@weft-js/cli 0.1.1 → 0.1.3

package/src/deploy/fit.mjs

@@ -4,15 +4,29 @@
 import { HOSTS } from './hosts.mjs'
 
 const SERVERS = "`deploy: { target: 'fly' }` or `'render'`: a server that stays up"
-const SPLIT = 'or keep the pages here and run realtime on a small server (the split, `weft docs deploy`)'
+const SPLIT =
+  'or keep the pages here and run realtime on a small server (the split, `weft docs deploy`)'
 
 /** What a disk need asks of a host, with the config that gives it one. */
 function disk(h, need, cfg = {}, assume) {
-  if (h.disk === 'none') return { severity: 'error', fix: need.what === 'a SQLite file' ? `${SERVERS}, with a volume or disk, or a hosted database here (Postgres on Neon or Supabase, Turso for SQLite)` : `${SERVERS}, with a volume or disk: this weft has no object store for uploads yet (research 46 §9)` }
+  if (h.disk === 'none')
+    return {
+      severity: 'error',
+      fix:
+        need.what === 'a SQLite file'
+          ? `${SERVERS}, with a volume or disk, or a hosted database here (Postgres on Neon or Supabase, Turso for SQLite)`
+          : `${SERVERS}, with a volume or disk: this weft has no object store for uploads yet (research 46 §9)`,
+    }
   const has = h.id === 'fly' ? cfg.fly?.volume : cfg.render?.disk
   if (has) return
-  const add = h.id === 'fly' ? "`deploy.fly.volume: { name: 'data', sizeGb: 1 }` (billed)" : "`deploy.render.disk: { sizeGb: 1 }` (a paid plan)"
-  return { severity: assume ? 'warning' : 'error', fix: `add ${add}: it mounts at \`/app/.data\`, where SQLite's default \`file:.data/app.db\` already is, and uploads go to \`.data/media\`` }
+  const add =
+    h.id === 'fly'
+      ? "`deploy.fly.volume: { name: 'data', sizeGb: 1 }` (billed)"
+      : '`deploy.render.disk: { sizeGb: 1 }` (a paid plan)'
+  return {
+    severity: assume ? 'warning' : 'error',
+    fix: `add ${add}: it mounts at \`/app/.data\`, where SQLite's default \`file:.data/app.db\` already is, and uploads go to \`.data/media\``,
+  }
 }
 
 /**
@@ -24,39 +38,129 @@ function disk(h, need, cfg = {}, assume) {
  */
 export function fit(needs, h, { deploy = {}, assume = false, local = false } = {}) {
   const findings = []
-  const add = (code, severity, need, why, fix) => findings.push({ code, severity, file: need.file, why, fix })
-  if (needs.sockets && !h.sockets) add('E001', 'error', needs.sockets, `${needs.sockets.what} holds a WebSocket, and ${h.name} ends each process with its request: the page would load and never connect (R024)`, `${SERVERS}, or \`'cloudflare'\` (Durable Objects), ${SPLIT}`)
-  if (needs.required && !h.held) add('E002', 'error', needs.required, `${needs.required.what} needs a change feed that stays connected, and ${h.name} keeps no process between requests (R013)`, `${SERVERS}, run \`weft db listen\` on one with \`listener: 'external'\`, or drop \`required\``)
-  if (needs.sidecar && !h.sidecars) add('E002', 'error', needs.sidecar, `${needs.sidecar.what} is a second process next to the server, and ${h.name} runs only the server`, `${SERVERS} (the image runs both), or deploy the sidecar on its own and set \`rust.services.<name>.external: true\` with its \`WEFT_RUST_<NAME>_URL\``)
-  if (needs.native && h.kind === 'workers') add('R104', 'error', needs.native, `${needs.native.what} loads an addon or a \`.wasm\` file, and ${h.name} has no file system`, "use `remote()`, or a server host")
+  const add = (code, severity, need, why, fix) =>
+    findings.push({ code, severity, file: need.file, why, fix })
+  if (needs.sockets && !h.sockets)
+    add(
+      'E001',
+      'error',
+      needs.sockets,
+      `${needs.sockets.what} holds a WebSocket, and ${h.name} ends each process with its request: the page would load and never connect (R024)`,
+      `${SERVERS}, or \`'cloudflare'\` (Durable Objects), ${SPLIT}`,
+    )
+  if (needs.required && !h.held)
+    add(
+      'E002',
+      'error',
+      needs.required,
+      `${needs.required.what} needs a change feed that stays connected, and ${h.name} keeps no process between requests (R013)`,
+      `${SERVERS}, run \`weft db listen\` on one with \`listener: 'external'\`, or drop \`required\``,
+    )
+  if (needs.sidecar && !h.sidecars)
+    add(
+      'E002',
+      'error',
+      needs.sidecar,
+      `${needs.sidecar.what} is a second process next to the server, and ${h.name} runs only the server`,
+      `${SERVERS} (the image runs both), or deploy the sidecar on its own and set \`rust.services.<name>.external: true\` with its \`WEFT_RUST_<NAME>_URL\``,
+    )
+  if (needs.native && h.kind === 'workers')
+    add(
+      'R104',
+      'error',
+      needs.native,
+      `${needs.native.what} loads an addon or a \`.wasm\` file, and ${h.name} has no file system`,
+      'use `remote()`, or a server host',
+    )
   for (const key of ['sqlite', 'uploads']) {
     const need = needs[key]
     const d = need && disk(h, need, deploy, assume)
-    if (d) add('E003', d.severity, need, `${need.what} is kept on local disk, and ${h.disk === 'none' ? `${h.name}'s disk is gone after each request` : `${h.name} wipes it on each deploy without one`}`, d.fix)
+    if (d)
+      add(
+        'E003',
+        d.severity,
+        need,
+        `${need.what} is kept on local disk, and ${h.disk === 'none' ? `${h.name}'s disk is gone after each request` : `${h.name} wipes it on each deploy without one`}`,
+        d.fix,
+      )
   }
-  if (needs.feed && !h.held) add('R014', 'warning', needs.feed, `${needs.feed.what} needs a process that stays up: on ${h.name}, writes from outside the app won't reach \`.live()\``, `${SERVERS}, or \`weft db listen\` on one with \`listener: 'external'\``)
-  if (needs.memoryBus && h.many) add('E009', 'warning', needs.memoryBus, `${needs.memoryBus.what} reaches the clients of one instance, and ${h.name} runs many`, h.id === 'cloudflare' ? '`durableObjectBus` in `src/realtime.server.ts`' : '`weft add redis` or `weft add nats`, or `postgresBus({ url })` in `src/realtime.server.ts`')
-  if (needs.addons && local && h.prebuilt && process.platform !== 'linux') add('E004', 'warning', needs.addons, `${needs.addons.what} has a compiled addon, built here for ${process.platform}, and ${h.name} runs Linux`, 'deploy from CI (`deploy.ci: \'github\'` builds on Linux), or drop the addon')
-  return { host: h.id, fits: !findings.some(f => f.severity === 'error'), findings }
+  if (needs.feed && !h.held)
+    add(
+      'R014',
+      'warning',
+      needs.feed,
+      `${needs.feed.what} needs a process that stays up: on ${h.name}, writes from outside the app won't reach \`.live()\``,
+      `${SERVERS}, or \`weft db listen\` on one with \`listener: 'external'\``,
+    )
+  if (needs.memoryBus && h.many)
+    add(
+      'E009',
+      'warning',
+      needs.memoryBus,
+      `${needs.memoryBus.what} reaches the clients of one instance, and ${h.name} runs many`,
+      h.id === 'cloudflare'
+        ? '`durableObjectBus` in `src/realtime.server.ts`'
+        : '`weft add redis` or `weft add nats`, or `postgresBus({ url })` in `src/realtime.server.ts`',
+    )
+  if (needs.addons && local && h.prebuilt && process.platform !== 'linux')
+    add(
+      'E004',
+      'warning',
+      needs.addons,
+      `${needs.addons.what} has a compiled addon, built here for ${process.platform}, and ${h.name} runs Linux`,
+      "deploy from CI (`deploy.ci: 'github'` builds on Linux), or drop the addon",
+    )
+  return { host: h.id, fits: !findings.some((f) => f.severity === 'error'), findings }
 }
 
 /** Every host, fitted, and the one to suggest (research 46 §4), with why. */
 export function hostsReport(needs, { deploy = {} } = {}) {
-  const fits = HOSTS.map(h => ({ ...fit(needs, h, { deploy, assume: true }), name: h.name, kind: h.kind, cost: h.cost, pricing: h.pricing, deploys: h.deploys }))
+  const fits = HOSTS.map((h) => ({
+    ...fit(needs, h, { deploy, assume: true }),
+    name: h.name,
+    kind: h.kind,
+    cost: h.cost,
+    pricing: h.pricing,
+    deploys: h.deploys,
+  }))
   return { fits, suggestion: suggest(needs, fits) }
 }
 
 /** @returns {{ host: string, why: string, alternative?: string }} */
-export function suggest(needs, fits = HOSTS.map(h => fit(needs, h, { assume: true }))) {
-  const ok = id => fits.find(f => f.host === id)?.fits
-  const clean = id => ok(id) && !fits.find(f => f.host === id).findings.length
+export function suggest(needs, fits = HOSTS.map((h) => fit(needs, h, { assume: true }))) {
+  const ok = (id) => fits.find((f) => f.host === id)?.fits
+  const clean = (id) => ok(id) && !fits.find((f) => f.host === id).findings.length
   const held = needs.required || needs.sidecar || needs.feed
   const kept = needs.sqlite || needs.uploads
   if (!needs.sockets && !held && !kept) {
-    if (clean('netlify')) return { host: 'netlify', why: 'nothing here needs a server that stays up: a CDN with functions behind it is the cheapest and fastest host', alternative: 'vercel' }
-    if (ok('netlify')) return { host: 'netlify', why: 'nothing here needs a server that stays up, once the warnings are fixed', alternative: 'vercel' }
+    if (clean('netlify'))
+      return {
+        host: 'netlify',
+        why: 'nothing here needs a server that stays up: a CDN with functions behind it is the cheapest and fastest host',
+        alternative: 'vercel',
+      }
+    if (ok('netlify'))
+      return {
+        host: 'netlify',
+        why: 'nothing here needs a server that stays up, once the warnings are fixed',
+        alternative: 'vercel',
+      }
+  }
+  if (needs.sockets && !held && !kept && !needs.native && clean('cloudflare'))
+    return {
+      host: 'cloudflare',
+      why: 'channels need a socket, and a Durable Object holds one for each room without a server to run',
+      alternative: 'fly',
+    }
+  if (kept)
+    return {
+      host: 'fly',
+      why: `${kept.what} needs a disk that lasts: a Fly volume is per machine and cheap`,
+      alternative: 'render',
+    }
+  return {
+    host: 'fly',
+    why: `${(needs.sockets ?? held).what} needs a server that stays up, and Fly runs the app as it is. Render's free instance does too, but sleeps after 15 idle minutes`,
+    alternative: 'render',
   }
-  if (needs.sockets && !held && !kept && !needs.native && clean('cloudflare')) return { host: 'cloudflare', why: 'channels need a socket, and a Durable Object holds one for each room without a server to run', alternative: 'fly' }
-  if (kept) return { host: 'fly', why: `${kept.what} needs a disk that lasts: a Fly volume is per machine and cheap`, alternative: 'render' }
-  return { host: 'fly', why: `${(needs.sockets ?? held).what} needs a server that stays up, and Fly runs the app as it is. Render's free instance does too, but sleeps after 15 idle minutes`, alternative: 'render' }
 }

package/src/deploy/hosts.mjs

@@ -14,40 +14,110 @@
 /** @type {Host[]} */
 export const HOSTS = [
   {
-    id: 'netlify', name: 'Netlify', kind: 'functions', preset: 'netlify', sockets: false, held: false, disk: 'none', sidecars: false, many: true, prebuilt: true,
-    env: ['NETLIFY_AUTH_TOKEN', 'NETLIFY_SITE_ID'], deploys: true,
-    cost: 'free tier; usage past it is billed in credits', pricing: 'https://www.netlify.com/pricing/', docs: 'https://docs.netlify.com/cli/get-started/',
+    id: 'netlify',
+    name: 'Netlify',
+    kind: 'functions',
+    preset: 'netlify',
+    sockets: false,
+    held: false,
+    disk: 'none',
+    sidecars: false,
+    many: true,
+    prebuilt: true,
+    env: ['NETLIFY_AUTH_TOKEN', 'NETLIFY_SITE_ID'],
+    deploys: true,
+    cost: 'free tier; usage past it is billed in credits',
+    pricing: 'https://www.netlify.com/pricing/',
+    docs: 'https://docs.netlify.com/cli/get-started/',
   },
   {
-    id: 'vercel', name: 'Vercel', kind: 'functions', preset: 'vercel', sockets: false, held: false, disk: 'none', sidecars: false, many: true, prebuilt: true,
-    env: ['VERCEL_TOKEN', 'VERCEL_ORG_ID', 'VERCEL_PROJECT_ID'], deploys: true,
-    cost: 'Hobby is free for non-commercial use; Pro is per seat', pricing: 'https://vercel.com/pricing', docs: 'https://vercel.com/docs/cli',
+    id: 'vercel',
+    name: 'Vercel',
+    kind: 'functions',
+    preset: 'vercel',
+    sockets: false,
+    held: false,
+    disk: 'none',
+    sidecars: false,
+    many: true,
+    prebuilt: true,
+    env: ['VERCEL_TOKEN', 'VERCEL_ORG_ID', 'VERCEL_PROJECT_ID'],
+    deploys: true,
+    cost: 'Hobby is free for non-commercial use; Pro is per seat',
+    pricing: 'https://vercel.com/pricing',
+    docs: 'https://vercel.com/docs/cli',
   },
   {
-    id: 'cloudflare', name: 'Cloudflare Workers', kind: 'workers', preset: 'cloudflare_durable', sockets: true, held: false, disk: 'none', sidecars: false, many: true, prebuilt: true,
-    env: ['CLOUDFLARE_API_TOKEN', 'CLOUDFLARE_ACCOUNT_ID'], deploys: true,
-    cost: 'free tier includes Workers and SQLite-backed Durable Objects', pricing: 'https://developers.cloudflare.com/workers/platform/pricing/', docs: 'https://developers.cloudflare.com/workers/wrangler/',
+    id: 'cloudflare',
+    name: 'Cloudflare Workers',
+    kind: 'workers',
+    preset: 'cloudflare_durable',
+    sockets: true,
+    held: false,
+    disk: 'none',
+    sidecars: false,
+    many: true,
+    prebuilt: true,
+    env: ['CLOUDFLARE_API_TOKEN', 'CLOUDFLARE_ACCOUNT_ID'],
+    deploys: true,
+    cost: 'free tier includes Workers and SQLite-backed Durable Objects',
+    pricing: 'https://developers.cloudflare.com/workers/platform/pricing/',
+    docs: 'https://developers.cloudflare.com/workers/wrangler/',
   },
   {
-    id: 'fly', name: 'Fly.io', kind: 'server', sockets: true, held: true, disk: 'volume', sidecars: true, many: false, prebuilt: false,
-    env: ['FLY_API_TOKEN'], deploys: true,
-    cost: 'pay as you go, no free tier for new organizations', pricing: 'https://fly.io/docs/about/pricing/', docs: 'https://fly.io/docs/flyctl/',
+    id: 'fly',
+    name: 'Fly.io',
+    kind: 'server',
+    sockets: true,
+    held: true,
+    disk: 'volume',
+    sidecars: true,
+    many: false,
+    prebuilt: false,
+    env: ['FLY_API_TOKEN'],
+    deploys: true,
+    cost: 'pay as you go, no free tier for new organizations',
+    pricing: 'https://fly.io/docs/about/pricing/',
+    docs: 'https://fly.io/docs/flyctl/',
   },
   {
-    id: 'render', name: 'Render', kind: 'server', sockets: true, held: true, disk: 'paid-disk', sidecars: true, many: false, prebuilt: false,
-    env: ['RENDER_DEPLOY_HOOK_URL'], deploys: true,
-    cost: 'free instance sleeps after 15 idle minutes and has no disk; paid plans add a disk', pricing: 'https://render.com/pricing', docs: 'https://render.com/docs/blueprint-spec',
+    id: 'render',
+    name: 'Render',
+    kind: 'server',
+    sockets: true,
+    held: true,
+    disk: 'paid-disk',
+    sidecars: true,
+    many: false,
+    prebuilt: false,
+    env: ['RENDER_DEPLOY_HOOK_URL'],
+    deploys: true,
+    cost: 'free instance sleeps after 15 idle minutes and has no disk; paid plans add a disk',
+    pricing: 'https://render.com/pricing',
+    docs: 'https://render.com/docs/blueprint-spec',
   },
   {
-    id: 'aws', name: 'AWS Lambda', kind: 'functions', preset: 'aws_lambda', sockets: false, held: false, disk: 'none', sidecars: false, many: true, prebuilt: true,
-    env: [], deploys: false,
-    cost: 'Lambda has a free tier; a server would go on App Runner, billed per running instance', pricing: 'https://aws.amazon.com/pricing/', docs: 'https://nitro.build/deploy/providers/aws',
+    id: 'aws',
+    name: 'AWS Lambda',
+    kind: 'functions',
+    preset: 'aws_lambda',
+    sockets: false,
+    held: false,
+    disk: 'none',
+    sidecars: false,
+    many: true,
+    prebuilt: true,
+    env: [],
+    deploys: false,
+    cost: 'Lambda has a free tier; a server would go on App Runner, billed per running instance',
+    pricing: 'https://aws.amazon.com/pricing/',
+    docs: 'https://nitro.build/deploy/providers/aws',
   },
 ]
 
-export const TARGETS = HOSTS.filter(h => h.deploys).map(h => h.id)
+export const TARGETS = HOSTS.filter((h) => h.deploys).map((h) => h.id)
 
-export const host = id => HOSTS.find(h => h.id === id)
+export const host = (id) => HOSTS.find((h) => h.id === id)
 
 /** `runtime` in the config as the server preset a container runs. */
 const SERVER_PRESETS = { node: 'node', bun: 'bun', deno: 'deno_server' }

package/src/deploy/index/cli.mjs

@@ -0,0 +1,20 @@
+import { spawnSync } from 'node:child_process'
+
+const refused = (message) => Object.assign(new Error(message), { code: 'E_REFUSED' })
+
+/** The host's CLI: on PATH, else through npx for the ones on npm. */
+export function cliFor(
+  name,
+  {
+    which = (cmd) =>
+      spawnSync(process.platform === 'win32' ? 'where' : 'which', [cmd], { encoding: 'utf8' })
+        .status === 0,
+  } = {},
+) {
+  const npm = { netlify: 'netlify-cli', vercel: 'vercel', wrangler: 'wrangler' }
+  for (const cmd of name === 'flyctl' ? ['flyctl', 'fly'] : [name]) if (which(cmd)) return [cmd]
+  if (npm[name]) return ['npx', '--yes', npm[name]]
+  throw refused(
+    `\`${name}\` isn't installed: ${name === 'flyctl' ? 'https://fly.io/docs/flyctl/install/' : `npm install -g ${npm[name] ?? name}`}`,
+  )
+}

package/src/deploy/index/environment.mjs

@@ -0,0 +1,69 @@
+import { existsSync } from 'node:fs'
+import { join } from 'node:path'
+
+/** A variable a step reads, and whether its absence stops the deploy (E007). */
+export function missingEnv(root, target, config, env) {
+  const ci = !!env.CI
+  const linked = {
+    netlify: existsSync(join(root, '.netlify/state.json')) || !!config.deploy?.netlify?.site,
+    vercel: existsSync(join(root, '.vercel/project.json')),
+  }
+  // a token: the CLI's own login stands in, except in CI. An id: needed unless the project is linked.
+  const token = (k, how) => [k, ci ? 'error' : 'warning', how, ": the CLI's own login is used"]
+  const id = (k, known, how) => [k, known ? null : 'error', how, '']
+  const need = {
+    netlify: [
+      token(
+        'NETLIFY_AUTH_TOKEN',
+        '`netlify login` here, or a personal access token from User settings → Applications',
+      ),
+      id(
+        'NETLIFY_SITE_ID',
+        linked.netlify,
+        '`netlify link`, `deploy.netlify.site`, or the site id from Site configuration',
+      ),
+    ],
+    vercel: [
+      token('VERCEL_TOKEN', '`vercel login` here, or a token from Account Settings → Tokens'),
+      id('VERCEL_ORG_ID', linked.vercel, '`vercel link` writes it to .vercel/project.json'),
+      id('VERCEL_PROJECT_ID', linked.vercel, '`vercel link` writes it to .vercel/project.json'),
+    ],
+    cloudflare: [
+      token('CLOUDFLARE_API_TOKEN', '`wrangler login` here, or a token with Workers Scripts: Edit'),
+      id('CLOUDFLARE_ACCOUNT_ID', !ci, 'the account id on the Workers overview page'),
+    ],
+    fly: [token('FLY_API_TOKEN', '`flyctl auth login` here, or `flyctl tokens create deploy`')],
+    render: [id('RENDER_DEPLOY_HOOK_URL', false, "the service's Settings → Deploy Hook")],
+  }[target]
+  return need
+    .filter(([k, severity]) => severity && !env[k])
+    .map(([k, severity, how, local]) => ({
+      code: 'E007',
+      severity,
+      file: 'weft.config.ts',
+      why: `\`${k}\` is unset${severity === 'warning' ? local : ''}`,
+      fix: `${how}. Set it in the environment (never a file)`,
+    }))
+}
+
+/** The URL a host's CLI printed. */
+export function urlFrom(step, stdout) {
+  if (step.url === 'json') {
+    try {
+      const j = JSON.parse(stdout.slice(stdout.indexOf('{')))
+      return j.url ?? j.deploy_url
+    } catch {
+      return
+    }
+  }
+  if (step.url === 'last-line')
+    return stdout
+      .trim()
+      .split('\n')
+      .reverse()
+      .find((l) => l.trim().startsWith('https://'))
+      ?.trim()
+  if (step.url === 'workers') return /https:\/\/[\w.-]+\.workers\.dev/.exec(stdout)?.[0]
+  if (step.url === 'fly') return /https:\/\/[\w.-]+\.fly\.dev/.exec(stdout)?.[0]
+  return step.url
+}

package/src/deploy/index/steps.mjs

@@ -0,0 +1,87 @@
+import { host, presetFor } from '../hosts.mjs'
+import { needsOf } from '../needs.mjs'
+
+/**
+ * The steps `weft deploy` takes for a target, as data: a dry run prints them, `--yes` runs them. A step reads env vars
+ * by name; their values are filled in only as it runs.
+ */
+export function deploySteps(root, config, { target, prod = false } = {}) {
+  const h = host(target)
+  const deploy = config.deploy ?? {}
+  const runtime = config.runtime ?? 'node'
+  const needs = needsOf(root, config)
+  const steps = []
+  const build = {
+    kind: 'build',
+    what: `weft build --preset ${presetFor(h, runtime)}`,
+    preset: presetFor(h, runtime),
+  }
+  if (target === 'netlify') {
+    const site = process.env.NETLIFY_SITE_ID
+      ? []
+      : deploy.netlify?.site
+        ? ['--site', deploy.netlify.site]
+        : []
+    steps.push(build, {
+      kind: 'run',
+      cli: 'netlify',
+      args: [
+        'deploy',
+        '--dir',
+        'dist',
+        '--functions',
+        '.netlify/functions-internal',
+        '--json',
+        ...site,
+        ...(prod ? ['--prod'] : []),
+      ],
+      reads: ['NETLIFY_AUTH_TOKEN', 'NETLIFY_SITE_ID'],
+      url: 'json',
+    })
+  }
+  if (target === 'vercel')
+    steps.push(build, {
+      kind: 'run',
+      cli: 'vercel',
+      args: ['deploy', '--prebuilt', '--yes', ...(prod ? ['--prod'] : [])],
+      token: 'VERCEL_TOKEN',
+      reads: ['VERCEL_TOKEN', 'VERCEL_ORG_ID', 'VERCEL_PROJECT_ID'],
+      url: 'last-line',
+    })
+  if (target === 'cloudflare')
+    steps.push(build, {
+      kind: 'run',
+      cli: 'wrangler',
+      args: ['deploy'],
+      cwd: '.output',
+      reads: ['CLOUDFLARE_API_TOKEN', 'CLOUDFLARE_ACCOUNT_ID'],
+      url: 'workers',
+    })
+  if (target === 'fly') {
+    // one machine unless a bus reaches the others: a second machine would split the rooms, and a volume is per machine
+    const one = needs.memoryBus || deploy.fly?.volume
+    steps.push({
+      kind: 'run',
+      cli: 'flyctl',
+      args: [
+        'deploy',
+        '--remote-only',
+        ...(deploy.fly?.app ? ['--app', deploy.fly.app] : []),
+        ...(one ? ['--ha=false'] : []),
+      ],
+      reads: ['FLY_API_TOKEN'],
+      url: deploy.fly?.app ? `https://${deploy.fly.app}.fly.dev` : 'fly',
+    })
+  }
+  if (target === 'render')
+    steps.push({
+      kind: 'hook',
+      what: 'POST $RENDER_DEPLOY_HOOK_URL (Render builds the pushed commit)',
+      reads: ['RENDER_DEPLOY_HOOK_URL'],
+      url: deploy.render?.service ? `https://${deploy.render.service}.onrender.com` : undefined,
+    })
+  for (const s of steps)
+    if (s.cli)
+      s.what = `${s.cli} ${s.args.join(' ')}${s.token ? ` --token $${s.token}` : ''}${s.cwd ? `   (in ${s.cwd}/)` : ''}`
+  return steps
+}