ */
+/**
+ * Pulls secret names out of `wrangler secret list`. It has printed a JSON
+ * array for a long time, but the fallback matters: a table instead would
+ * otherwise turn a real answer into an unverified one every time.
+ */
+export declare function parseSecretList(stdout: string): string[] | null;
+export declare function main(argv?: readonly string[], cwd?: string): number;
+//# sourceMappingURL=cli.d.ts.map

package/dist/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA;;;;;GAKG;AAwCH;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,IAAI,CAe/D;AA0CD,wBAAgB,IAAI,CAAC,IAAI,GAAE,SAAS,MAAM,EAA0B,EAAE,GAAG,GAAE,MAAsB,GAAG,MAAM,CA0BzG"}

package/dist/cli.js

@@ -0,0 +1,122 @@
+#!/usr/bin/env node
+/**
+ * `we8-cloudflare`: the three commands a scaffolded project needs that are not
+ * just wrangler. Each one gathers facts, checks them, and only then shells out
+ * to wrangler, so the failure a stranger sees is a sentence about their
+ * project rather than a stack trace from a tool they have not met yet.
+ */
+import { spawnSync } from 'node:child_process';
+import { resolve } from 'node:path';
+import { parseCliArgs, USAGE } from './cli-args.js';
+import { formatDoctorReport, runDoctorChecks } from './doctor.js';
+import { findSeedFile, gatherFacts, SEED_RELATIVE_PATH } from './project.js';
+const VERSION = '0.1.0';
+/** Runs wrangler in the project directory, inheriting stdio so its output is the user's. */
+function runWrangler(dir, args) {
+    console.log(`> wrangler ${args.join(' ')}`);
+    const result = spawnSync('npx', ['--no-install', 'wrangler', ...args], {
+        cwd: dir,
+        stdio: 'inherit',
+        shell: process.platform === 'win32',
+    });
+    if (result.error) {
+        console.error(`could not run wrangler: ${result.error.message}`);
+        console.error('fix: npm install');
+        return 1;
+    }
+    return result.status ?? 1;
+}
+/**
+ * Reads the deployed Worker's secret names. Returns null when wrangler cannot
+ * answer, which the doctor reports as unverified rather than as missing.
+ */
+function readRemoteSecretNames(dir) {
+    const result = spawnSync('npx', ['--no-install', 'wrangler', 'secret', 'list'], {
+        cwd: dir,
+        encoding: 'utf8',
+    });
+    if (result.status !== 0 || typeof result.stdout !== 'string')
+        return null;
+    return parseSecretList(result.stdout);
+}
+/**
+ * Pulls secret names out of `wrangler secret list`. It has printed a JSON
+ * array for a long time, but the fallback matters: a table instead would
+ * otherwise turn a real answer into an unverified one every time.
+ */
+export function parseSecretList(stdout) {
+    try {
+        const parsed = JSON.parse(stdout);
+        if (Array.isArray(parsed)) {
+            return parsed
+                .map((entry) => typeof entry === 'object' && entry !== null ? entry.name : null)
+                .filter((name) => typeof name === 'string');
+        }
+    }
+    catch {
+        // Not JSON. Fall through to the text scan.
+    }
+    const names = stdout.match(/\b[A-Z][A-Z0-9]*(?:_[A-Z0-9]+)+\b/g);
+    return names ? [...new Set(names)] : null;
+}
+function doctor(dir, remote) {
+    const secrets = remote ? readRemoteSecretNames(dir) : null;
+    const report = runDoctorChecks(gatherFacts(dir, remote ? 'remote' : 'local', secrets));
+    process.stdout.write(formatDoctorReport(report));
+    return report.ok ? 0 : 1;
+}
+function migrate(dir, remote) {
+    // The same checks the doctor runs, narrowed to the ones a migration needs.
+    // Applying migrations against a placeholder database id fails inside
+    // wrangler with a message about an id, not about what to do next.
+    const facts = gatherFacts(dir, remote ? 'remote' : 'local');
+    const report = runDoctorChecks(facts);
+    const blockers = report.checks.filter((c) => c.status === 'fail' && (c.id === 'config' || c.id === 'migrations' || (remote && c.id === 'd1')));
+    if (blockers.length > 0) {
+        console.error('Cannot apply migrations yet:');
+        for (const blocker of blockers) {
+            console.error(`  ${blocker.title}: ${blocker.detail}`);
+            if (blocker.fix)
+                console.error(`    fix: ${blocker.fix}`);
+        }
+        return 1;
+    }
+    return runWrangler(dir, ['d1', 'migrations', 'apply', 'DB', remote ? '--remote' : '--local']);
+}
+function seed(dir) {
+    const file = findSeedFile(dir);
+    if (!file) {
+        console.error(`no seed file at ${SEED_RELATIVE_PATH}`);
+        console.error('fix: npm install   (the seed ships inside the @we8/cms package)');
+        return 1;
+    }
+    console.log('Loading the development seed into the LOCAL database only.');
+    console.log('It contains plaintext API keys; never load it into a deployed database.');
+    return runWrangler(dir, ['d1', 'execute', 'DB', '--local', '--file', file]);
+}
+export function main(argv = process.argv.slice(2), cwd = process.cwd()) {
+    const parsed = parseCliArgs(argv, cwd);
+    if (parsed.error) {
+        console.error(parsed.error);
+        console.error('');
+        process.stdout.write(USAGE);
+        return 1;
+    }
+    const dir = resolve(parsed.dir);
+    switch (parsed.command) {
+        case 'help':
+            process.stdout.write(USAGE);
+            return 0;
+        case 'version':
+            console.log(VERSION);
+            return 0;
+        case 'doctor':
+            return doctor(dir, parsed.remote);
+        case 'migrate':
+            return migrate(dir, parsed.remote);
+        case 'seed':
+            return seed(dir);
+    }
+}
+process.exitCode = main();
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA;;;;;GAKG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAClE,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAE7E,MAAM,OAAO,GAAG,OAAO,CAAC;AAExB,4FAA4F;AAC5F,SAAS,WAAW,CAAC,GAAW,EAAE,IAAc;IAC9C,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,EAAE,CAAC,cAAc,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC,EAAE;QACrE,GAAG,EAAE,GAAG;QACR,KAAK,EAAE,SAAS;QAChB,KAAK,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO;KACpC,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,OAAO,CAAC,KAAK,CAAC,2BAA2B,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACjE,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;QAClC,OAAO,CAAC,CAAC;IACX,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC;AAC5B,CAAC;AAED;;;GAGG;AACH,SAAS,qBAAqB,CAAC,GAAW;IACxC,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,EAAE,CAAC,cAAc,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE;QAC9E,GAAG,EAAE,GAAG;QACR,QAAQ,EAAE,MAAM;KACjB,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC1E,OAAO,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AACxC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,MAAc;IAC5C,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC3C,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1B,OAAO,MAAM;iBACV,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACb,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,CAAE,KAA4B,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CACxF;iBACA,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,2CAA2C;IAC7C,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACjE,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC5C,CAAC;AAED,SAAS,MAAM,CAAC,GAAW,EAAE,MAAe;IAC1C,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3D,MAAM,MAAM,GAAG,eAAe,CAAC,WAAW,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IACvF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC;IACjD,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC3B,CAAC;AAED,SAAS,OAAO,CAAC,GAAW,EAAE,MAAe;IAC3C,2EAA2E;IAC3E,qEAAqE;IACrE,kEAAkE;IAClE,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IAC5D,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IACtC,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CACnC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,CAAC,EAAE,KAAK,YAAY,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC,CACxG,CAAC;IACF,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,OAAO,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAC9C,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,OAAO,CAAC,KAAK,CAAC,KAAK,OAAO,CAAC,KAAK,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;YACvD,IAAI,OAAO,CAAC,GAAG;gBAAE,OAAO,CAAC,KAAK,CAAC,YAAY,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QAC5D,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,OAAO,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;AAChG,CAAC;AAED,SAAS,IAAI,CAAC,GAAW;IACvB,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,CAAC,KAAK,CAAC,mBAAmB,kBAAkB,EAAE,CAAC,CAAC;QACvD,OAAO,CAAC,KAAK,CAAC,iEAAiE,CAAC,CAAC;QACjF,OAAO,CAAC,CAAC;IACX,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,4DAA4D,CAAC,CAAC;IAC1E,OAAO,CAAC,GAAG,CAAC,yEAAyE,CAAC,CAAC;IACvF,OAAO,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;AAC9E,CAAC;AAED,MAAM,UAAU,IAAI,CAAC,OAA0B,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,MAAc,OAAO,CAAC,GAAG,EAAE;IAC/F,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAEvC,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5B,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAClB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC5B,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAEhC,QAAQ,MAAM,CAAC,OAAO,EAAE,CAAC;QACvB,KAAK,MAAM;YACT,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC5B,OAAO,CAAC,CAAC;QACX,KAAK,SAAS;YACZ,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACrB,OAAO,CAAC,CAAC;QACX,KAAK,QAAQ;YACX,OAAO,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QACpC,KAAK,SAAS;YACZ,OAAO,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QACrC,KAAK,MAAM;YACT,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;AACH,CAAC;AAED,OAAO,CAAC,QAAQ,GAAG,IAAI,EAAE,CAAC"}

package/dist/doctor.d.ts

@@ -0,0 +1,87 @@
+/**
+ * The doctor: what is missing, and the exact command that fixes it.
+ *
+ * The checks are a pure function of gathered facts so they can be tested
+ * without a Cloudflare account, a filesystem, or a network. `src/cli.ts` does
+ * the gathering; everything below only reasons.
+ *
+ * Every failure carries a `fix` that can be pasted into a terminal. A first
+ * boot fails for about six reasons and all six of them have a one-line answer;
+ * printing the reason without the answer just moves the search to a browser.
+ */
+/** Where the project is headed. Some checks only matter for a real deployment. */
+export type DoctorTarget = 'local' | 'remote';
+export type CheckStatus = 'pass' | 'fail' | 'warn';
+export interface DoctorCheck {
+    id: string;
+    title: string;
+    status: CheckStatus;
+    detail: string;
+    /** A command or edit that resolves a fail or a warn. */
+    fix?: string;
+}
+export interface DoctorReport {
+    target: DoctorTarget;
+    ok: boolean;
+    checks: DoctorCheck[];
+}
+/** The facts the CLI gathers from a project directory. */
+export interface DoctorFacts {
+    target: DoctorTarget;
+    /** The parsed wrangler config, or null when the file is missing or unreadable. */
+    config: unknown;
+    /** Why the config could not be read, when it could not. */
+    configError?: string | undefined;
+    /** Variable names present in `.dev.vars`, or null when the file is absent. */
+    devVars: string[] | null;
+    /**
+     * Secret names the deployed Worker has, or null when they were not looked up
+     * (no account, or a local run). Absent knowledge is reported as unknown
+     * rather than guessed at.
+     */
+    remoteSecrets: string[] | null;
+    /** Migration filenames found in the configured migrations_dir, or null when it is missing. */
+    migrations: string[] | null;
+    /** Scripts declared by the project's package.json. */
+    packageScripts: Record<string, string>;
+}
+interface D1Binding {
+    binding?: unknown;
+    database_name?: unknown;
+    database_id?: unknown;
+    migrations_dir?: unknown;
+}
+interface R2Binding {
+    binding?: unknown;
+    bucket_name?: unknown;
+}
+/** Pulls the D1 binding named DB out of a config, or null when there is none. */
+export declare function findD1Binding(config: unknown): D1Binding | null;
+/** Pulls the R2 binding named MEDIA out of a config, or null when there is none. */
+export declare function findR2Binding(config: unknown): R2Binding | null;
+/** The migrations_dir the project configured, or the empty string when it has none. */
+export declare function readMigrationsDir(config: unknown): string;
+/**
+ * Migrations apply in filename order, so the order has to be a real sequence.
+ * A gap or a duplicate number is a merge that went wrong, and wrangler will
+ * happily apply it anyway.
+ */
+export declare function checkMigrationSequence(files: string[]): {
+    ok: boolean;
+    detail: string;
+};
+/**
+ * The one guardrail that matters more than the rest: `seed/local.sql` carries
+ * plaintext API keys, and running it against a deployed database publishes
+ * them. Any seed invocation that is not explicitly local is refused.
+ */
+export declare function seedTargetsRemote(args: readonly string[]): boolean;
+/**
+ * Runs every check against gathered facts. `ok` is false when anything failed;
+ * a warn is something to know about, not something to stop for.
+ */
+export declare function runDoctorChecks(facts: DoctorFacts): DoctorReport;
+/** Renders a report for a terminal. Plain text, no colour, no symbols. */
+export declare function formatDoctorReport(report: DoctorReport): string;
+export {};
+//# sourceMappingURL=doctor.d.ts.map

package/dist/doctor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor.d.ts","sourceRoot":"","sources":["../src/doctor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAKH,kFAAkF;AAClF,MAAM,MAAM,YAAY,GAAG,OAAO,GAAG,QAAQ,CAAC;AAE9C,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;AAEnD,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,WAAW,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,wDAAwD;IACxD,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,YAAY,CAAC;IACrB,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,WAAW,EAAE,CAAC;CACvB;AAED,0DAA0D;AAC1D,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,YAAY,CAAC;IACrB,kFAAkF;IAClF,MAAM,EAAE,OAAO,CAAC;IAChB,2DAA2D;IAC3D,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,8EAA8E;IAC9E,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IACzB;;;;OAIG;IACH,aAAa,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAC/B,8FAA8F;IAC9F,UAAU,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAC5B,sDAAsD;IACtD,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACxC;AAED,UAAU,SAAS;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,UAAU,SAAS;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAsBD,iFAAiF;AACjF,wBAAgB,aAAa,CAAC,MAAM,EAAE,OAAO,GAAG,SAAS,GAAG,IAAI,CAQ/D;AAED,oFAAoF;AACpF,wBAAgB,aAAa,CAAC,MAAM,EAAE,OAAO,GAAG,SAAS,GAAG,IAAI,CAQ/D;AAED,uFAAuF;AACvF,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,CAGzD;AAID;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAqBvF;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAElE;AAYD;;;GAGG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,WAAW,GAAG,YAAY,CAqQhE;AAID,0EAA0E;AAC1E,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,YAAY,GAAG,MAAM,CAuB/D"}

package/dist/doctor.js

@@ -0,0 +1,236 @@
+/**
+ * The doctor: what is missing, and the exact command that fixes it.
+ *
+ * The checks are a pure function of gathered facts so they can be tested
+ * without a Cloudflare account, a filesystem, or a network. `src/cli.ts` does
+ * the gathering; everything below only reasons.
+ *
+ * Every failure carries a `fix` that can be pasted into a terminal. A first
+ * boot fails for about six reasons and all six of them have a one-line answer;
+ * printing the reason without the answer just moves the search to a browser.
+ */
+import { inspectEmailConfig } from './email.js';
+import { D1_ID_PLACEHOLDER, isRealDatabaseId } from './wrangler-config.js';
+function asRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value)
+        ? value
+        : null;
+}
+function asArray(value) {
+    return Array.isArray(value) ? value : [];
+}
+/** Pulls the D1 binding named DB out of a config, or null when there is none. */
+export function findD1Binding(config) {
+    const shape = asRecord(config);
+    if (!shape)
+        return null;
+    for (const entry of asArray(shape.d1_databases)) {
+        const record = asRecord(entry);
+        if (record && record['binding'] === 'DB')
+            return record;
+    }
+    return null;
+}
+/** Pulls the R2 binding named MEDIA out of a config, or null when there is none. */
+export function findR2Binding(config) {
+    const shape = asRecord(config);
+    if (!shape)
+        return null;
+    for (const entry of asArray(shape.r2_buckets)) {
+        const record = asRecord(entry);
+        if (record && record['binding'] === 'MEDIA')
+            return record;
+    }
+    return null;
+}
+/** The migrations_dir the project configured, or the empty string when it has none. */
+export function readMigrationsDir(config) {
+    const binding = findD1Binding(config);
+    return typeof binding?.migrations_dir === 'string' ? binding.migrations_dir : '';
+}
+const MIGRATION_PATTERN = /^(\d{4})_[a-z0-9_]+\.sql$/;
+/**
+ * Migrations apply in filename order, so the order has to be a real sequence.
+ * A gap or a duplicate number is a merge that went wrong, and wrangler will
+ * happily apply it anyway.
+ */
+export function checkMigrationSequence(files) {
+    const sql = files.filter((name) => name.endsWith('.sql')).sort();
+    if (sql.length === 0)
+        return { ok: false, detail: 'no .sql migrations found' };
+    const badly = sql.filter((name) => !MIGRATION_PATTERN.test(name));
+    if (badly.length > 0) {
+        return { ok: false, detail: `not numbered NNNN_name.sql: ${badly.join(', ')}` };
+    }
+    const numbers = sql.map((name) => Number(MIGRATION_PATTERN.exec(name)[1]));
+    for (let i = 0; i < numbers.length; i += 1) {
+        const expected = i + 1;
+        if (numbers[i] !== expected) {
+            return {
+                ok: false,
+                detail: `sequence breaks at ${sql[i]}: expected ${String(expected).padStart(4, '0')}`,
+            };
+        }
+    }
+    return { ok: true, detail: `${String(sql.length)} migrations, 0001 to ${sql[sql.length - 1]}` };
+}
+/**
+ * The one guardrail that matters more than the rest: `seed/local.sql` carries
+ * plaintext API keys, and running it against a deployed database publishes
+ * them. Any seed invocation that is not explicitly local is refused.
+ */
+export function seedTargetsRemote(args) {
+    return args.some((arg) => arg === '--remote' || arg === '--preview' || arg.startsWith('--env'));
+}
+function check(id, title, status, detail, fix) {
+    return fix === undefined ? { id, title, status, detail } : { id, title, status, detail, fix };
+}
+/**
+ * Runs every check against gathered facts. `ok` is false when anything failed;
+ * a warn is something to know about, not something to stop for.
+ */
+export function runDoctorChecks(facts) {
+    const checks = [];
+    const remote = facts.target === 'remote';
+    // ---- the config file ---------------------------------------------------
+    if (facts.config === null || facts.config === undefined) {
+        checks.push(check('config', 'wrangler.jsonc', 'fail', facts.configError ?? 'not found in this directory', 'Run this from the project root, or scaffold one with: npm create we8'));
+        return { target: facts.target, ok: false, checks };
+    }
+    const config = asRecord(facts.config);
+    checks.push(check('config', 'wrangler.jsonc', 'pass', 'found and parsed'));
+    // ---- the worker itself -------------------------------------------------
+    checks.push(typeof config.main === 'string' && config.main.length > 0
+        ? check('main', 'worker entry point', 'pass', String(config.main))
+        : check('main', 'worker entry point', 'fail', 'no "main" in wrangler.jsonc', 'Set "main": "src/index.ts"'));
+    const flags = asArray(config.compatibility_flags).filter((f) => typeof f === 'string');
+    checks.push(flags.includes('nodejs_compat')
+        ? check('nodejs_compat', 'nodejs_compat flag', 'pass', 'enabled')
+        : check('nodejs_compat', 'nodejs_compat flag', 'fail', 'the CMS and better-auth need the Node built-ins', 'Add "compatibility_flags": ["nodejs_compat"] to wrangler.jsonc'));
+    // ---- bindings ----------------------------------------------------------
+    const d1 = findD1Binding(facts.config);
+    const databaseName = typeof d1?.database_name === 'string' ? d1.database_name : 'we8-cms';
+    if (!d1) {
+        checks.push(check('d1', 'D1 binding DB', 'fail', 'no d1_databases entry bound as DB', `wrangler d1 create ${databaseName}   then add the binding to wrangler.jsonc`));
+    }
+    else if (!isRealDatabaseId(typeof d1.database_id === 'string' ? d1.database_id : undefined)) {
+        const current = typeof d1.database_id === 'string' ? d1.database_id : '(missing)';
+        const what = current === D1_ID_PLACEHOLDER ? 'still the placeholder' : `not a D1 id: ${current}`;
+        checks.push(
+        // Local development keys its database off the binding name and never
+        // reads the id, so a placeholder is a warning here and a wall on the way
+        // to a deployment. Failing it locally would make the doctor cry wolf on
+        // every fresh project.
+        remote
+            ? check('d1', 'D1 binding DB', 'fail', `database_id is ${what}`, `wrangler d1 create ${databaseName}   then paste the uuid it prints into d1_databases[0].database_id`)
+            : check('d1', 'D1 binding DB', 'warn', `database_id is ${what}; local development works, a deploy will not`, `wrangler d1 create ${databaseName}   then paste the uuid it prints into d1_databases[0].database_id`));
+    }
+    else {
+        checks.push(check('d1', 'D1 binding DB', 'pass', `${databaseName} (${String(d1.database_id)})`));
+    }
+    const r2 = findR2Binding(facts.config);
+    checks.push(r2 && typeof r2.bucket_name === 'string' && r2.bucket_name.length > 0
+        ? check('r2', 'R2 binding MEDIA', 'pass', r2.bucket_name)
+        : check('r2', 'R2 binding MEDIA', 'fail', 'no r2_buckets entry bound as MEDIA with a bucket_name', 'wrangler r2 bucket create we8-cms-media   then add the binding to wrangler.jsonc'));
+    // ---- vars --------------------------------------------------------------
+    const vars = asRecord(config.vars) ?? {};
+    const siteUrl = typeof vars['SITE_URL'] === 'string' ? vars['SITE_URL'] : '';
+    if (!siteUrl) {
+        checks.push(check('site_url', 'SITE_URL', 'fail', 'not set', 'Add "SITE_URL": "https://example.com" to vars in wrangler.jsonc'));
+    }
+    else if (remote && /^https?:\/\/(localhost|127\.0\.0\.1)/.test(siteUrl)) {
+        checks.push(check('site_url', 'SITE_URL', 'fail', `a deployed site cannot advertise ${siteUrl}: sitemap, llms.txt, and JSON-LD are all built from it`, 'Set vars.SITE_URL in wrangler.jsonc to the public origin'));
+    }
+    else {
+        checks.push(check('site_url', 'SITE_URL', 'pass', siteUrl));
+    }
+    checks.push(typeof vars['CMS_VERSION'] === 'string' && vars['CMS_VERSION'].length > 0
+        ? check('cms_version', 'CMS_VERSION', 'pass', vars['CMS_VERSION'])
+        : check('cms_version', 'CMS_VERSION', 'warn', 'not set, so /v1/health reports nothing useful', 'Add "CMS_VERSION": "0.1.0" to vars in wrangler.jsonc'));
+    // ---- the secret everything depends on ----------------------------------
+    if (remote) {
+        if (facts.remoteSecrets === null) {
+            checks.push(check('better_auth_secret', 'BETTER_AUTH_SECRET', 'warn', 'could not read the deployed secrets, so this is unverified', 'wrangler secret list   to check, or set it with: wrangler secret put BETTER_AUTH_SECRET'));
+        }
+        else if (facts.remoteSecrets.includes('BETTER_AUTH_SECRET')) {
+            checks.push(check('better_auth_secret', 'BETTER_AUTH_SECRET', 'pass', 'set on the deployed Worker'));
+        }
+        else {
+            checks.push(check('better_auth_secret', 'BETTER_AUTH_SECRET', 'fail', 'not set: the admin API refuses every request without it', 'openssl rand -hex 32   then: wrangler secret put BETTER_AUTH_SECRET'));
+        }
+    }
+    else if (facts.devVars === null) {
+        checks.push(check('better_auth_secret', 'BETTER_AUTH_SECRET', 'fail', 'no .dev.vars file, so local sign-in cannot work', 'cp .dev.vars.example .dev.vars   then put a value from: openssl rand -hex 32'));
+    }
+    else if (facts.devVars.includes('BETTER_AUTH_SECRET')) {
+        checks.push(check('better_auth_secret', 'BETTER_AUTH_SECRET', 'pass', 'set in .dev.vars'));
+    }
+    else {
+        checks.push(check('better_auth_secret', 'BETTER_AUTH_SECRET', 'fail', '.dev.vars exists but does not set it', 'openssl rand -hex 32   then add BETTER_AUTH_SECRET=<value> to .dev.vars'));
+    }
+    // ---- migrations --------------------------------------------------------
+    const migrationsDir = readMigrationsDir(facts.config);
+    if (!migrationsDir) {
+        checks.push(check('migrations', 'migrations', 'fail', 'the DB binding has no migrations_dir', 'Add "migrations_dir": "node_modules/@we8/cms/migrations" to the DB binding'));
+    }
+    else if (facts.migrations === null) {
+        checks.push(check('migrations', 'migrations', 'fail', `${migrationsDir} does not exist`, 'npm install   (the migrations ship inside the @we8/cms package)'));
+    }
+    else {
+        const sequence = checkMigrationSequence(facts.migrations);
+        checks.push(sequence.ok
+            ? check('migrations', 'migrations', 'pass', `${migrationsDir}: ${sequence.detail}`)
+            : check('migrations', 'migrations', 'fail', `${migrationsDir}: ${sequence.detail}`, 'Restore the migrations shipped with @we8/cms'));
+    }
+    // ---- email -------------------------------------------------------------
+    const emailMode = typeof vars['EMAIL_MODE'] === 'string' ? vars['EMAIL_MODE'] : undefined;
+    const sendEmailNames = asArray(config.send_email)
+        .map((entry) => asRecord(entry)?.['name'])
+        .filter((name) => typeof name === 'string');
+    const emailVerdict = inspectEmailConfig({
+        EMAIL_MODE: emailMode,
+        EMAIL_FROM: typeof vars['EMAIL_FROM'] === 'string' ? vars['EMAIL_FROM'] : undefined,
+        // The binding is present in the config rather than at runtime here, so a
+        // stub stands in for it: the doctor is checking configuration, not sending.
+        EMAIL: sendEmailNames.includes('EMAIL') ? { send: () => Promise.resolve({ messageId: '' }) } : undefined,
+    });
+    if (emailMode === undefined || emailMode === 'console') {
+        checks.push(check('email', 'email', 'pass', emailMode === 'console' ? 'console mode: mail is logged, not sent' : 'off: mail is accepted and dropped'));
+    }
+    else if (emailVerdict.enabled) {
+        checks.push(check('email', 'email', 'pass', `Cloudflare Email Service, ${emailVerdict.reason}`));
+    }
+    else {
+        checks.push(check('email', 'email', 'fail', `EMAIL_MODE is "${emailMode}" but ${emailVerdict.reason}`, 'Add "send_email": [{ "name": "EMAIL", "remote": true }] and vars.EMAIL_FROM, on a domain onboarded to Email Service'));
+    }
+    // ---- the seed guardrail ------------------------------------------------
+    const seedScript = facts.packageScripts['db:seed'];
+    if (seedScript && seedTargetsRemote(seedScript.split(/\s+/))) {
+        checks.push(check('seed_guardrail', 'seed guardrail', 'fail', 'db:seed targets something other than the local database, and the seed contains plaintext API keys', 'Change db:seed back to: we8-cloudflare seed'));
+    }
+    else {
+        checks.push(check('seed_guardrail', 'seed guardrail', 'pass', 'the development seed is local-only'));
+    }
+    return { target: facts.target, ok: !checks.some((c) => c.status === 'fail'), checks };
+}
+const LABEL = { pass: 'PASS', fail: 'FAIL', warn: 'WARN' };
+/** Renders a report for a terminal. Plain text, no colour, no symbols. */
+export function formatDoctorReport(report) {
+    const lines = [];
+    lines.push(`we8 doctor (${report.target})`);
+    lines.push('');
+    for (const item of report.checks) {
+        lines.push(`  ${LABEL[item.status]}  ${item.title}: ${item.detail}`);
+        if (item.fix && item.status !== 'pass') {
+            lines.push(`        fix: ${item.fix}`);
+        }
+    }
+    const failures = report.checks.filter((c) => c.status === 'fail').length;
+    const warnings = report.checks.filter((c) => c.status === 'warn').length;
+    lines.push('');
+    lines.push(report.ok
+        ? `Ready. ${String(report.checks.length)} checks, ${String(warnings)} warnings.`
+        : `Not ready. ${String(failures)} of ${String(report.checks.length)} checks failed.`);
+    return `${lines.join('\n')}\n`;
+}
+//# sourceMappingURL=doctor.js.map