@webflow/cloud-app 0.1.0-beta.10

package/dist/compat-date.js

@@ -0,0 +1,169 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.COMPAT_DATE_RECORD_FILE = exports.COMPAT_DATE_FLOOR = void 0;
+exports.resolveCompatDate = resolveCompatDate;
+exports.applyCompatDateAtBuild = applyCompatDateAtBuild;
+/**
+ * Build-phase `compatibility_date` policy.
+ *
+ * wrangler bundles the worker at build time, and the date decides whether Node's
+ * `http`/`https` are inlined unenv polyfills or native imports. A bundle built at
+ * an old date still throws at a newer runtime date (so SDKs on Node's http client,
+ * like Sentry's server transport, silently drop data), and a bundle built at a new
+ * date fails to start at an old one. So the build settles the date once, on the
+ * `wrangler.json` it just copied from the framework template, and records it for
+ * the deploy, which applies the record and never decides a date itself.
+ *
+ * The policy is switched on by the host (the server's feature gate, via
+ * `compatDatePolicy`); off keeps today's behavior exactly.
+ */
+const fs = __importStar(require("node:fs"));
+const path = __importStar(require("node:path"));
+const bindings_1 = require("./bindings");
+/**
+ * Lowest `compatibility_date` the platform runs a worker at once the policy is on.
+ * workerd only provides a working `node:http` / `node:https` client from this date.
+ */
+exports.COMPAT_DATE_FLOOR = '2025-08-16';
+/**
+ * Where the build records the date it settled on, next to `clouduser.wrangler.json`
+ * (which already travels from the build to the deploy). Keep in sync with the
+ * deployer.
+ */
+exports.COMPAT_DATE_RECORD_FILE = 'clouduser.compat-date.json';
+function isValidDate(value) {
+    if (!/^\d{4}-\d{2}-\d{2}$/.test(value)) {
+        return false;
+    }
+    const parsed = new Date(`${value}T00:00:00Z`);
+    return !Number.isNaN(parsed.getTime()) && parsed.toISOString().slice(0, 10) === value;
+}
+/**
+ * Pure resolution of the date a worker is built and deployed with.
+ *
+ *   policy off                                     -> template date, unchanged
+ *   policy on, user date valid, <= today, >= floor -> user date
+ *   policy on, otherwise                           -> default, plus a warning if a
+ *                                                     user date was given but unusable
+ *
+ * where default = the template date if it is a valid date at or above the floor,
+ * else the floor.
+ */
+function resolveCompatDate(inputs) {
+    const { templateDate, userDate, policyEnabled } = inputs;
+    const today = (inputs.now ?? new Date()).toISOString().slice(0, 10);
+    if (!policyEnabled) {
+        return { date: templateDate, source: 'template' };
+    }
+    const templateUsable = isValidDate(templateDate) && templateDate >= exports.COMPAT_DATE_FLOOR;
+    const fallback = templateUsable
+        ? { date: templateDate, source: 'template' }
+        : { date: exports.COMPAT_DATE_FLOOR, source: 'floor' };
+    if (userDate === undefined) {
+        return fallback;
+    }
+    let problem;
+    if (!isValidDate(userDate)) {
+        problem = 'is not a valid YYYY-MM-DD date';
+    }
+    else if (userDate > today) {
+        problem = 'is in the future';
+    }
+    else if (userDate < exports.COMPAT_DATE_FLOOR) {
+        problem = `is below the platform minimum ${exports.COMPAT_DATE_FLOOR}`;
+    }
+    if (problem) {
+        return {
+            ...fallback,
+            warning: `compatibility_date ${userDate} in your wrangler config ${problem}, using ${fallback.date}`,
+        };
+    }
+    return { date: userDate, source: 'user' };
+}
+function recordPath(cwd) {
+    return path.join(cwd, exports.COMPAT_DATE_RECORD_FILE);
+}
+/**
+ * Settles the date on `<cwd>/wrangler.json` (just copied from the framework
+ * template) and records it for the deploy.
+ *
+ * `userCompatDate` is the date from the user's own wrangler config, if any. The
+ * bindings-bridge placeholder is not a user choice and is ignored. With the policy
+ * off nothing changes and no record is written; a record already in the checkout is
+ * removed either way, because the deploy trusts that file and a repo must not be
+ * able to supply it.
+ *
+ * Never throws: an error keeps the template date and logs a warning, so this cannot
+ * fail a build.
+ */
+function applyCompatDateAtBuild(log, cwd, userCompatDate, opts = {}) {
+    try {
+        fs.rmSync(recordPath(cwd), { force: true });
+        const wranglerPath = path.join(cwd, 'wrangler.json');
+        const generated = JSON.parse(fs.readFileSync(wranglerPath, 'utf8'));
+        const templateDate = generated.compatibility_date;
+        const userDate = userCompatDate === bindings_1.BINDINGS_BRIDGE_COMPAT_DATE ? undefined : userCompatDate;
+        const policyEnabled = opts.policyEnabled === true;
+        const resolution = resolveCompatDate({ templateDate, userDate, policyEnabled, now: opts.now });
+        log.info(`compatibility_date: ${resolution.date} (${resolution.source}; policy ${policyEnabled ? 'on' : 'off'}, template ${templateDate}${userDate ? `, user ${userDate}` : ''})`);
+        if (resolution.warning) {
+            log.warn(resolution.warning);
+        }
+        if (policyEnabled) {
+            if (resolution.date !== templateDate) {
+                generated.compatibility_date = resolution.date;
+                fs.writeFileSync(wranglerPath, `${JSON.stringify(generated, null, 2)}\n`);
+            }
+            const record = {
+                compatibilityDate: resolution.date,
+                source: resolution.source,
+            };
+            fs.writeFileSync(recordPath(cwd), JSON.stringify(record));
+        }
+        return resolution;
+    }
+    catch (err) {
+        log.warn(`could not apply the compatibility_date policy, keeping the template date: ${err}`);
+        try {
+            fs.rmSync(recordPath(cwd), { force: true });
+        }
+        catch {
+            // nothing more to do
+        }
+        return undefined;
+    }
+}
+//# sourceMappingURL=compat-date.js.map

package/dist/compat-date.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"compat-date.js","sourceRoot":"","sources":["../src/compat-date.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAkFA,8CAgCC;AAmBD,wDA6CC;AAlLD;;;;;;;;;;;;;GAaG;AACH,4CAA8B;AAC9B,gDAAkC;AAGlC,yCAAyD;AAEzD;;;GAGG;AACU,QAAA,iBAAiB,GAAG,YAAY,CAAC;AAE9C;;;;GAIG;AACU,QAAA,uBAAuB,GAAG,4BAA4B,CAAC;AAgCpE,SAAS,WAAW,CAAC,KAAa;IAChC,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACvC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,GAAG,KAAK,YAAY,CAAC,CAAC;IAC9C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,CAAC;AACxF,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAgB,iBAAiB,CAAC,MAAwB;IACxD,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,aAAa,EAAE,GAAG,MAAM,CAAC;IACzD,MAAM,KAAK,GAAG,CAAC,MAAM,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAEpE,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IACpD,CAAC;IAED,MAAM,cAAc,GAAG,WAAW,CAAC,YAAY,CAAC,IAAI,YAAY,IAAI,yBAAiB,CAAC;IACtF,MAAM,QAAQ,GAAyB,cAAc;QACnD,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE;QAC5C,CAAC,CAAC,EAAE,IAAI,EAAE,yBAAiB,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IAEjD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,IAAI,OAA2B,CAAC;IAChC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3B,OAAO,GAAG,gCAAgC,CAAC;IAC7C,CAAC;SAAM,IAAI,QAAQ,GAAG,KAAK,EAAE,CAAC;QAC5B,OAAO,GAAG,kBAAkB,CAAC;IAC/B,CAAC;SAAM,IAAI,QAAQ,GAAG,yBAAiB,EAAE,CAAC;QACxC,OAAO,GAAG,iCAAiC,yBAAiB,EAAE,CAAC;IACjE,CAAC;IACD,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO;YACL,GAAG,QAAQ;YACX,OAAO,EAAE,sBAAsB,QAAQ,4BAA4B,OAAO,WAAW,QAAQ,CAAC,IAAI,EAAE;SACrG,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AAC5C,CAAC;AAED,SAAS,UAAU,CAAC,GAAW;IAC7B,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,+BAAuB,CAAC,CAAC;AACjD,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAgB,sBAAsB,CACpC,GAAW,EACX,GAAW,EACX,cAAkC,EAClC,OAAgD,EAAE;IAElD,IAAI,CAAC;QACH,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAE5C,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;QACrD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC;QACpE,MAAM,YAAY,GAAW,SAAS,CAAC,kBAAkB,CAAC;QAC1D,MAAM,QAAQ,GAAG,cAAc,KAAK,sCAA2B,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC;QAC7F,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,KAAK,IAAI,CAAC;QAElD,MAAM,UAAU,GAAG,iBAAiB,CAAC,EAAE,YAAY,EAAE,QAAQ,EAAE,aAAa,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAE/F,GAAG,CAAC,IAAI,CACN,uBAAuB,UAAU,CAAC,IAAI,KAAK,UAAU,CAAC,MAAM,YAAY,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,cAAc,YAAY,GAAG,QAAQ,CAAC,CAAC,CAAC,UAAU,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CACzK,CAAC;QACF,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;YACvB,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAC/B,CAAC;QAED,IAAI,aAAa,EAAE,CAAC;YAClB,IAAI,UAAU,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBACrC,SAAS,CAAC,kBAAkB,GAAG,UAAU,CAAC,IAAI,CAAC;gBAC/C,EAAE,CAAC,aAAa,CAAC,YAAY,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;YAC5E,CAAC;YACD,MAAM,MAAM,GAAqB;gBAC/B,iBAAiB,EAAE,UAAU,CAAC,IAAI;gBAClC,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC;YACF,EAAE,CAAC,aAAa,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QAC5D,CAAC;QACD,OAAO,UAAU,CAAC;IACpB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,IAAI,CAAC,6EAA6E,GAAG,EAAE,CAAC,CAAC;QAC7F,IAAI,CAAC;YACH,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9C,CAAC;QAAC,MAAM,CAAC;YACP,qBAAqB;QACvB,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC"}

package/dist/config/package-json.d.ts

@@ -0,0 +1,57 @@
+import { z } from 'zod';
+/**
+ * Package.json schema (minimal fields we need).
+ *
+ * Only the fields used by the framework builder are validated here.
+ */
+export declare const PackageJsonSchema: z.ZodObject<{
+    /** Package name */
+    name: z.ZodOptional<z.ZodString>;
+    /** Package version */
+    version: z.ZodOptional<z.ZodString>;
+    /** Production dependencies (package name -> version specifier) */
+    dependencies: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    /** Development dependencies (package name -> version specifier) */
+    devDependencies: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    /** Runtime declarations. `node` is deliberately retained as unknown so the
+     * toolchain resolver can warn and fall back for a malformed customer
+     * declaration rather than rejecting the entire package.json. */
+    engines: z.ZodOptional<z.ZodObject<{
+        node: z.ZodOptional<z.ZodUnknown>;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        node: z.ZodOptional<z.ZodUnknown>;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        node: z.ZodOptional<z.ZodUnknown>;
+    }, z.ZodTypeAny, "passthrough">>>;
+}, "strip", z.ZodTypeAny, {
+    name?: string | undefined;
+    version?: string | undefined;
+    dependencies?: Record<string, string> | undefined;
+    devDependencies?: Record<string, string> | undefined;
+    engines?: z.objectOutputType<{
+        node: z.ZodOptional<z.ZodUnknown>;
+    }, z.ZodTypeAny, "passthrough"> | undefined;
+}, {
+    name?: string | undefined;
+    version?: string | undefined;
+    dependencies?: Record<string, string> | undefined;
+    devDependencies?: Record<string, string> | undefined;
+    engines?: z.objectInputType<{
+        node: z.ZodOptional<z.ZodUnknown>;
+    }, z.ZodTypeAny, "passthrough"> | undefined;
+}>;
+/**
+ * Package.json structure (minimal fields we need).
+ */
+export type PackageJson = z.infer<typeof PackageJsonSchema>;
+/**
+ * Load and validate package.json from `cwd`. Returns `undefined` when the file
+ * is absent.
+ *
+ * NOTE: unlike the original cosmic-builder implementation this does NOT cache
+ * across calls — a single long-lived host process (the server-side builder, an
+ * MCP server) builds many different projects, so a module-level cache would
+ * leak one project's package.json into the next build.
+ */
+export declare function loadPackageJson(cwd: string): PackageJson | undefined;
+//# sourceMappingURL=package-json.d.ts.map

package/dist/config/package-json.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"package-json.d.ts","sourceRoot":"","sources":["../../src/config/package-json.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;GAIG;AACH,eAAO,MAAM,iBAAiB;IAC5B,mBAAmB;;IAEnB,sBAAsB;;IAEtB,kEAAkE;;IAElE,mEAAmE;;IAEnE;;oEAEgE;;;;;;;;;;;;;;;;;;;;;;;;EAOhE,CAAC;AAEH;;GAEG;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS,CAoBpE"}

package/dist/config/package-json.js

@@ -0,0 +1,94 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PackageJsonSchema = void 0;
+exports.loadPackageJson = loadPackageJson;
+const fs = __importStar(require("node:fs"));
+const path = __importStar(require("node:path"));
+const zod_1 = require("zod");
+/**
+ * Package.json schema (minimal fields we need).
+ *
+ * Only the fields used by the framework builder are validated here.
+ */
+exports.PackageJsonSchema = zod_1.z.object({
+    /** Package name */
+    name: zod_1.z.string().optional(),
+    /** Package version */
+    version: zod_1.z.string().optional(),
+    /** Production dependencies (package name -> version specifier) */
+    dependencies: zod_1.z.record(zod_1.z.string()).optional(),
+    /** Development dependencies (package name -> version specifier) */
+    devDependencies: zod_1.z.record(zod_1.z.string()).optional(),
+    /** Runtime declarations. `node` is deliberately retained as unknown so the
+     * toolchain resolver can warn and fall back for a malformed customer
+     * declaration rather than rejecting the entire package.json. */
+    engines: zod_1.z
+        .object({
+        node: zod_1.z.unknown().optional(),
+    })
+        .passthrough()
+        .optional(),
+});
+/**
+ * Load and validate package.json from `cwd`. Returns `undefined` when the file
+ * is absent.
+ *
+ * NOTE: unlike the original cosmic-builder implementation this does NOT cache
+ * across calls — a single long-lived host process (the server-side builder, an
+ * MCP server) builds many different projects, so a module-level cache would
+ * leak one project's package.json into the next build.
+ */
+function loadPackageJson(cwd) {
+    const filePath = path.join(cwd, 'package.json');
+    if (!fs.statSync(filePath, { throwIfNoEntry: false })) {
+        return undefined;
+    }
+    const raw = fs.readFileSync(filePath).toString('utf8');
+    let unparsed;
+    try {
+        unparsed = JSON.parse(raw);
+    }
+    catch (e) {
+        throw new Error(`package.json was not valid JSON`, { cause: e });
+    }
+    try {
+        return exports.PackageJsonSchema.parse(unparsed);
+    }
+    catch (e) {
+        throw new Error('package.json schema validation failed', { cause: e });
+    }
+}
+//# sourceMappingURL=package-json.js.map

package/dist/config/package-json.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"package-json.js","sourceRoot":"","sources":["../../src/config/package-json.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4CA,0CAoBC;AAhED,4CAA8B;AAC9B,gDAAkC;AAElC,6BAAwB;AAExB;;;;GAIG;AACU,QAAA,iBAAiB,GAAG,OAAC,CAAC,MAAM,CAAC;IACxC,mBAAmB;IACnB,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,sBAAsB;IACtB,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,kEAAkE;IAClE,YAAY,EAAE,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC7C,mEAAmE;IACnE,eAAe,EAAE,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAChD;;oEAEgE;IAChE,OAAO,EAAE,OAAC;SACP,MAAM,CAAC;QACN,IAAI,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;KAC7B,CAAC;SACD,WAAW,EAAE;SACb,QAAQ,EAAE;CACd,CAAC,CAAC;AAOH;;;;;;;;GAQG;AACH,SAAgB,eAAe,CAAC,GAAW;IACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IAChD,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QACtD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAEvD,IAAI,QAAiB,CAAC;IACtB,IAAI,CAAC;QACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,iCAAiC,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;IACnE,CAAC;IAED,IAAI,CAAC;QACH,OAAO,yBAAiB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC3C,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,uCAAuC,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;IACzE,CAAC;AACH,CAAC"}

package/dist/config/webflow-json.d.ts

@@ -0,0 +1,47 @@
+import type { Logger } from '../ports';
+import type { WebflowBindings } from '../bindings';
+/**
+ * Build-time, permissive view of webflow.json.
+ *
+ * The user's source webflow.json may not yet contain a complete deploy
+ * contract — that's emitted by `createWebflowJson` later in the build. Reads
+ * here treat every field as optional and `framework` as an arbitrary `string`
+ * (it's user input until the contract validates it at deploy time).
+ *
+ * Deploy-time reads MUST use `validateForDeploy` from
+ * `@webflow/cosmic-deploy-contract`, which is strict and fails fast on contract
+ * violations. Do not introduce a second permissive deploy reader here.
+ */
+export type WebflowJson = {
+    cloud?: {
+        /** User-specified or producer-written framework hint. Validated strictly only at deploy time. */
+        framework?: string;
+        contract_version?: string;
+        framework_version?: string;
+        entrypoint_path?: string;
+        deployment_type?: string;
+        skip_no_bundle?: boolean;
+        /**
+         * User-declared KV / R2 / D1 bindings. The single user-facing place to
+         * declare bindings (replacing hand-written wrangler.json). Parsed/validated
+         * by `bindings.ts` and synthesized into the wrangler bridge at build time.
+         */
+        bindings?: WebflowBindings;
+        /**
+         * Build-only: URL prefix for static assets. NOT part of the deploy contract.
+         */
+        assets_path_prefix?: string;
+        [key: string]: unknown;
+    };
+    [key: string]: unknown;
+};
+/**
+ * Load and JSONC-parse webflow.json (or webflow.jsonc) at `cwd`.
+ *
+ * Returns `undefined` when the file is absent or fails to parse as JSONC.
+ * Intentionally permissive — used by build-phase code that reads optional hints
+ * (user-specified framework, build-only flags). The deploy phase uses
+ * `validateForDeploy` from the contract package instead.
+ */
+export declare function loadWebflowJson(log: Logger, cwd: string, file?: string): WebflowJson | undefined;
+//# sourceMappingURL=webflow-json.d.ts.map

package/dist/config/webflow-json.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webflow-json.d.ts","sourceRoot":"","sources":["../../src/config/webflow-json.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AACvC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAEnD;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,WAAW,GAAG;IACxB,KAAK,CAAC,EAAE;QACN,iGAAiG;QACjG,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAC1B,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAC3B,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,cAAc,CAAC,EAAE,OAAO,CAAC;QACzB;;;;WAIG;QACH,QAAQ,CAAC,EAAE,eAAe,CAAC;QAC3B;;WAEG;QACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;QAC5B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;KACxB,CAAC;IACF,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB,CAAC;AAEF;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAC7B,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,MAAM,EACX,IAAI,SAAiB,GACpB,WAAW,GAAG,SAAS,CAyBzB"}

package/dist/config/webflow-json.js

@@ -0,0 +1,72 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.loadWebflowJson = loadWebflowJson;
+const fs = __importStar(require("node:fs"));
+const path = __importStar(require("node:path"));
+const jsonc = __importStar(require("jsonc-parser"));
+/**
+ * Load and JSONC-parse webflow.json (or webflow.jsonc) at `cwd`.
+ *
+ * Returns `undefined` when the file is absent or fails to parse as JSONC.
+ * Intentionally permissive — used by build-phase code that reads optional hints
+ * (user-specified framework, build-only flags). The deploy phase uses
+ * `validateForDeploy` from the contract package instead.
+ */
+function loadWebflowJson(log, cwd, file = 'webflow.json') {
+    const filePath = path.join(cwd, file);
+    if (!fs.statSync(filePath, { throwIfNoEntry: false })) {
+        if (file.endsWith('.json')) {
+            return loadWebflowJson(log, cwd, file + 'c');
+        }
+        return undefined;
+    }
+    const raw = fs.readFileSync(filePath).toString('utf8');
+    let parsed;
+    try {
+        parsed = jsonc.parse(raw);
+    }
+    catch (e) {
+        log?.error(`loaded but could not parse as JSONC ${filePath} ${JSON.stringify(raw)}: ${e}`);
+        return undefined;
+    }
+    if (typeof parsed !== 'object' || parsed === null || Array.isArray(parsed)) {
+        log?.error(`${filePath} is not a JSON object`);
+        return undefined;
+    }
+    log.debug(`loaded ${filePath}: ${JSON.stringify(parsed)}`);
+    return parsed;
+}
+//# sourceMappingURL=webflow-json.js.map

package/dist/config/webflow-json.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webflow-json.js","sourceRoot":"","sources":["../../src/config/webflow-json.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAoDA,0CA6BC;AAjFD,4CAA8B;AAC9B,gDAAkC;AAElC,oDAAsC;AAyCtC;;;;;;;GAOG;AACH,SAAgB,eAAe,CAC7B,GAAW,EACX,GAAW,EACX,IAAI,GAAG,cAAc;IAErB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACtC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QACtD,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3B,OAAO,eAAe,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,GAAG,GAAG,CAAC,CAAC;QAC/C,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACvD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,GAAG,EAAE,KAAK,CAAC,uCAAuC,QAAQ,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC3F,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3E,GAAG,EAAE,KAAK,CAAC,GAAG,QAAQ,uBAAuB,CAAC,CAAC;QAC/C,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,GAAG,CAAC,KAAK,CAAC,UAAU,QAAQ,KAAK,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC3D,OAAO,MAAqB,CAAC;AAC/B,CAAC"}

package/dist/create-webflow-json.d.ts

@@ -0,0 +1,21 @@
+import { type DeployContractV1 } from '@webflow/cosmic-deploy-contract';
+import type { Logger } from './ports';
+import type { FrameworkBuilder } from './frameworks/base';
+import type { BuilderClass } from './frameworks/registry';
+/**
+ * Compute the cloud.* fields createWebflowJson would write for a given framework.
+ *
+ * The returned object satisfies `DeployContractV1` for the contract fields the
+ * deployer reads.
+ */
+export declare function deriveCloudFields(frameworkName: string, builder: FrameworkBuilder | BuilderClass): DeployContractV1;
+/**
+ * Create or update webflow.json with the detected framework and build output
+ * info.
+ *
+ * Accepts either a FrameworkBuilder instance (build phase) or a BuilderClass
+ * (no BuildContext available). When the existing webflow.json already matches
+ * the canonical metadata, no write happens. Otherwise the diff is logged.
+ */
+export declare function createWebflowJson(log: Logger, cwd: string, frameworkName: string, builder: FrameworkBuilder | BuilderClass): void;
+//# sourceMappingURL=create-webflow-json.d.ts.map

package/dist/create-webflow-json.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-webflow-json.d.ts","sourceRoot":"","sources":["../src/create-webflow-json.ts"],"names":[],"mappings":"AAYA,OAAO,EAEL,KAAK,gBAAgB,EAEtB,MAAM,iCAAiC,CAAC;AAEzC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAEtC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAC1D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAE1D;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAC/B,aAAa,EAAE,MAAM,EACrB,OAAO,EAAE,gBAAgB,GAAG,YAAY,GACvC,gBAAgB,CAqClB;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,MAAM,EACX,aAAa,EAAE,MAAM,EACrB,OAAO,EAAE,gBAAgB,GAAG,YAAY,GACvC,IAAI,CA8EN"}

package/dist/create-webflow-json.js

@@ -0,0 +1,168 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.deriveCloudFields = deriveCloudFields;
+exports.createWebflowJson = createWebflowJson;
+/**
+ * webflow.json writer.
+ *
+ * `createWebflowJson` derives the canonical `cloud.*` deploy-contract fields
+ * from the detected framework's build metadata, writes them into the project's
+ * webflow.json (preserving any other keys), and runs a producer self-check via
+ * `validateForDeploy` so a builder bug fails the build immediately rather than
+ * slipping through to deploy time.
+ */
+const fs = __importStar(require("node:fs"));
+const path = __importStar(require("node:path"));
+const cosmic_deploy_contract_1 = require("@webflow/cosmic-deploy-contract");
+/**
+ * Compute the cloud.* fields createWebflowJson would write for a given framework.
+ *
+ * The returned object satisfies `DeployContractV1` for the contract fields the
+ * deployer reads.
+ */
+function deriveCloudFields(frameworkName, builder) {
+    const output = typeof builder === 'function'
+        ? builder.getOutputDeployMetadata()
+        : builder.getOutputDeployMetadata();
+    const cloud = {
+        contract_version: '1',
+        // Narrowed by the contract's Framework enum at the validateForDeploy
+        // self-check — if a builder returns an unrecognized name, the write fails fast.
+        framework: frameworkName,
+        deployment_type: output.deploymentType,
+        // Contract requires a boolean; normalize undefined to false.
+        skip_no_bundle: output.skipNoBundle === true,
+    };
+    // Assets-only apps (static, no framework) have no worker, so they carry no
+    // entrypoint_path — the contract allows it to be omitted. Every other
+    // deployment type has a worker entry: `dryRunEntryPath` points at the file
+    // produced by `wrangler deploy --dry-run` (Astro 5: ./index.js, Astro 6:
+    // ./entry.mjs, Next.js: ./worker.js), defaulting to ./index.js.
+    if (output.deploymentType !== 'static') {
+        cloud.entrypoint_path = output.dryRunEntryPath ?? './index.js';
+    }
+    // framework_version is optional under the contract. It's an instance-only
+    // capability (reads the user's package.json via the builder's ctx), so it's
+    // only available for the build-phase instance path — not the deploy-phase
+    // BuilderClass path. Omitted when unresolvable (e.g. `workspace:*`, `latest`).
+    if (typeof builder !== 'function') {
+        const frameworkVersion = builder.getFrameworkVersion();
+        if (frameworkVersion) {
+            cloud.framework_version = frameworkVersion;
+        }
+    }
+    return cloud;
+}
+/**
+ * Create or update webflow.json with the detected framework and build output
+ * info.
+ *
+ * Accepts either a FrameworkBuilder instance (build phase) or a BuilderClass
+ * (no BuildContext available). When the existing webflow.json already matches
+ * the canonical metadata, no write happens. Otherwise the diff is logged.
+ */
+function createWebflowJson(log, cwd, frameworkName, builder) {
+    const webflowJsonPath = path.join(cwd, 'webflow.json');
+    // Start with existing webflow.json if present, or create new. If the file is
+    // malformed JSON we log and overwrite.
+    let webflowJson = { cloud: {} };
+    if (fs.existsSync(webflowJsonPath)) {
+        try {
+            const raw = fs.readFileSync(webflowJsonPath, 'utf8');
+            webflowJson = JSON.parse(raw);
+            if (!webflowJson.cloud || typeof webflowJson.cloud !== 'object') {
+                log.warn('webflow.json is missing "cloud" property, adding it');
+                webflowJson.cloud = {};
+            }
+        }
+        catch (e) {
+            log.warn(`Failed to parse existing webflow.json, overwriting: ${e}`);
+            webflowJson = { cloud: {} };
+        }
+    }
+    const existing = webflowJson.cloud;
+    const desired = deriveCloudFields(frameworkName, builder);
+    // Compare existing vs desired and log either a diff or a "no change" message.
+    const changed = [];
+    const trackedKeys = [
+        'contract_version',
+        'framework',
+        'framework_version',
+        'deployment_type',
+        'entrypoint_path',
+        'skip_no_bundle',
+    ];
+    for (const key of trackedKeys) {
+        if (existing[key] !== desired[key]) {
+            changed.push(`${key}: ${JSON.stringify(existing[key])} -> ${JSON.stringify(desired[key])}`);
+        }
+    }
+    // Retired build-only flag; a stale copy from an earlier version must not be re-emitted. Its
+    // presence counts as a change so the file is rewritten even when it is the only difference.
+    if ('assets_source_skip_mount_path' in existing) {
+        changed.push('assets_source_skip_mount_path: removed (retired)');
+    }
+    if (changed.length === 0) {
+        log.info('webflow.json output metadata is correct, skipping write');
+    }
+    else {
+        log.info(`webflow.json output metadata changed: ${changed.join(', ')}`);
+        // Apply desired values, preserving any other keys (e.g. assets_path_prefix).
+        Object.assign(existing, desired);
+        delete existing.assets_source_skip_mount_path;
+    }
+    // Self-check: a producer should never write a file that fails the deploy
+    // contract. Throw here so a builder bug surfaces during build, not deploy.
+    try {
+        (0, cosmic_deploy_contract_1.validateForDeploy)(webflowJson);
+        log.info('✅ producer self-check passed (cosmic-deploy-contract v1)');
+    }
+    catch (e) {
+        if (e instanceof cosmic_deploy_contract_1.ContractError && e.issues.length > 0) {
+            log.error('⛔ producer self-check FAILED (cosmic-deploy-contract v1):');
+            for (const issue of e.issues) {
+                const issuePath = issue.path.length > 0 ? issue.path.join('.') : '<root>';
+                log.error(`     ${issuePath}: ${issue.message}`);
+            }
+        }
+        throw e;
+    }
+    if (changed.length > 0) {
+        log.info(`Writing webflow.json with framework: ${frameworkName}`);
+        fs.writeFileSync(webflowJsonPath, JSON.stringify(webflowJson, null, 2));
+    }
+}
+//# sourceMappingURL=create-webflow-json.js.map