@webflow/cloud-app 0.1.0-beta.10

package/dist/frameworks/static/index.js

@@ -0,0 +1,394 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.StaticBuilder = exports.SERVER_ENTRYPOINT_FILES = exports.RUNTIME_BUILD_INDICATORS = exports.STATIC_ASSET_EXCLUDES = exports.ASSET_ROOT_METADATA = void 0;
+exports.shouldExcludeStaticAsset = shouldExcludeStaticAsset;
+exports.findRuntimeBuildIndicatorsInPaths = findRuntimeBuildIndicatorsInPaths;
+exports.findRuntimeBuildIndicators = findRuntimeBuildIndicators;
+/**
+ * Static Framework Builder
+ *
+ * Handles no-framework apps: a plain HTML/CSS/JS site with no build step and
+ * no server-side worker. The committed files are served verbatim from
+ * Cloudflare Workers static assets (assets-only deployment — no `main`).
+ *
+ * Key characteristics:
+ * - No package.json / dependencies required
+ * - No build command (getBuildCommand returns null)
+ * - No worker entry (assets-only; deployment type "static")
+ * - Asset source is the repo root, minus the infra/control files below
+ */
+const fs = __importStar(require("node:fs"));
+const path = __importStar(require("node:path"));
+const base_1 = require("../base");
+const utils_1 = require("../../utils");
+/** Base path for static templates. */
+const TEMPLATE_BASE = path.join(__dirname, 'templates');
+/**
+ * `_headers` / `_redirects` are Cloudflare asset-root metadata, not page
+ * content. They're only honored at the root of the assets directory, so the
+ * host relocates them there (regardless of mount path) rather than copying
+ * them under the mount-path prefix.
+ */
+exports.ASSET_ROOT_METADATA = ['_headers', '_redirects'];
+/**
+ * Non-dotfile basename patterns that must never be published as static assets
+ * (`*` is a simple glob — see `matchesExcludePattern`). Dotfiles are handled
+ * separately by `shouldExcludeStaticAsset` (all excluded except `.well-known`).
+ */
+exports.STATIC_ASSET_EXCLUDES = [
+    // Dependencies
+    'node_modules',
+    'package.json',
+    'package-lock.json',
+    'yarn.lock',
+    'pnpm-lock.yaml',
+    // Webflow Cloud / wrangler control files (not user content)
+    'webflow.json',
+    'webflow.jsonc',
+    'wrangler.json',
+    'wrangler.jsonc',
+    'wrangler.toml',
+    'clouduser.wrangler.json',
+    'clouduser',
+    // Infrastructure state / secrets that aren't dotfiles
+    'terraform.tfstate',
+    'terraform.tfstate.*',
+    '*.tfvars',
+    // Package-manager credential files that aren't dotfiles (Composer `auth.json`)
+    'auth.json',
+    // Key material
+    '*.pem',
+    '*.key',
+    '*.pfx',
+    '*.p12',
+    'id_rsa',
+    'id_rsa.*',
+    'id_dsa',
+    'id_ecdsa',
+    'id_ed25519',
+];
+/**
+ * The static publication boundary: decide whether a repo-root entry must be
+ * withheld from the published assets. Because the asset source is the whole
+ * checkout, the safe default is to treat anything config/secret/metadata-shaped
+ * as non-public rather than to enumerate every risky name.
+ *
+ * Policy:
+ *   - `.well-known` IS published (ACME challenges, security.txt, etc.).
+ *   - every OTHER dotfile / dot-directory is withheld — this covers `.env*`,
+ *     `.envrc`, `.git`, `.git-credentials`, `.npmrc`, `.aws/`, `.docker/`,
+ *     `.ssh/`, `.dev.vars`, … in one rule instead of a leaky enumeration.
+ *   - `_headers` / `_redirects` are withheld here because they're relocated to
+ *     the assets root separately.
+ *   - plus the explicit non-dotfile deny patterns above (deps, control files,
+ *     tf state, key material).
+ */
+function shouldExcludeStaticAsset(basename) {
+    if (basename === '.well-known') {
+        return false;
+    }
+    if (basename.startsWith('.')) {
+        return true;
+    }
+    if (exports.ASSET_ROOT_METADATA.includes(basename)) {
+        return true;
+    }
+    return exports.STATIC_ASSET_EXCLUDES.some((pattern) => (0, utils_1.matchesExcludePattern)(basename, pattern));
+}
+/**
+ * Build/runtime/package/auth manifest files whose presence means the repo is
+ * NOT a no-framework static site — it has a build step or a server runtime.
+ *
+ * Zero-config static inference (`index.html` + no package.json) is only a
+ * preflight signal; per the Static Site Hosting PRD it must be rejected when
+ * any of these appear alongside, so we never silently publish a mixed
+ * static+runtime repo's source (e.g. `server.py` next to a Composer
+ * `auth.json`). Node's `package.json` is handled separately by the detection
+ * flow, so it isn't listed here.
+ */
+exports.RUNTIME_BUILD_INDICATORS = [
+    // Python
+    'requirements.txt',
+    'Pipfile',
+    'Pipfile.lock',
+    'pyproject.toml',
+    'setup.py',
+    'setup.cfg',
+    // PHP / Composer (auth.json carries registry credentials)
+    'composer.json',
+    'composer.lock',
+    'auth.json',
+    // Ruby
+    'Gemfile',
+    'Gemfile.lock',
+    'config.ru',
+    // Go
+    'go.mod',
+    'go.sum',
+    // Rust
+    'Cargo.toml',
+    'Cargo.lock',
+    // JVM
+    'pom.xml',
+    'build.gradle',
+    'build.gradle.kts',
+    // Deno / Bun
+    'deno.json',
+    'deno.jsonc',
+    'bun.lockb',
+    // Elixir
+    'mix.exs',
+    // Service / container runtimes
+    'Dockerfile',
+    'Procfile',
+];
+/**
+ * Clear server entrypoint filenames. Unlike manifests these are source files,
+ * but a repo whose published tree contains one is running a server, not serving
+ * static assets — so it must not be inferred as static.
+ */
+exports.SERVER_ENTRYPOINT_FILES = [
+    // Python
+    'server.py',
+    'app.py',
+    'wsgi.py',
+    'asgi.py',
+    'manage.py',
+    'main.py',
+    // Node (no package.json — a raw `node server.js` runtime)
+    'server.js',
+    'server.mjs',
+    // Go / Ruby / PHP
+    'main.go',
+    'app.rb',
+    'index.php',
+];
+const RUNTIME_INDICATOR_NAMES = new Set([...exports.RUNTIME_BUILD_INDICATORS, ...exports.SERVER_ENTRYPOINT_FILES]);
+/**
+ * Evaluate repo-relative file paths for build/runtime/server indicators,
+ * returning matching paths in input order.
+ *
+ * This helper is filesystem-free so hosts that only have a remote file listing
+ * (for example a GitHub recursive tree result) can reuse exactly the same
+ * indicator semantics as the local filesystem scanner.
+ *
+ * Input contract:
+ * - `paths` must represent regular file paths only (blob/file entries).
+ * - Callers must pre-filter non-file items (directories, submodules, symlinks).
+ *   For a GitHub recursive tree this means keeping only `type === 'blob'` with
+ *   `mode !== '120000'` (symlink); submodules arrive as `type === 'commit'`.
+ *   The local filesystem scanner skips symlinks, so a caller that keeps them
+ *   would diverge from it.
+ * - Exclusion applies to ancestor directory segments only; the final basename
+ *   is always considered as an indicator candidate.
+ * - Leading/duplicate slashes and `.` segments are normalized for matching
+ *   only. Matches are returned with the caller's original spelling
+ *   (`./api/server.py` in, `./api/server.py` out), so callers that key off the
+ *   returned paths must not assume they are canonicalized.
+ */
+function findRuntimeBuildIndicatorsInPaths(paths) {
+    const found = [];
+    for (const relPath of paths) {
+        // Drop empty segments (`/a`, `a//b`) and `.` (`./a`) so those spellings
+        // behave exactly like the clean path. `.` would otherwise count as a
+        // dot-directory ancestor and hide real indicators such as `./api/server.py`.
+        const segments = relPath.split('/').filter((segment) => segment && segment !== '.');
+        if (segments.length === 0) {
+            continue;
+        }
+        const directorySegments = segments.slice(0, -1);
+        if (directorySegments.some((segment) => shouldExcludeStaticAsset(segment))) {
+            continue;
+        }
+        const basename = segments[segments.length - 1];
+        // A package.json anywhere below the root is a nested Node runtime (at least
+        // one directory segment); the root one is handled upstream, not here.
+        const isNestedPackageManifest = basename === 'package.json' && segments.length > 1;
+        if (isNestedPackageManifest || RUNTIME_INDICATOR_NAMES.has(basename)) {
+            found.push(relPath);
+        }
+    }
+    return found;
+}
+/**
+ * Scan the **published tree** (not just the root) for build/runtime/server
+ * indicators, returning their repo-relative paths.
+ *
+ * The static copy publishes the whole checkout recursively, so a manifest or
+ * server entrypoint nested under e.g. `api/` (a root `index.html` next to
+ * `api/requirements.txt` + `api/server.py`) is just as much a mixed
+ * static+runtime signal as one at the root — and its source would otherwise be
+ * served publicly. Directories that are never published (dotfiles/dot-dirs,
+ * `node_modules`, and anything `shouldExcludeStaticAsset` withholds) are not
+ * descended into, and symlinks are not followed — matching the copy policy.
+ *
+ * A **nested** `package.json` (below the root) counts here too: it marks a
+ * Node runtime whose sibling source (e.g. `api/index.js`) would otherwise be
+ * published verbatim. The *root* `package.json` is intentionally NOT a signal —
+ * its presence means the repo isn't a zero-config static app at all, which the
+ * upstream detection flow already handles (static inference requires that there
+ * be no root `package.json`).
+ */
+function findRuntimeBuildIndicators(cwd) {
+    const filePaths = [];
+    const walk = (dir, rel) => {
+        let entries;
+        try {
+            entries = fs.readdirSync(dir, { withFileTypes: true });
+        }
+        catch {
+            return;
+        }
+        for (const entry of entries) {
+            const relPath = rel ? `${rel}/${entry.name}` : entry.name;
+            if (entry.isSymbolicLink()) {
+                continue; // never follow links (matches recursiveCopy)
+            }
+            if (entry.isDirectory()) {
+                // Only descend into directories that would actually be published.
+                if (!shouldExcludeStaticAsset(entry.name)) {
+                    walk(path.join(dir, entry.name), relPath);
+                }
+                continue;
+            }
+            if (!entry.isFile()) {
+                continue;
+            }
+            filePaths.push(relPath);
+        }
+    };
+    walk(cwd, '');
+    return findRuntimeBuildIndicatorsInPaths(filePaths);
+}
+class StaticBuilder extends base_1.FrameworkBuilder {
+    static frameworkName = 'static';
+    // ───────────────────────────────────────────────────────────────────────────
+    // FRAMEWORK INFO
+    // ───────────────────────────────────────────────────────────────────────────
+    get info() {
+        return {
+            name: 'static',
+            version: 'n/a',
+            displayName: 'Static (HTML/CSS/JS)',
+            // No npm package backs a static app; getCustomerMajorVersion returns
+            // 'unknown' for a name absent from package.json, which is correct here.
+            packageName: 'static',
+        };
+    }
+    // ───────────────────────────────────────────────────────────────────────────
+    // DETECTION
+    // ───────────────────────────────────────────────────────────────────────────
+    /**
+     * Match only when webflow.json explicitly opts in with framework "static".
+     *
+     * Implicit detection for a no-framework app (no package.json / index.html at
+     * the root) is handled as a fallback in the host, which has the working
+     * directory that this static, package.json-only signature cannot see.
+     */
+    static detect(packageJson, webflowJson) {
+        if (webflowJson?.cloud?.framework === 'static') {
+            return { detected: true, reason: 'Specified as static in webflow.json' };
+        }
+        return { detected: false };
+    }
+    // ───────────────────────────────────────────────────────────────────────────
+    // VALIDATION / DEPENDENCIES (no-ops)
+    // ───────────────────────────────────────────────────────────────────────────
+    async validate() {
+        // Inferred static apps never reach here with runtime files (inference
+        // requires none). An explicit `framework: "static"` bypasses that check, so
+        // warn if the repo ships build/runtime files: they'll be published verbatim
+        // as static assets.
+        const runtimeIndicators = findRuntimeBuildIndicators(this.cwd);
+        if (runtimeIndicators.length > 0) {
+            this.log.warn(`static app declared, but build/runtime files are present ` +
+                `(${runtimeIndicators.join(', ')}); they will be published as ` +
+                `static assets unless removed`);
+        }
+        this.log.info('Static app: no framework, no dependencies, no build — nothing to validate');
+    }
+    async installDependencies() {
+        // A static app has no dependencies to install.
+    }
+    getCloudflareAdapter() {
+        return null;
+    }
+    getRequiredIntegrations() {
+        return [];
+    }
+    getWebflowLoader() {
+        return null;
+    }
+    getNodeVersionRequirement() {
+        // No Node runtime is used to build or serve a static app.
+        return null;
+    }
+    // ───────────────────────────────────────────────────────────────────────────
+    // CONFIGURATION
+    // ───────────────────────────────────────────────────────────────────────────
+    getWranglerTemplatePath() {
+        return path.join(TEMPLATE_BASE, 'wrangler.json');
+    }
+    async prepareConfig() {
+        // Nothing to configure: the files are served exactly as the user committed
+        // them. The deploy-time wrangler (assets-only, no main) is rendered by the
+        // host from its static wrangler template.
+    }
+    // ───────────────────────────────────────────────────────────────────────────
+    // BUILD
+    // ───────────────────────────────────────────────────────────────────────────
+    getBuildCommand() {
+        // No build step. The build phase skips the build command for a null return.
+        return null;
+    }
+    // ───────────────────────────────────────────────────────────────────────────
+    // OUTPUT
+    // ───────────────────────────────────────────────────────────────────────────
+    static getOutputDeployMetadata() {
+        return {
+            // The repo root is the asset root. The publication boundary is applied by
+            // `shouldExcludeStaticAsset` (via recursiveCopy's excludeFn in the host),
+            // not a plain pattern list, so it can withhold all dotfiles/secrets.
+            staticAssetsPath: '.',
+            // Assets-only: no worker, so no entrypoint and no ASSETS binding.
+            deploymentType: 'static',
+            usesAssetsBinding: false,
+            skipNoBundle: false,
+        };
+    }
+}
+exports.StaticBuilder = StaticBuilder;
+//# sourceMappingURL=index.js.map

package/dist/frameworks/static/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/frameworks/static/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA+FA,4DAWC;AAgGD,8EA2BC;AAqBD,gEA+BC;AAzRD;;;;;;;;;;;;GAYG;AACH,4CAA8B;AAC9B,gDAAkC;AAElC,kCAA2C;AAC3C,uCAAoD;AAapD,sCAAsC;AACtC,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;AAExD;;;;;GAKG;AACU,QAAA,mBAAmB,GAAG,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;AAE9D;;;;GAIG;AACU,QAAA,qBAAqB,GAAG;IACnC,eAAe;IACf,cAAc;IACd,cAAc;IACd,mBAAmB;IACnB,WAAW;IACX,gBAAgB;IAChB,4DAA4D;IAC5D,cAAc;IACd,eAAe;IACf,eAAe;IACf,gBAAgB;IAChB,eAAe;IACf,yBAAyB;IACzB,WAAW;IACX,sDAAsD;IACtD,mBAAmB;IACnB,qBAAqB;IACrB,UAAU;IACV,+EAA+E;IAC/E,WAAW;IACX,eAAe;IACf,OAAO;IACP,OAAO;IACP,OAAO;IACP,OAAO;IACP,QAAQ;IACR,UAAU;IACV,QAAQ;IACR,UAAU;IACV,YAAY;CACb,CAAC;AAEF;;;;;;;;;;;;;;;GAeG;AACH,SAAgB,wBAAwB,CAAC,QAAgB;IACvD,IAAI,QAAQ,KAAK,aAAa,EAAE,CAAC;QAC/B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,2BAAmB,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3C,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,6BAAqB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,IAAA,6BAAqB,EAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;AAC3F,CAAC;AAED;;;;;;;;;;GAUG;AACU,QAAA,wBAAwB,GAAG;IACtC,SAAS;IACT,kBAAkB;IAClB,SAAS;IACT,cAAc;IACd,gBAAgB;IAChB,UAAU;IACV,WAAW;IACX,0DAA0D;IAC1D,eAAe;IACf,eAAe;IACf,WAAW;IACX,OAAO;IACP,SAAS;IACT,cAAc;IACd,WAAW;IACX,KAAK;IACL,QAAQ;IACR,QAAQ;IACR,OAAO;IACP,YAAY;IACZ,YAAY;IACZ,MAAM;IACN,SAAS;IACT,cAAc;IACd,kBAAkB;IAClB,aAAa;IACb,WAAW;IACX,YAAY;IACZ,WAAW;IACX,SAAS;IACT,SAAS;IACT,+BAA+B;IAC/B,YAAY;IACZ,UAAU;CACX,CAAC;AAEF;;;;GAIG;AACU,QAAA,uBAAuB,GAAG;IACrC,SAAS;IACT,WAAW;IACX,QAAQ;IACR,SAAS;IACT,SAAS;IACT,WAAW;IACX,SAAS;IACT,0DAA0D;IAC1D,WAAW;IACX,YAAY;IACZ,kBAAkB;IAClB,SAAS;IACT,QAAQ;IACR,WAAW;CACZ,CAAC;AAEF,MAAM,uBAAuB,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,gCAAwB,EAAE,GAAG,+BAAuB,CAAC,CAAC,CAAC;AAEnG;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,SAAgB,iCAAiC,CAAC,KAAe;IAC/D,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,KAAK,MAAM,OAAO,IAAI,KAAK,EAAE,CAAC;QAC5B,wEAAwE;QACxE,qEAAqE;QACrE,6EAA6E;QAC7E,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,IAAI,OAAO,KAAK,GAAG,CAAC,CAAC;QACpF,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,SAAS;QACX,CAAC;QAED,MAAM,iBAAiB,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAChD,IAAI,iBAAiB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,wBAAwB,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;YAC3E,SAAS;QACX,CAAC;QAED,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC/C,4EAA4E;QAC5E,sEAAsE;QACtE,MAAM,uBAAuB,GAAG,QAAQ,KAAK,cAAc,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;QACnF,IAAI,uBAAuB,IAAI,uBAAuB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YACrE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,SAAgB,0BAA0B,CAAC,GAAW;IACpD,MAAM,SAAS,GAAa,EAAE,CAAC;IAE/B,MAAM,IAAI,GAAG,CAAC,GAAW,EAAE,GAAW,EAAQ,EAAE;QAC9C,IAAI,OAAoB,CAAC;QACzB,IAAI,CAAC;YACH,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QACzD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;YAC1D,IAAI,KAAK,CAAC,cAAc,EAAE,EAAE,CAAC;gBAC3B,SAAS,CAAC,6CAA6C;YACzD,CAAC;YACD,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxB,kEAAkE;gBAClE,IAAI,CAAC,wBAAwB,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC1C,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;gBAC5C,CAAC;gBACD,SAAS;YACX,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;gBACpB,SAAS;YACX,CAAC;YACD,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC,CAAC;IAEF,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACd,OAAO,iCAAiC,CAAC,SAAS,CAAC,CAAC;AACtD,CAAC;AAED,MAAa,aAAc,SAAQ,uBAAgB;IACjD,MAAM,CAAU,aAAa,GAAG,QAAQ,CAAC;IAEzC,8EAA8E;IAC9E,iBAAiB;IACjB,8EAA8E;IAE9E,IAAI,IAAI;QACN,OAAO;YACL,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,KAAK;YACd,WAAW,EAAE,sBAAsB;YACnC,qEAAqE;YACrE,wEAAwE;YACxE,WAAW,EAAE,QAAQ;SACtB,CAAC;IACJ,CAAC;IAED,8EAA8E;IAC9E,YAAY;IACZ,8EAA8E;IAE9E;;;;;;OAMG;IACH,MAAM,CAAU,MAAM,CAAC,WAAwB,EAAE,WAAyB;QACxE,IAAI,WAAW,EAAE,KAAK,EAAE,SAAS,KAAK,QAAQ,EAAE,CAAC;YAC/C,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,qCAAqC,EAAE,CAAC;QAC3E,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAC7B,CAAC;IAED,8EAA8E;IAC9E,qCAAqC;IACrC,8EAA8E;IAE9E,KAAK,CAAC,QAAQ;QACZ,sEAAsE;QACtE,4EAA4E;QAC5E,4EAA4E;QAC5E,oBAAoB;QACpB,MAAM,iBAAiB,GAAG,0BAA0B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC/D,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACjC,IAAI,CAAC,GAAG,CAAC,IAAI,CACX,2DAA2D;gBACzD,IAAI,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,+BAA+B;gBAC/D,8BAA8B,CACjC,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,2EAA2E,CAAC,CAAC;IAC7F,CAAC;IAED,KAAK,CAAC,mBAAmB;QACvB,+CAA+C;IACjD,CAAC;IAED,oBAAoB;QAClB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,uBAAuB;QACrB,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,gBAAgB;QACd,OAAO,IAAI,CAAC;IACd,CAAC;IAED,yBAAyB;QACvB,0DAA0D;QAC1D,OAAO,IAAI,CAAC;IACd,CAAC;IAED,8EAA8E;IAC9E,gBAAgB;IAChB,8EAA8E;IAE9E,uBAAuB;QACrB,OAAO,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC;IACnD,CAAC;IAED,KAAK,CAAC,aAAa;QACjB,2EAA2E;QAC3E,2EAA2E;QAC3E,0CAA0C;IAC5C,CAAC;IAED,8EAA8E;IAC9E,QAAQ;IACR,8EAA8E;IAE9E,eAAe;QACb,4EAA4E;QAC5E,OAAO,IAAI,CAAC;IACd,CAAC;IAED,8EAA8E;IAC9E,SAAS;IACT,8EAA8E;IAE9E,MAAM,CAAU,uBAAuB;QACrC,OAAO;YACL,0EAA0E;YAC1E,0EAA0E;YAC1E,qEAAqE;YACrE,gBAAgB,EAAE,GAAG;YACrB,kEAAkE;YAClE,cAAc,EAAE,QAAQ;YACxB,iBAAiB,EAAE,KAAK;YACxB,YAAY,EAAE,KAAK;SACpB,CAAC;IACJ,CAAC;;AApHH,sCAqHC"}

package/dist/frameworks/static/templates/wrangler.json

@@ -0,0 +1,8 @@
+{
+  "name": "webflow-cloud-static-app",
+  "compatibility_date": "2025-03-03",
+  "assets": {
+    "directory": "assets",
+    "not_found_handling": "404-page"
+  }
+}

package/dist/frameworks/types.d.ts

@@ -0,0 +1,138 @@
+/**
+ * Shared types for framework builders.
+ *
+ * The notable change from the original cosmic-builder shape: `BuildContext`
+ * now carries the host-injected ports (logger, command runner, telemetry,
+ * filesystem) instead of a single concrete logger. That's what lets the same
+ * builders run unchanged in ECS, the CLI, and headless hosts.
+ */
+import type { DeploymentType } from '@webflow/cosmic-deploy-contract';
+import type { Logger, CommandRunner, Telemetry, FileSystemPort } from '../ports';
+import type { PackageJson as PackageJsonType } from '../config/package-json';
+import type { WebflowJson as WebflowJsonType } from '../config/webflow-json';
+export type { DeploymentType } from '@webflow/cosmic-deploy-contract';
+export type PackageJson = PackageJsonType;
+export type WebflowJson = WebflowJsonType;
+/** Build context passed to all builder methods. */
+export interface BuildContext {
+    /** Working directory — the ephemeral build workspace, not the user's source tree. */
+    cwd: string;
+    /** Logger port. */
+    log: Logger;
+    /** Command-runner port (npm, framework build, wrangler). */
+    runCommand: CommandRunner;
+    /** Telemetry port (no-op unless the host injects one). */
+    telemetry: Telemetry;
+    /** Filesystem port for workspace-level operations. */
+    fs: FileSystemPort;
+    /** Parsed package.json. */
+    packageJson: PackageJson;
+    /** Environment variables made available to build commands. Matches
+     *  `NodeJS.ProcessEnv` so producers can pass a process env directly without
+     *  first stripping `undefined` values. */
+    userEnv: NodeJS.ProcessEnv;
+    /** URL mount path the app is served under (a.k.a. COSMIC_MOUNT_PATH). */
+    mountPath?: string;
+    /** Deploy URL, substituted into generated framework config where needed. */
+    deployUrl?: string;
+}
+/** Framework identification. */
+export interface FrameworkInfo {
+    /** Framework name (e.g., "astro", "nextjs"). */
+    name: string;
+    /** Builder-supported version specifier (e.g., "5.x", "6.x"). Distinct from
+     *  `packageName`'s installed major. */
+    version: string;
+    /** Human-readable display name (e.g., "Astro 5", "Astro 6"). */
+    displayName: string;
+    /** npm package whose customer-installed major version is reported to telemetry.
+     *  Differs from `name` when the brand and npm package diverge (e.g. name='nextjs'
+     *  but packageName='next'). */
+    packageName: string;
+}
+/** Build output configuration — describes where build artifacts are located. */
+export interface BuildOutput {
+    /** Path to static assets to upload (e.g., 'dist/client' for Astro 6, 'dist' for Astro 5). */
+    staticAssetsPath: string;
+    /** Patterns to exclude from static assets (e.g., ['_worker.js']). */
+    staticAssetsExclude?: string[];
+    /** Path to the worker entry file (e.g., 'dist/server/entry.mjs' or
+     *  'dist/_worker.js/index.js'). Omitted for assets-only static apps, which
+     *  have no worker. */
+    workerEntryPath?: string;
+    /**
+     * Override for wrangler.json 'main' field if different from workerEntryPath.
+     * e.g., '@astrojs/cloudflare/entrypoints/server' for Astro 6.
+     */
+    wranglerMainOverride?: string;
+    /** Deployment type for wrangler configuration. */
+    deploymentType: DeploymentType;
+    /** Whether this framework uses the new Cloudflare assets binding approach. */
+    usesAssetsBinding?: boolean;
+    /**
+     * Whether to skip --no-bundle during deploy. Set to true for frameworks like
+     * Astro 6 that output multiple files (entry.mjs + chunks/) which need wrangler
+     * to bundle them together.
+     */
+    skipNoBundle?: boolean;
+    /**
+     * Set by the Astro 6/7 builders: `staticAssetsPath` already mirrors the served URL layout,
+     * including the mount. The generated astro.config sets `base = mountPath`, so a fixed
+     * `@astrojs/cloudflare` (>= 13.3.1 / all 14.x; withastro/astro#16276) nests the client tree
+     * under `<staticAssetsPath>/<mount>/`. `copyAssets` then copies `staticAssetsPath` verbatim
+     * into the assets root instead of the blind mount append used for Astro 5 / Next.js.
+     */
+    staticAssetsMirrorUrlLayout?: boolean;
+    /**
+     * The entry file path after wrangler dry-run bundles the worker. Frameworks
+     * produce different output filenames (Astro 5: './index.js', Astro 6:
+     * './entry.mjs', Next.js: './worker.js').
+     */
+    dryRunEntryPath?: string;
+}
+/** Cloudflare adapter package configuration. */
+export interface AdapterPackage {
+    /** Package name (e.g., '@astrojs/cloudflare'). */
+    name: string;
+    /** Version specifier (e.g., '^12.0.0' for Astro 5, '^13.0.0' for Astro 6). */
+    version: string;
+    /** Peer dependencies that should also be installed. */
+    peerDependencies?: string[];
+}
+/** Framework integration package. */
+export interface IntegrationPackage {
+    /** Package name (e.g., '@astrojs/react'). */
+    name: string;
+    /** Version specifier (e.g., '^4.0.0'). */
+    version: string;
+    /** Reason for requiring this package (optional). */
+    reason?: string;
+    /** Install as dev dependency (--save-dev) instead of regular dependency. */
+    dev?: boolean;
+}
+/** Webflow loader configuration. */
+export interface WebflowLoaderConfig {
+    /** Full path to the loader template. */
+    templatePath: string;
+    /** Destination filename (e.g., 'webflow-loader.ts'). */
+    destinationName: string;
+    /** Path to reference in framework config (e.g., './webflow-loader.ts'). */
+    configPath?: string;
+}
+/** Result from framework detection. */
+export interface DetectionResult {
+    /** Whether this builder can handle the project. */
+    detected: boolean;
+    /** Reason for detection (for logging). */
+    reason?: string;
+}
+/** Node.js version requirement. */
+export interface NodeVersionRequirement {
+    /** Minimum required version (e.g., "22.12.0"). */
+    minimum: string;
+    /** Recommended version (optional). */
+    recommended?: string;
+    /** Severity: 'warn' = may work but not guaranteed, 'error' = will definitely fail. */
+    severity: 'warn' | 'error';
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/frameworks/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/frameworks/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AAEtE,OAAO,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AACjF,OAAO,KAAK,EAAE,WAAW,IAAI,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAC7E,OAAO,KAAK,EAAE,WAAW,IAAI,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAE7E,YAAY,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AAGtE,MAAM,MAAM,WAAW,GAAG,eAAe,CAAC;AAC1C,MAAM,MAAM,WAAW,GAAG,eAAe,CAAC;AAM1C,mDAAmD;AACnD,MAAM,WAAW,YAAY;IAC3B,qFAAqF;IACrF,GAAG,EAAE,MAAM,CAAC;IACZ,mBAAmB;IACnB,GAAG,EAAE,MAAM,CAAC;IACZ,4DAA4D;IAC5D,UAAU,EAAE,aAAa,CAAC;IAC1B,0DAA0D;IAC1D,SAAS,EAAE,SAAS,CAAC;IACrB,sDAAsD;IACtD,EAAE,EAAE,cAAc,CAAC;IACnB,2BAA2B;IAC3B,WAAW,EAAE,WAAW,CAAC;IACzB;;8CAE0C;IAC1C,OAAO,EAAE,MAAM,CAAC,UAAU,CAAC;IAC3B,yEAAyE;IACzE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,4EAA4E;IAC5E,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAMD,gCAAgC;AAChC,MAAM,WAAW,aAAa;IAC5B,gDAAgD;IAChD,IAAI,EAAE,MAAM,CAAC;IACb;2CACuC;IACvC,OAAO,EAAE,MAAM,CAAC;IAChB,gEAAgE;IAChE,WAAW,EAAE,MAAM,CAAC;IACpB;;mCAE+B;IAC/B,WAAW,EAAE,MAAM,CAAC;CACrB;AAMD,gFAAgF;AAChF,MAAM,WAAW,WAAW;IAC1B,6FAA6F;IAC7F,gBAAgB,EAAE,MAAM,CAAC;IAEzB,qEAAqE;IACrE,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC;IAE/B;;0BAEsB;IACtB,eAAe,CAAC,EAAE,MAAM,CAAC;IAEzB;;;OAGG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAE9B,kDAAkD;IAClD,cAAc,EAAE,cAAc,CAAC;IAE/B,8EAA8E;IAC9E,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAE5B;;;;OAIG;IACH,YAAY,CAAC,EAAE,OAAO,CAAC;IAEvB;;;;;;OAMG;IACH,2BAA2B,CAAC,EAAE,OAAO,CAAC;IAEtC;;;;OAIG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAMD,gDAAgD;AAChD,MAAM,WAAW,cAAc;IAC7B,kDAAkD;IAClD,IAAI,EAAE,MAAM,CAAC;IACb,8EAA8E;IAC9E,OAAO,EAAE,MAAM,CAAC;IAChB,uDAAuD;IACvD,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC7B;AAED,qCAAqC;AACrC,MAAM,WAAW,kBAAkB;IACjC,6CAA6C;IAC7C,IAAI,EAAE,MAAM,CAAC;IACb,0CAA0C;IAC1C,OAAO,EAAE,MAAM,CAAC;IAChB,oDAAoD;IACpD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,4EAA4E;IAC5E,GAAG,CAAC,EAAE,OAAO,CAAC;CACf;AAED,oCAAoC;AACpC,MAAM,WAAW,mBAAmB;IAClC,wCAAwC;IACxC,YAAY,EAAE,MAAM,CAAC;IACrB,wDAAwD;IACxD,eAAe,EAAE,MAAM,CAAC;IACxB,2EAA2E;IAC3E,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAMD,uCAAuC;AACvC,MAAM,WAAW,eAAe;IAC9B,mDAAmD;IACnD,QAAQ,EAAE,OAAO,CAAC;IAClB,0CAA0C;IAC1C,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAMD,mCAAmC;AACnC,MAAM,WAAW,sBAAsB;IACrC,kDAAkD;IAClD,OAAO,EAAE,MAAM,CAAC;IAChB,sCAAsC;IACtC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,sFAAsF;IACtF,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;CAC5B"}

package/dist/frameworks/types.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=types.js.map

package/dist/frameworks/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/frameworks/types.ts"],"names":[],"mappings":""}

package/dist/frameworks/vite/index.d.ts

@@ -0,0 +1,46 @@
+import { FrameworkBuilder } from '../base';
+import type { BuildOutput, FrameworkInfo, PackageJson, WebflowJson, DetectionResult, AdapterPackage, IntegrationPackage, WebflowLoaderConfig, NodeVersionRequirement } from '../types';
+export declare class ViteBuilder extends FrameworkBuilder {
+    static frameworkName: string;
+    get info(): FrameworkInfo;
+    getFrameworkVersion(): string | undefined;
+    /**
+     * Detect if this is a Vite project.
+     *
+     * Checked last in the registry, so frameworks that use Vite internally
+     * (Astro) are detected first.
+     */
+    static detect(packageJson: PackageJson, webflowJson?: WebflowJson): DetectionResult;
+    validate(): Promise<void>;
+    getCloudflareAdapter(): AdapterPackage;
+    getRequiredIntegrations(): IntegrationPackage[];
+    installDependencies(): Promise<void>;
+    getWebflowLoader(): WebflowLoaderConfig | null;
+    getUserConfigPatterns(): string[];
+    getWranglerTemplatePath(): string;
+    getAdditionalConfigFiles(): string[];
+    /**
+     * If the user supplied their own wrangler with a custom `main` entrypoint
+     * (anything other than `./src/worker.ts`), return that value so we can
+     * preserve their server-side code. Returns null otherwise.
+     *
+     * Reads from `clouduser.wrangler.{json,jsonc}` — `handleWranglerJson` has
+     * already saved the user's original file there and overwritten the in-place
+     * `wrangler.json` with the framework template (which always declares
+     * `./src/worker.ts`), so reading the in-place file would always miss.
+     */
+    private getCustomWorkerEntry;
+    /**
+     * Create a minimal worker.ts if it doesn't exist.
+     *
+     * Some users only want a SPA (asset serving, no custom server-side code); in
+     * that case we write a minimal worker.ts that serves static assets. Called
+     * from prepareConfig only when the user doesn't have a custom worker entry.
+     */
+    private ensureWorkerEntry;
+    prepareConfig(): Promise<void>;
+    getBuildCommand(): string;
+    getNodeVersionRequirement(): NodeVersionRequirement | null;
+    static getOutputDeployMetadata(): BuildOutput;
+}
+//# sourceMappingURL=index.d.ts.map

package/dist/frameworks/vite/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/frameworks/vite/index.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAC3C,OAAO,KAAK,EACV,WAAW,EACX,aAAa,EACb,WAAW,EACX,WAAW,EACX,eAAe,EACf,cAAc,EACd,kBAAkB,EAClB,mBAAmB,EACnB,sBAAsB,EACvB,MAAM,UAAU,CAAC;AAOlB,qBAAa,WAAY,SAAQ,gBAAgB;IAC/C,OAAgB,aAAa,SAAU;IAMvC,IAAI,IAAI,IAAI,aAAa,CAOxB;IAEQ,mBAAmB,IAAI,MAAM,GAAG,SAAS;IAQlD;;;;;OAKG;WACa,MAAM,CAAC,WAAW,EAAE,WAAW,EAAE,WAAW,CAAC,EAAE,WAAW,GAAG,eAAe;IA2BtF,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAmB/B,oBAAoB,IAAI,cAAc;IAOtC,uBAAuB,IAAI,kBAAkB,EAAE;IAKzC,mBAAmB,IAAI,OAAO,CAAC,IAAI,CAAC;IAoC1C,gBAAgB,IAAI,mBAAmB,GAAG,IAAI;IAK9C,qBAAqB,IAAI,MAAM,EAAE;IAIjC,uBAAuB,IAAI,MAAM;IAIjC,wBAAwB,IAAI,MAAM,EAAE;IAIpC;;;;;;;;;OASG;IACH,OAAO,CAAC,oBAAoB;IAyB5B;;;;;;OAMG;IACH,OAAO,CAAC,iBAAiB;IA4BnB,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC;IA2DpC,eAAe,IAAI,MAAM;IAQzB,yBAAyB,IAAI,sBAAsB,GAAG,IAAI;WAW1C,uBAAuB,IAAI,WAAW;CAQvD"}