@weft-js/cli 0.1.1 → 0.1.2

package/src/contributions.mjs

@@ -9,7 +9,12 @@ const byName = (a, b) => (a.name < b.name ? -1 : a.name > b.name ? 1 : 0)
 function stable(value) {
   return JSON.stringify(value, (_, v) => {
     if (typeof v === 'function') return `[function ${v.name}]`
-    if (v && typeof v === 'object' && !Array.isArray(v)) return Object.fromEntries(Object.keys(v).sort().map(k => [k, v[k]]))
+    if (v && typeof v === 'object' && !Array.isArray(v))
+      return Object.fromEntries(
+        Object.keys(v)
+          .sort()
+          .map((k) => [k, v[k]]),
+      )
     return v
   })
 }
@@ -27,43 +32,88 @@ export function contributions(plugins, report, env) {
   const catalogOwner = new Map()
   for (const p of [...plugins].sort(byName)) {
     if (typeof p.contribute !== 'function') continue
-    const run = () => p.contribute({ command: env.command ?? 'check', mode: 'development', root: env.root })
+    const run = () =>
+      p.contribute({ command: env.command ?? 'check', mode: 'development', root: env.root })
     let manifest
     try {
       manifest = run()
     } catch (error) {
       const code = typeof error?.code === 'string' ? error.code : 'P007'
-      report(code, `\`${p.name}\`: ${String(error?.message ?? error).split('\n')[0]}`, p.name, { owner: code === 'P007' ? 'core' : p.name, help: error?.help })
+      report(code, `\`${p.name}\`: ${String(error?.message ?? error).split('\n')[0]}`, p.name, {
+        owner: code === 'P007' ? 'core' : p.name,
+        help: error?.help,
+      })
       continue
     }
     let again
     try {
       again = run()
     } catch {}
-    if (!again || stable(again) !== stable(manifest)) report('P117', `\`${p.name}\`'s contribute() returned a different manifest on a second call.`, p.name)
+    if (!again || stable(again) !== stable(manifest))
+      report(
+        'P117',
+        `\`${p.name}\`'s contribute() returned a different manifest on a second call.`,
+        p.name,
+      )
 
-    const ns = p.namespace ?? `${p.name.replace(/^@[^/]+\//, '').replace(/^plugin-/, '')}/`
-    for (const d of manifest.diagnostics ?? []) {
-      if (!d.code.startsWith(ns)) report('P111', `\`${p.name}\` declares \`${d.code}\`, outside its namespace \`${ns}\`.`, p.name)
-    }
-    const agents = manifest.agents
-    if (agents) {
-      const bytes = Buffer.byteLength(agentsSection(agents))
-      if (bytes > agentsLimit) report('P112', `\`${p.name}\`'s AGENTS section is ${bytes} bytes (limit ${agentsLimit}).`, p.name)
-    }
-    if ((manifest.map?.length ?? 0) > mapLimit) report('P112', `\`${p.name}\` adds ${manifest.map.length} map rows (limit ${mapLimit}).`, p.name)
-    const tns = manifest.tokens?.namespace
-    if (tns) {
-      if (tokenOwner.has(tns)) report('P113', `Token namespace \`${tns}\` is contributed by both \`${tokenOwner.get(tns)}\` and \`${p.name}\`.`, p.name)
-      else tokenOwner.set(tns, p.name)
-    }
-    for (const c of manifest.catalog ?? []) {
-      if (catalogOwner.has(c.name)) report('P113', `Catalog entry \`${c.name}\` is contributed by both \`${catalogOwner.get(c.name)}\` and \`${p.name}\`.`, p.name)
-      else catalogOwner.set(c.name, p.name)
-    }
-    out.push({ name: p.name, version: p.version, namespace: ns, permissions: p.permissions ?? {}, manifest })
+    const ns = checkManifest(p, manifest, report, tokenOwner, catalogOwner)
+    out.push({
+      name: p.name,
+      version: p.version,
+      namespace: ns,
+      permissions: p.permissions ?? {},
+      manifest,
+    })
   }
   return out
 }
 
-export const agentsSection = agents => `### ${agents.title}\n\n${agents.text.trim()}\n`
+function checkManifest(p, manifest, report, tokenOwner, catalogOwner) {
+  const ns = p.namespace ?? `${p.name.replace(/^@[^/]+\//, '').replace(/^plugin-/, '')}/`
+  for (const d of manifest.diagnostics ?? []) {
+    if (!d.code.startsWith(ns))
+      report(
+        'P111',
+        `\`${p.name}\` declares \`${d.code}\`, outside its namespace \`${ns}\`.`,
+        p.name,
+      )
+  }
+  const agents = manifest.agents
+  if (agents) {
+    const bytes = Buffer.byteLength(agentsSection(agents))
+    if (bytes > agentsLimit)
+      report(
+        'P112',
+        `\`${p.name}\`'s AGENTS section is ${bytes} bytes (limit ${agentsLimit}).`,
+        p.name,
+      )
+  }
+  if ((manifest.map?.length ?? 0) > mapLimit)
+    report(
+      'P112',
+      `\`${p.name}\` adds ${manifest.map.length} map rows (limit ${mapLimit}).`,
+      p.name,
+    )
+  const tns = manifest.tokens?.namespace
+  if (tns) {
+    if (tokenOwner.has(tns))
+      report(
+        'P113',
+        `Token namespace \`${tns}\` is contributed by both \`${tokenOwner.get(tns)}\` and \`${p.name}\`.`,
+        p.name,
+      )
+    else tokenOwner.set(tns, p.name)
+  }
+  for (const c of manifest.catalog ?? []) {
+    if (catalogOwner.has(c.name))
+      report(
+        'P113',
+        `Catalog entry \`${c.name}\` is contributed by both \`${catalogOwner.get(c.name)}\` and \`${p.name}\`.`,
+        p.name,
+      )
+    else catalogOwner.set(c.name, p.name)
+  }
+  return ns
+}
+
+export const agentsSection = (agents) => `### ${agents.title}\n\n${agents.text.trim()}\n`

package/src/db-layer.mjs

@@ -6,12 +6,15 @@ import { loadConfig } from './load-config.mjs'
 
 /** The app's data layer: the plugin that declares one, or Drizzle, which is built in. Null with no database. */
 export async function dbLayer(root, loaded) {
-  const { contributions = [] } = loaded ?? await loadConfig(root)
-  const plugin = contributions.find(c => c.manifest.db)?.manifest.db
+  const { contributions = [] } = loaded ?? (await loadConfig(root))
+  const plugin = contributions.find((c) => c.manifest.db)?.manifest.db
   if (plugin) return plugin
   // Drizzle has no plugin to say so: its config file, or a client from `@weft-js/start/db/*`, does.
   const entry = join(root, 'src/db/index.server.ts')
-  return existsSync(join(root, 'drizzle.config.ts')) || (existsSync(entry) && readFileSync(entry, 'utf8').includes('@weft-js/start/db/')) ? DRIZZLE : null
+  return existsSync(join(root, 'drizzle.config.ts')) ||
+    (existsSync(entry) && readFileSync(entry, 'utf8').includes('@weft-js/start/db/'))
+    ? DRIZZLE
+    : null
 }
 
 const DRIZZLE = {
@@ -24,10 +27,15 @@ const DRIZZLE = {
       const req = createRequire(join(root, 'package.json'))
       bin = join(dirname(req.resolve('drizzle-kit')), 'bin.cjs')
     } catch {
-      throw Object.assign(new Error('drizzle-kit is not installed in this project'), { code: 'E_USAGE' })
+      throw Object.assign(new Error('drizzle-kit is not installed in this project'), {
+        code: 'E_USAGE',
+      })
     }
     const r = spawnSync(process.execPath, [bin, 'generate'], { cwd: root, encoding: 'utf8' })
-    if (r.status !== 0) throw Object.assign(new Error(`drizzle-kit generate failed:\n${r.stdout}${r.stderr}`), { code: 'E_INTERNAL' })
+    if (r.status !== 0)
+      throw Object.assign(new Error(`drizzle-kit generate failed:\n${r.stdout}${r.stderr}`), {
+        code: 'E_INTERNAL',
+      })
     return r.stdout.trim()
   },
 }

package/src/deploy/cdn.mjs

@@ -10,25 +10,59 @@ import { host } from './hosts.mjs'
 const SHAPED = [
   [/\bnfp_[A-Za-z0-9]{20,}/, 'a Netlify token'],
   [/\bFlyV1\s+fm\d_[A-Za-z0-9+/=_-]{20,}/, 'a Fly token'],
-  [/api\.render\.com\/deploy\/srv-[\w-]+\?key=[\w-]+/, 'a Render deploy hook (its key deploys the service)'],
+  [
+    /api\.render\.com\/deploy\/srv-[\w-]+\?key=[\w-]+/,
+    'a Render deploy hook (its key deploys the service)',
+  ],
   [/cloudinary:\/\/\d+:[^@\s'"]+@/, 'a Cloudinary URL with its secret'],
 ]
-const KEYED = /\b[\w-]*(token|secret|api[_-]?key|password)[\w-]*["']?\s*[:=]\s*["']([^"'\s$]{16,})["']/i
+const KEYED =
+  /\b[\w-]*(token|secret|api[_-]?key|password)[\w-]*["']?\s*[:=]\s*["']([^"'\s$]{16,})["']/i
 
-const FILES = ['weft.config.ts', 'weft.config.mts', 'weft.config.js', 'weft.config.mjs', 'weft.config.json', 'weft.config.yaml', 'weft.config.yml', 'netlify.toml', 'vercel.json', 'wrangler.toml', 'fly.toml', 'render.yaml', 'Dockerfile']
+const FILES = [
+  'weft.config.ts',
+  'weft.config.mts',
+  'weft.config.js',
+  'weft.config.mjs',
+  'weft.config.json',
+  'weft.config.yaml',
+  'weft.config.yml',
+  'netlify.toml',
+  'vercel.json',
+  'wrangler.toml',
+  'fly.toml',
+  'render.yaml',
+  'Dockerfile',
+]
 
 /** E008: a credential in a file that gets committed, comments included. An env var's name, or `${{ secrets.X }}`, is never one. */
 export function writtenSecrets(root) {
   const out = []
   const wf = join(root, '.github/workflows')
-  const files = [...FILES, ...(existsSync(wf) ? readdirSync(wf).filter(f => /\.ya?ml$/.test(f)).map(f => `.github/workflows/${f}`) : [])]
+  const files = [
+    ...FILES,
+    ...(existsSync(wf)
+      ? readdirSync(wf)
+          .filter((f) => /\.ya?ml$/.test(f))
+          .map((f) => `.github/workflows/${f}`)
+      : []),
+  ]
   for (const file of files) {
     let text
-    try { text = readFileSync(join(root, file), 'utf8') } catch { continue }
+    try {
+      text = readFileSync(join(root, file), 'utf8')
+    } catch {
+      continue
+    }
     text.split('\n').forEach((line, i) => {
       const shaped = SHAPED.find(([re]) => re.test(line))
       const keyed = !shaped && KEYED.exec(line)
-      if (shaped || keyed) out.push({ file, line: i + 1, what: shaped ? shaped[1] : `a value for \`${keyed[0].split(/["':=\s]/)[0]}\`` })
+      if (shaped || keyed)
+        out.push({
+          file,
+          line: i + 1,
+          what: shaped ? shaped[1] : `a value for \`${keyed[0].split(/["':=\s]/)[0]}\``,
+        })
     })
   }
   return out
@@ -42,23 +76,67 @@ export function cdnFindings(config = {}, { env } = {}) {
   const out = []
   const cdn = config.deploy?.cdn ?? {}
   const target = config.deploy?.target && host(config.deploy.target)
-  const add = (code, severity, why, fix) => out.push({ code, severity, file: 'weft.config.ts', why, fix })
+  const add = (code, severity, why, fix) =>
+    out.push({ code, severity, file: 'weft.config.ts', why, fix })
   if (cdn.proxy === 'cloudflare') {
     let url
-    try { url = config.site?.url && new URL(config.site.url).hostname } catch {}
-    if (url && OWN.test(url)) add('E010', 'warning', `\`deploy.cdn.proxy\` is Cloudflare, and \`site.url\` is \`${url}\`, the host's own domain: nothing goes through the proxy, and canonical URLs point past it`, 'Set `site.url` to the domain Cloudflare proxies, with its DNS record proxied (orange cloud) to the host')
-    if (target && target.kind !== 'server') add('E011', 'warning', `\`deploy.cdn.proxy\` puts Cloudflare in front of ${target.name}, which is a CDN already: two caches, and a deploy purges only its own`, 'Drop `cdn.proxy`, or deploy to a server host (`fly`, `render`) behind it')
+    try {
+      url = config.site?.url && new URL(config.site.url).hostname
+    } catch {}
+    if (url && OWN.test(url))
+      add(
+        'E010',
+        'warning',
+        `\`deploy.cdn.proxy\` is Cloudflare, and \`site.url\` is \`${url}\`, the host's own domain: nothing goes through the proxy, and canonical URLs point past it`,
+        'Set `site.url` to the domain Cloudflare proxies, with its DNS record proxied (orange cloud) to the host',
+      )
+    if (target && target.kind !== 'server')
+      add(
+        'E011',
+        'warning',
+        `\`deploy.cdn.proxy\` puts Cloudflare in front of ${target.name}, which is a CDN already: two caches, and a deploy purges only its own`,
+        'Drop `cdn.proxy`, or deploy to a server host (`fly`, `render`) behind it',
+      )
   }
   const images = cdn.images
   if (images?.provider === 'cloudinary') {
-    const plugins = (config.plugins ?? []).map(p => p?.name ?? p)
-    if (!plugins.some(n => typeof n === 'string' && n.includes('plugin-media'))) add('E012', 'error', '`deploy.cdn.images` is Cloudinary, and `@weft-js/plugin-media` is not in `plugins`: nothing would send it an image', '`weft add media`, or drop `cdn.images`')
+    const plugins = (config.plugins ?? []).map((p) => p?.name ?? p)
+    if (!plugins.some((n) => typeof n === 'string' && n.includes('plugin-media')))
+      add(
+        'E012',
+        'error',
+        '`deploy.cdn.images` is Cloudinary, and `@weft-js/plugin-media` is not in `plugins`: nothing would send it an image',
+        '`weft add media`, or drop `cdn.images`',
+      )
     const given = env?.CLOUDINARY_URL
     const cloud = given && /@([\w-]+)\/?$/.exec(given)?.[1]
-    if (!images.cloud && !given) add('E013', 'error', '`deploy.cdn.images` names no `cloud`, and `CLOUDINARY_URL` is unset: there is no account to send images to', "Set `cdn.images.cloud` to the cloud's name, and `CLOUDINARY_URL` in the host's environment (never in a file)")
-    else if (cloud && images.cloud && cloud !== images.cloud) add('E013', 'error', `\`cdn.images.cloud\` is \`${images.cloud}\`, and \`CLOUDINARY_URL\` here names \`${cloud}\`: one of them is another account`, 'Make them name the same cloud')
-    else if (env && !given) add('E013', 'warning', '`CLOUDINARY_URL` is unset here: the server needs it in the host\'s environment', 'Set it in the host\'s environment settings, never in a file')
-    add('E014', 'info', '`cdn.images` is checked, but this weft doesn\'t send uploads to Cloudinary yet: they still go to `media({ server: { dir } })`', 'Nothing yet: research 46 §9 is the plan. On a function host, uploads need a server host with a disk until then (E003)')
+    if (!images.cloud && !given)
+      add(
+        'E013',
+        'error',
+        '`deploy.cdn.images` names no `cloud`, and `CLOUDINARY_URL` is unset: there is no account to send images to',
+        "Set `cdn.images.cloud` to the cloud's name, and `CLOUDINARY_URL` in the host's environment (never in a file)",
+      )
+    else if (cloud && images.cloud && cloud !== images.cloud)
+      add(
+        'E013',
+        'error',
+        `\`cdn.images.cloud\` is \`${images.cloud}\`, and \`CLOUDINARY_URL\` here names \`${cloud}\`: one of them is another account`,
+        'Make them name the same cloud',
+      )
+    else if (env && !given)
+      add(
+        'E013',
+        'warning',
+        "`CLOUDINARY_URL` is unset here: the server needs it in the host's environment",
+        "Set it in the host's environment settings, never in a file",
+      )
+    add(
+      'E014',
+      'info',
+      "`cdn.images` is checked, but this weft doesn't send uploads to Cloudinary yet: they still go to `media({ server: { dir } })`",
+      'Nothing yet: research 46 §9 is the plan. On a function host, uploads need a server host with a disk until then (E003)',
+    )
   }
   return out
 }

package/src/deploy/files.mjs

@@ -9,22 +9,46 @@ import { host, presetFor } from './hosts.mjs'
 
 /** The lockfile's manager: how the image and the workflow install. */
 const MANAGERS = [
-  ['pnpm-lock.yaml', { name: 'pnpm', install: 'corepack enable && pnpm install --frozen-lockfile', x: 'pnpm exec', cache: 'pnpm' }],
-  ['yarn.lock', { name: 'yarn', install: 'corepack enable && yarn install --immutable', x: 'yarn', cache: 'yarn' }],
+  [
+    'pnpm-lock.yaml',
+    {
+      name: 'pnpm',
+      install: 'corepack enable && pnpm install --frozen-lockfile',
+      x: 'pnpm exec',
+      cache: 'pnpm',
+    },
+  ],
+  [
+    'yarn.lock',
+    {
+      name: 'yarn',
+      install: 'corepack enable && yarn install --immutable',
+      x: 'yarn',
+      cache: 'yarn',
+    },
+  ],
   ['bun.lock', { name: 'bun', install: 'bun install --frozen-lockfile', x: 'bunx', cache: '' }],
   ['package-lock.json', { name: 'npm', install: 'npm ci', x: 'npx', cache: 'npm' }],
 ]
-export const managerOf = root => (MANAGERS.find(([lock]) => existsSync(join(root, lock))) ?? [null, { name: 'npm', install: 'npm install', x: 'npx', cache: '' }])[1]
+export const managerOf = (root) =>
+  (MANAGERS.find(([lock]) => existsSync(join(root, lock))) ?? [
+    null,
+    { name: 'npm', install: 'npm install', x: 'npx', cache: '' },
+  ])[1]
 
 /** Where a server host keeps what must last: SQLite's default `file:.data/app.db` lands on it unchanged. */
 export const DATA = '/app/.data'
 
-const sha = body => createHash('sha256').update(body).digest('hex').slice(0, 12)
+const sha = (body) => createHash('sha256').update(body).digest('hex').slice(0, 12)
 const stamp = (target, body) => `# weft deploy init ${target}, sha ${sha(body)}\n${body}`
 const STAMP = /^# weft deploy init (\w+), sha ([0-9a-f]{12})\n/
 
 const IMAGES = { node: 'node:26-slim', bun: 'oven/bun:1-slim', deno: 'denoland/deno:latest' }
-const RUN = { node: '["node", ".output/server/index.mjs"]', bun: '["bun", "run", ".output/server/index.mjs"]', deno: '["deno", "run", "-A", ".output/server/index.mjs"]' }
+const RUN = {
+  node: '["node", ".output/server/index.mjs"]',
+  bun: '["bun", "run", ".output/server/index.mjs"]',
+  deno: '["deno", "run", "-A", ".output/server/index.mjs"]',
+}
 
 /** A two-stage image: build with the lockfile's manager, run the server. A sidecar needs cargo to build and `weft start` to run. */
 function dockerfile({ runtime, manager, needs }) {
@@ -32,21 +56,37 @@ function dockerfile({ runtime, manager, needs }) {
   const lines = [
     `FROM ${IMAGES.node} AS build`,
     'WORKDIR /app',
-    ...(rust ? ['RUN apt-get update && apt-get install -y --no-install-recommends curl ca-certificates build-essential && curl -sSf https://sh.rustup.rs | sh -s -- -y --profile minimal', 'ENV PATH=/root/.cargo/bin:$PATH'] : []),
+    ...(rust
+      ? [
+          'RUN apt-get update && apt-get install -y --no-install-recommends curl ca-certificates build-essential && curl -sSf https://sh.rustup.rs | sh -s -- -y --profile minimal',
+          'ENV PATH=/root/.cargo/bin:$PATH',
+        ]
+      : []),
     'COPY . .',
     `RUN ${manager.install}`,
     `RUN ${manager.x} weft build --preset ${presetFor({}, runtime)}`,
     '',
-    `FROM ${needs.sidecar ? IMAGES.node : IMAGES[runtime] ?? IMAGES.node}`,
+    `FROM ${needs.sidecar ? IMAGES.node : (IMAGES[runtime] ?? IMAGES.node)}`,
     'WORKDIR /app',
     'ENV NODE_ENV=production HOST=0.0.0.0 PORT=8080',
     // `weft start` runs each sidecar next to the server; without one the server is all there is
-    ...(needs.sidecar ? ['COPY --from=build /app ./', 'EXPOSE 8080', `CMD ["${manager.x.split(' ')[0]}", ${manager.x.includes(' ') ? `"${manager.x.split(' ')[1]}", ` : ''}"weft", "start"]`] : ['COPY --from=build /app/.output ./.output', 'EXPOSE 8080', `CMD ${RUN[runtime] ?? RUN.node}`]),
+    ...(needs.sidecar
+      ? [
+          'COPY --from=build /app ./',
+          'EXPOSE 8080',
+          `CMD ["${manager.x.split(' ')[0]}", ${manager.x.includes(' ') ? `"${manager.x.split(' ')[1]}", ` : ''}"weft", "start"]`,
+        ]
+      : [
+          'COPY --from=build /app/.output ./.output',
+          'EXPOSE 8080',
+          `CMD ${RUN[runtime] ?? RUN.node}`,
+        ]),
   ]
   return `${lines.join('\n')}\n`
 }
 
-const DOCKERIGNORE = 'node_modules\n.output\n.weft/*\n!.weft/plugins.lock.json\n.env\n.env.*\n.git\n.netlify\n.vercel\ntarget\n'
+const DOCKERIGNORE =
+  'node_modules\n.output\n.weft/*\n!.weft/plugins.lock.json\n.env\n.env.*\n.git\n.netlify\n.vercel\ntarget\n'
 
 function flyToml({ deploy, needs }) {
   const fly = deploy.fly ?? {}
@@ -57,7 +97,9 @@ function flyToml({ deploy, needs }) {
     '',
     '[env]',
     '  PORT = "8080"',
-    ...(needs.uploads && fly.volume ? [`  WEFT_MEDIA_DIR = "${fly.volume.path ?? DATA}/media"`] : []),
+    ...(needs.uploads && fly.volume
+      ? [`  WEFT_MEDIA_DIR = "${fly.volume.path ?? DATA}/media"`]
+      : []),
     '',
     '[http_service]',
     '  internal_port = 8080',
@@ -66,7 +108,15 @@ function flyToml({ deploy, needs }) {
     '  auto_start_machines = true',
     // a change feed is a listener: a stopped machine hears nothing
     `  min_machines_running = ${held ? 1 : 0}`,
-    ...(fly.volume ? ['', '[[mounts]]', `  source = ${JSON.stringify(fly.volume.name ?? 'data')}`, `  destination = ${JSON.stringify(fly.volume.path ?? DATA)}`, `  initial_size = "${fly.volume.sizeGb ?? 1}gb"`] : []),
+    ...(fly.volume
+      ? [
+          '',
+          '[[mounts]]',
+          `  source = ${JSON.stringify(fly.volume.name ?? 'data')}`,
+          `  destination = ${JSON.stringify(fly.volume.path ?? DATA)}`,
+          `  initial_size = "${fly.volume.sizeGb ?? 1}gb"`,
+        ]
+      : []),
     '',
     '[[vm]]',
     `  memory = ${JSON.stringify(fly.memory ?? '512mb')}`,
@@ -89,23 +139,43 @@ function renderYaml({ deploy, needs }) {
     '    envVars:',
     '      - key: NODE_ENV',
     '        value: production',
-    ...(needs.uploads && r.disk ? ['      - key: WEFT_MEDIA_DIR', `        value: ${r.disk.path ?? DATA}/media`] : []),
-    ...(r.disk ? ['    disk:', '      name: data', `      mountPath: ${r.disk.path ?? DATA}`, `      sizeGB: ${r.disk.sizeGb ?? 1}`] : []),
+    ...(needs.uploads && r.disk
+      ? ['      - key: WEFT_MEDIA_DIR', `        value: ${r.disk.path ?? DATA}/media`]
+      : []),
+    ...(r.disk
+      ? [
+          '    disk:',
+          '      name: data',
+          `      mountPath: ${r.disk.path ?? DATA}`,
+          `      sizeGB: ${r.disk.sizeGb ?? 1}`,
+        ]
+      : []),
   ]
   return `${lines.join('\n')}\n`
 }
 
-const netlifyToml = ({ manager }) => `[build]\n  command = "${manager.x} weft build --preset netlify"\n  publish = "dist"\n\n[build.environment]\n  NODE_VERSION = "26"\n`
+const netlifyToml = ({ manager }) =>
+  `[build]\n  command = "${manager.x} weft build --preset netlify"\n  publish = "dist"\n\n[build.environment]\n  NODE_VERSION = "26"\n`
 
-const vercelJson = ({ manager }) => `${JSON.stringify({ $schema: 'https://openapi.vercel.sh/vercel.json', framework: null, installCommand: manager.install.replace(/^corepack enable && /, ''), buildCommand: `${manager.x} weft build --preset vercel` }, null, 2)}\n`
+const vercelJson = ({ manager }) =>
+  `${JSON.stringify({ $schema: 'https://openapi.vercel.sh/vercel.json', framework: null, installCommand: manager.install.replace(/^corepack enable && /, ''), buildCommand: `${manager.x} weft build --preset vercel` }, null, 2)}\n`
 
-const wranglerToml = ({ deploy }) => `name = ${JSON.stringify(deploy.cloudflare?.name ?? 'my-app')}\ncompatibility_flags = ["nodejs_compat"]\n`
+const wranglerToml = ({ deploy }) =>
+  `name = ${JSON.stringify(deploy.cloudflare?.name ?? 'my-app')}\ncompatibility_flags = ["nodejs_compat"]\n`
 
 /** The workflow: on push to the branch, check and deploy to production; on a pull request, a preview where the host has one. */
 function workflow({ target, deploy, manager }) {
   const h = host(target)
   const previews = h.kind !== 'server'
-  const node = manager.name === 'bun' ? ['      - uses: oven-sh/setup-bun@v2'] : ['      - uses: actions/setup-node@v4', '        with:', '          node-version: 26', ...(manager.cache ? [`          cache: ${manager.cache}`] : [])]
+  const node =
+    manager.name === 'bun'
+      ? ['      - uses: oven-sh/setup-bun@v2']
+      : [
+          '      - uses: actions/setup-node@v4',
+          '        with:',
+          '          node-version: 26',
+          ...(manager.cache ? [`          cache: ${manager.cache}`] : []),
+        ]
   const lines = [
     'name: weft deploy',
     'on:',
@@ -115,6 +185,7 @@ function workflow({ target, deploy, manager }) {
     'permissions:',
     '  contents: read',
     'concurrency:',
+    // oxlint-disable-next-line no-template-curly-in-string -- a GitHub Actions expression, not a JS template
     '  group: weft-deploy-${{ github.ref }}',
     '  cancel-in-progress: true',
     'jobs:',
@@ -126,9 +197,10 @@ function workflow({ target, deploy, manager }) {
     ...(target === 'fly' ? ['      - uses: superfly/flyctl-actions/setup-flyctl@master'] : []),
     `      - run: ${manager.install}`,
     `      - run: ${manager.x} weft check`,
+    // oxlint-disable-next-line no-template-curly-in-string -- a GitHub Actions expression, not a JS template
     `      - run: ${manager.x} weft deploy --yes${previews ? " ${{ github.event_name == 'push' && '--prod' || '' }}" : ' --prod'}`,
     '        env:',
-    ...h.env.map(k => `          ${k}: \${{ secrets.${k} }}`),
+    ...h.env.map((k) => `          ${k}: \${{ secrets.${k} }}`),
   ]
   return `${lines.join('\n')}\n`
 }
@@ -161,12 +233,18 @@ export function filesFor(ctx) {
  * alone), or `foreign` (no stamp: not weft's).
  */
 export function fileStates(root, files) {
-  return files.map(f => {
+  return files.map((f) => {
     const abs = join(root, f.path)
     if (!existsSync(abs)) return { ...f, state: 'missing' }
     const now = readFileSync(abs, 'utf8')
     if (now === f.text) return { ...f, state: 'current' }
-    if (f.json) return { ...f, state: JSON.parse(now || '{}').buildCommand?.includes('weft build --preset vercel') ? 'edited' : 'stale' }
+    if (f.json)
+      return {
+        ...f,
+        state: JSON.parse(now || '{}').buildCommand?.includes('weft build --preset vercel')
+          ? 'edited'
+          : 'stale',
+      }
     if (f.plain) return { ...f, state: 'edited' }
     const m = STAMP.exec(now)
     if (!m) return { ...f, state: 'foreign' }
@@ -178,7 +256,8 @@ export function fileStates(root, files) {
 export function writeFiles(root, states, { force = false } = {}) {
   const written = []
   for (const f of states) {
-    if (f.state === 'current' || (!force && (f.state === 'edited' || f.state === 'foreign'))) continue
+    if (f.state === 'current' || (!force && (f.state === 'edited' || f.state === 'foreign')))
+      continue
     mkdirSync(dirname(join(root, f.path)), { recursive: true })
     writeFileSync(join(root, f.path), f.text)
     written.push(f.path)