create-jant 0.3.27 → 0.3.29

package/dist/index.js

@@ -9,8 +9,8 @@ import path from "path";
 import { fileURLToPath } from "url";
 var __filename = fileURLToPath(import.meta.url);
 var __dirname = path.dirname(__filename);
-var CORE_VERSION = "0.3.27";
-var TEMPLATE_DIR = fs.existsSync(path.resolve(__dirname, "../template")) ? path.resolve(__dirname, "../template") : path.resolve(__dirname, "../../../templates/jant-site");
+var CORE_VERSION = "0.3.29";
+var TEMPLATE_DIR = fs.existsSync(path.resolve(__dirname, "../template")) ? path.resolve(__dirname, "../template") : path.resolve(__dirname, "../../../sites/demo");
 function isValidProjectName(name) {
   return /^[a-z0-9]([a-z0-9-]*[a-z0-9])?$/.test(name);
 }
@@ -40,9 +40,6 @@ function detectPackageManager() {
 function formatRunCmd(pm, script) {
   return pm === "npm" ? `npm run ${script}` : `${pm} ${script}`;
 }
-function formatAddCmd(pm, pkg) {
-  return pm === "npm" ? `npm install ${pkg}` : `${pm} add ${pkg}`;
-}
 function runCommand(cmd, cwd) {
   try {
     execSync(cmd, { stdio: "ignore", cwd });
@@ -51,58 +48,56 @@ function runCommand(cmd, cwd) {
     return false;
   }
 }
-function processMarkers(content, vars) {
-  content = content.replace(
-    /\s*(?:\/\/|#)\s*@create-jant:\s*@remove-start[\s\S]*?(?:\/\/|#)\s*@create-jant:\s*@remove-end\n?/g,
-    ""
-  );
-  content = content.replace(
-    /^.*(?:\/\/|#)\s*@create-jant:\s*@remove\s*\n?/gm,
-    ""
-  );
-  content = content.replace(
-    /^(.+=\s*)"[^"]*"\s*(?:\/\/|#)\s*@create-jant:\s*"([^"]*)"/gm,
-    (_, prefix, template) => {
-      const value = template.replace(
+function processAnnotations(content, vars) {
+  const lines = content.split("\n");
+  const result = [];
+  let removing = false;
+  for (const line of lines) {
+    if (line.trim() === "# @create-jant: @remove-start") {
+      removing = true;
+      continue;
+    }
+    if (line.trim() === "# @create-jant: @remove-end") {
+      removing = false;
+      continue;
+    }
+    if (removing) continue;
+    if (line.includes("# @create-jant: @remove")) {
+      continue;
+    }
+    const replaceMatch = line.match(/^(.+?)\s*#\s*@create-jant:\s*"(.*)"$/);
+    if (replaceMatch) {
+      const prefix = replaceMatch[1];
+      const newValue = replaceMatch[2];
+      const interpolated = newValue.replace(
         /\$\{(\w+)\}/g,
-        (__, key) => vars[key] ?? ""
+        (_, key) => vars[key] ?? ""
       );
-      return `${prefix}"${value}"`;
+      const valueMatch = prefix.match(/^(\s*\S+\s*=\s*)"[^"]*"(.*)$/);
+      if (valueMatch) {
+        result.push(`${valueMatch[1]}"${interpolated}"${valueMatch[2]}`);
+      } else {
+        result.push(prefix);
+      }
+      continue;
     }
-  );
-  return content;
+    result.push(line);
+  }
+  return result.join("\n");
 }
 async function copyTemplate(config) {
   const { projectName, targetDir, packageManager } = config;
   await fs.copy(TEMPLATE_DIR, targetDir, {
     filter: (src) => {
       const basename = path.basename(src);
-      if (basename.startsWith(".DS_Store")) return false;
       if (basename === "node_modules") return false;
       if (basename === ".wrangler") return false;
-      if (basename === ".swc") return false;
       if (basename === ".dev.vars") return false;
-      if (basename === "pnpm-lock.yaml") return false;
-      if (basename === "yarn.lock") return false;
-      if (basename === "package-lock.json") return false;
-      if (basename === "bun.lockb") return false;
-      if (basename === "pnpm-workspace.yaml") return false;
-      if (basename === "dist") return false;
-      if (basename === "wrangler.demo.toml") return false;
-      if (basename === "reset-demo.sql") return false;
-      if (basename === "seed-demo.sql") return false;
-      if (basename === "reset-local.sql") return false;
-      if (basename === "seed-local.sql") return false;
-      if (basename === "export-demo.mjs") return false;
-      if (basename === "export-seed.mjs") return false;
       return true;
     }
   });
-  const secretsExampleFile = ".dev.vars.example";
-  const secretsFile = ".dev.vars";
   const renames = [
     ["_gitignore", ".gitignore"],
-    ["_env.example", secretsExampleFile],
     ["_github", ".github"]
   ];
   for (const [from, to] of renames) {
@@ -119,17 +114,14 @@ async function copyTemplate(config) {
     if (pkg.dependencies?.["@jant/core"] === "workspace:*") {
       pkg.dependencies["@jant/core"] = `^${CORE_VERSION}`;
     }
-    delete pkg.scripts["dev:debug"];
-    if (packageManager !== "pnpm") {
+    if (packageManager !== "pnpm" && pkg.scripts) {
       delete pkg.packageManager;
-      if (pkg.scripts) {
-        for (const [key, value] of Object.entries(pkg.scripts)) {
-          if (typeof value === "string") {
-            pkg.scripts[key] = value.replace(
-              /pnpm run (\S+)/g,
-              (_, script) => formatRunCmd(packageManager, script)
-            );
-          }
+      for (const [key, value] of Object.entries(pkg.scripts)) {
+        if (typeof value === "string") {
+          pkg.scripts[key] = value.replace(
+            /pnpm run (\S+)/g,
+            (_, script) => formatRunCmd(packageManager, script)
+          );
         }
       }
     }
@@ -138,7 +130,10 @@ async function copyTemplate(config) {
   const wranglerPath = path.join(targetDir, "wrangler.toml");
   if (await fs.pathExists(wranglerPath)) {
     let content = await fs.readFile(wranglerPath, "utf-8");
-    content = processMarkers(content, { name: projectName });
+    content = processAnnotations(content, { name: projectName });
+    if (config.s3) {
+      content = content.replace(/\n\[\[r2_buckets\]\][^[]*/s, "\n");
+    }
     await fs.writeFile(wranglerPath, content, "utf-8");
   }
   const authSecret = generateAuthSecret();
@@ -147,19 +142,6 @@ async function copyTemplate(config) {
 AUTH_SECRET=${authSecret}
 `;
   if (config.s3) {
-    if (await fs.pathExists(wranglerPath)) {
-      let wContent = await fs.readFile(wranglerPath, "utf-8");
-      wContent = wContent.replace(
-        /^# STORAGE_DRIVER = "s3"/m,
-        'STORAGE_DRIVER = "s3"'
-      );
-      wContent = wContent.replace(/^# S3_ENDPOINT = /m, "S3_ENDPOINT = ");
-      wContent = wContent.replace(/^# S3_BUCKET = /m, "S3_BUCKET = ");
-      wContent = wContent.replace(/^# S3_REGION = /m, "S3_REGION = ");
-      wContent = wContent.replace(/^# S3_PUBLIC_URL = /m, "S3_PUBLIC_URL = ");
-      wContent = wContent.replace(/\n\[\[r2_buckets\]\][^[]*/s, "\n");
-      await fs.writeFile(wranglerPath, wContent, "utf-8");
-    }
     devVarsContent += `
 # S3-compatible storage credentials
 S3_ACCESS_KEY_ID=
@@ -167,37 +149,10 @@ S3_SECRET_ACCESS_KEY=
 `;
   }
   await fs.writeFile(
-    path.join(targetDir, secretsFile),
+    path.join(targetDir, ".dev.vars"),
     devVarsContent,
     "utf-8"
   );
-  const viteConfigPath = path.join(targetDir, "vite.config.ts");
-  if (await fs.pathExists(viteConfigPath)) {
-    let content = await fs.readFile(viteConfigPath, "utf-8");
-    content = processMarkers(content, {});
-    await fs.writeFile(viteConfigPath, content, "utf-8");
-  }
-  const readmePath = path.join(targetDir, "README.md");
-  if (packageManager !== "npm" && await fs.pathExists(readmePath)) {
-    let readme = await fs.readFile(readmePath, "utf-8");
-    readme = readme.replace(
-      /npm install (\S+)/g,
-      (_, pkg) => formatAddCmd(packageManager, pkg)
-    );
-    readme = readme.replace(/npm install/g, `${packageManager} install`);
-    readme = readme.replace(
-      /npm run (\S+)/g,
-      (_, script) => formatRunCmd(packageManager, script)
-    );
-    readme = readme.replace(/npm create/g, `${packageManager} create`);
-    await fs.writeFile(readmePath, readme, "utf-8");
-  }
-  if (packageManager === "pnpm") {
-    const wsSource = path.join(TEMPLATE_DIR, "pnpm-workspace.yaml");
-    if (await fs.pathExists(wsSource)) {
-      await fs.copy(wsSource, path.join(targetDir, "pnpm-workspace.yaml"));
-    }
-  }
 }
 async function main() {
   console.log();
@@ -209,12 +164,12 @@ async function main() {
   if (args[0]) {
     projectName = args[0];
   } else if (opts.yes) {
-    projectName = "jant-site";
+    projectName = "my-jant-site";
   } else {
     const result = await p.text({
       message: "What is your project name?",
-      placeholder: "jant-site",
-      defaultValue: "jant-site",
+      placeholder: "my-jant-site",
+      defaultValue: "my-jant-site",
       validate: (value) => {
         if (!value) return "Project name is required";
         const sanitized = toValidProjectName(value);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-jant",
-  "version": "0.3.27",
+  "version": "0.3.29",
   "description": "Create a new Jant project",
   "type": "module",
   "bin": {
@@ -53,8 +53,7 @@
     "build": "tsup src/index.ts --format esm --clean --outDir dist",
     "dev": "tsup src/index.ts --format esm --watch",
     "typecheck": "tsc --noEmit",
-    "copy-template": "rm -rf template && cp -r ../../templates/jant-site template",
-    "prepare-template": "node scripts/prepare-template.js",
+    "copy-template": "rm -rf template && rsync -a --exclude node_modules --exclude .wrangler --exclude .dev.vars --exclude scripts ../../sites/demo/ template/ && mv template/.gitignore template/_gitignore && mv template/.github template/_github",
     "inject-version": "node -e \"const fs=require('fs');const v=require('../core/package.json').version;const f='dist/index.js';fs.writeFileSync(f,fs.readFileSync(f,'utf8').replace('__JANT_CORE_VERSION__',v))\"",
     "test-template": "node scripts/test-template.js"
   }

package/template/README.md

@@ -1,46 +1,14 @@
-# Jant Site
+# Jant
 
-A personal website/blog powered by [Jant](https://github.com/jant-me/jant).
+A personal microblogging system — self-hosted, single-author, and stripped of all social mechanics. Runs on Cloudflare Workers.
 
-## Option A: One-Click Deploy
+## Quick Start
 
-Deploy to Cloudflare instantly — no local setup required:
+### One-Click Deploy
 
 [![Deploy to Cloudflare](https://deploy.workers.cloudflare.com/button)](https://deploy.workers.cloudflare.com/?url=https://github.com/jant-me/jant-starter)
 
-### Deploy form fields
-
-| Field                      | What to do                                                                                                                                                                                                                 |
-| -------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| **Git account**            | Select your GitHub account. A new repo will be created for you.                                                                                                                                                            |
-| **D1 database**            | Keep "Create new". The default name is fine.                                                                                                                                                                               |
-| **Database location hint** | Pick a region close to you (optional, Cloudflare auto-selects).                                                                                                                                                            |
-| **R2 bucket**              | Keep "Create new". The default name is fine. Used for media uploads.                                                                                                                                                       |
-| **AUTH_SECRET**            | Used for login session encryption. Keep the pre-filled value or generate your own with `openssl rand -base64 32`.                                                                                                          |
-| **SITE_URL**               | Change this to your production URL (e.g. `https://my-blog.example.com`). If you don't have a custom domain yet, leave it empty — you can set it later in the Cloudflare dashboard after you know your `*.workers.dev` URL. |
-
-### After deploy
-
-1. Visit your site at the URL shown in the Cloudflare dashboard (e.g. `https://<project>.<account>.workers.dev`)
-2. Go to `/dash` to set up your admin account
-3. If you set `SITE_URL` to a custom domain, add it in: Cloudflare dashboard → Workers & Pages → your worker → Settings → Domains & Routes → Add Custom Domain
-4. If you left `SITE_URL` empty, set it to your `*.workers.dev` URL: Cloudflare dashboard → Workers & Pages → your worker → Settings → Variables and Secrets
-
-### Develop locally
-
-```bash
-# Clone the repo that was created for you
-git clone git@github.com:<your-username>/<your-repo>.git
-cd <your-repo>
-npm install
-npm run dev
-```
-
-Visit http://localhost:9019. Changes pushed to `main` will auto-deploy.
-
-## Option B: Create with CLI
-
-Set up a new project locally, then deploy manually:
+### CLI
 
 ```bash
 npm create jant my-site
@@ -48,240 +16,103 @@ cd my-site
 npm run dev
 ```
 
-Visit http://localhost:9019. When you're ready to go live, continue with [Deploy to Cloudflare](#deploy-to-cloudflare) below.
-
-### Deploy to Cloudflare
-
-#### 1. Prerequisites
-
-Install [Wrangler CLI](https://developers.cloudflare.com/workers/wrangler/install-and-update/) and log in:
-
-```bash
-wrangler login
-```
-
-#### 2. Create D1 Database
+### Manual Deploy
 
-Check the `database_name` in your `wrangler.toml` (defaults to `<your-project>-db`), then create it:
+1. **Create a D1 database:**
 
-```bash
-wrangler d1 create <your-project>-db
-# Copy the database_id from the output!
-```
-
-#### 3. Update Configuration
-
-Edit `wrangler.toml`:
-
-- Replace `database_id = "local"` with the ID from step 2
-- Set `SITE_URL` to your production URL (e.g. `https://example.com`)
-
-> R2 bucket is automatically created on first deploy — no manual setup needed.
->
-> **Note:** Changing `database_id` resets your local development database (local data is stored per database ID). If you've already started local development, you'll need to go through the setup wizard again to create your admin account.
-
-#### 4. Set Production Secrets
-
-Generate a production secret and save it somewhere safe (you'll need it again for CI):
-
-```bash
-# Generate a secret
-openssl rand -base64 32
-
-# Set it in Cloudflare
-wrangler secret put AUTH_SECRET
-# Paste the generated value when prompted
-```
-
-> **Important:** This is separate from the `AUTH_SECRET` in `.dev.vars` (which is for local development only). Do not change the production secret after your site is live — it will invalidate all sessions. If you get locked out, use `npm run reset-password` to generate a password reset link.
-
-#### 5. Deploy
-
-```bash
-# Apply database migrations and deploy
-npm run deploy
-```
+   ```bash
+   npx wrangler d1 create my-site-db
+   ```
 
-Your site is now live at `https://<your-project>.<your-subdomain>.workers.dev`!
+2. **Update `wrangler.toml`** with the `database_id` from step 1 and set your `SITE_URL`.
 
-#### 6. Custom Domain (Optional)
+3. **Set production secrets:**
 
-1. Go to [Cloudflare Dashboard](https://dash.cloudflare.com) → Workers & Pages
-2. Select your worker → Settings → Domains & Routes
-3. Click **Add -> Custom domain** and enter your domain
+   ```bash
+   npx wrangler secret put AUTH_SECRET
+   ```
 
-### GitHub Actions (CI/CD)
+4. **Deploy:**
 
-A workflow file is included at `.github/workflows/deploy.yml`. Complete the [deployment](#deploy-to-cloudflare) first, then set up CI for automatic deployments.
-
-> Runtime secrets (`AUTH_SECRET`, S3 keys, etc.) are already stored in Cloudflare from the manual deployment step. CI only needs deployment credentials.
-
-#### 1. Push to GitHub
-
-Create a new repository on [GitHub](https://github.com/new), then commit and push your project:
-
-```bash
-git add -A
-git commit -m "Initial setup"
-git remote add origin git@github.com:<your-username>/<your-repo>.git
-git push -u origin main
-```
-
-#### 2. Create API Token
-
-1. Go to [Cloudflare API Tokens](https://dash.cloudflare.com/profile/api-tokens)
-2. Click **Create Token** → **Use template** next to **Edit Cloudflare Workers**
-3. **Add D1 permission** (not in template by default):
-   - Click **+ Add more** → **Account** → **D1** → **Edit**
-
-Your permissions should include:
-
-| Scope   | Permission         | Access                        |
-| ------- | ------------------ | ----------------------------- |
-| Account | Workers Scripts    | Edit                          |
-| Account | Workers R2 Storage | Edit                          |
-| Account | **D1**             | **Edit** ← Must add manually! |
-| Zone    | Workers Routes     | Edit                          |
-
-4. Set **Account Resources** → **Include** → your account
-5. Set **Zone Resources** → **Include** → **All zones from an account** → your account
-6. **Create Token** and copy it
-
-#### 3. Add GitHub Secrets
-
-Go to your repo → **Settings** → **Secrets and variables** → **Actions**:
-
-| Secret Name     | Value                                                                    |
-| --------------- | ------------------------------------------------------------------------ |
-| `CF_API_TOKEN`  | API token from above                                                     |
-| `CF_ACCOUNT_ID` | Your Cloudflare Account ID (found in dashboard URL or `wrangler whoami`) |
-
-#### 4. Enable Auto-Deploy
-
-Uncomment the push trigger in `.github/workflows/deploy.yml`:
-
-```yaml
-on:
-  push:
-    branches:
-      - main
-  workflow_dispatch:
-```
-
-Now every push to `main` will auto-deploy.
-
-#### Using Environments (Optional)
-
-For separate staging/production, update `.github/workflows/deploy.yml`:
-
-```yaml
-jobs:
-  deploy:
-    uses: jant-me/jant/.github/workflows/deploy.yml@main
-    with:
-      environment: production # Uses [env.production] in wrangler.toml
-    secrets:
-      CF_API_TOKEN: ${{ secrets.CF_API_TOKEN }}
-      CF_ACCOUNT_ID: ${{ secrets.CF_ACCOUNT_ID }}
-```
+   ```bash
+   npm run deploy
+   ```
 
 ## Commands
 
-| Command                     | Description                        |
-| --------------------------- | ---------------------------------- |
-| `npm run dev`               | Start development server           |
-| `npm run build`             | Build for production               |
-| `npm run deploy`            | Migrate, build, and deploy         |
-| `npm run preview`           | Preview production build           |
-| `npm run typecheck`         | Run TypeScript checks              |
-| `npm run db:migrate:remote` | Apply database migrations (remote) |
+| Command          | Description                                 |
+| ---------------- | ------------------------------------------- |
+| `npm run dev`    | Start local dev server (applies migrations) |
+| `npm run deploy` | Deploy to Cloudflare (applies migrations)   |
 
 ## Environment Variables
 
-| Variable      | Description                               | Location         |
-| ------------- | ----------------------------------------- | ---------------- |
-| `AUTH_SECRET` | Secret key for authentication (32+ chars) | `.dev.vars` file |
-| `SITE_URL`    | Your site's public URL                    | `wrangler.toml`  |
+Configuration is set in `wrangler.toml` and `.dev.vars`. See [Configuration](https://github.com/jant-me/jant/blob/main/docs/configuration.md) for the full reference.
 
-For all available variables (site name, language, R2 storage, image optimization, S3, demo mode, etc.), see the **[Configuration Guide](https://github.com/jant-me/jant/blob/main/docs/configuration.md)**.
+**Required:**
 
-## Customization
-
-### Color Themes
+| Variable      | Where           | Description                        |
+| ------------- | --------------- | ---------------------------------- |
+| `SITE_URL`    | `wrangler.toml` | Your site's public URL             |
+| `AUTH_SECRET` | `.dev.vars`     | Session encryption key (32+ chars) |
 
-Pick a color theme from the dashboard: **Settings > Appearance**.
+**Optional (in `wrangler.toml`):**
 
-### Custom CSS
+| Variable              | Description                               |
+| --------------------- | ----------------------------------------- |
+| `SITE_NAME`           | Display name (also settable in dashboard) |
+| `SITE_DESCRIPTION`    | Meta description / RSS subtitle           |
+| `SITE_LANGUAGE`       | Language code (`en`, `zh`, etc.)          |
+| `R2_PUBLIC_URL`       | Public URL for R2 media bucket            |
+| `IMAGE_TRANSFORM_URL` | Cloudflare Image Transformations URL      |
 
-Inject custom CSS from the dashboard: **Settings > Appearance > Custom CSS**. This CSS is applied with the highest priority, so you can override any built-in styles.
+## GitHub Actions CI/CD
 
-### CSS Design Tokens
+The included workflow (`.github/workflows/deploy.yml`) deploys on every push to `main`.
 
-Override design tokens in your custom CSS to change the look and feel:
+**Setup:**
 
-```css
-:root {
-  --site-width: 720px;
-  --card-radius: 0.5rem;
-  --font-body: "Inter", system-ui, sans-serif;
-  --avatar-size: 42px;
-}
-```
+1. Add these **repository secrets** in Settings > Secrets and variables > Actions:
+   - `CF_API_TOKEN` — Cloudflare API token with Workers, D1, and R2 permissions
+   - `CF_ACCOUNT_ID` — your Cloudflare account ID
+2. Set your production `AUTH_SECRET`:
+   ```bash
+   npx wrangler secret put AUTH_SECRET
+   ```
+3. Push to `main` — the workflow handles migrations and deployment.
 
-### Data Attributes
-
-Target specific elements with stable data attributes:
+## Customization
 
-```css
-/* Style only note-format posts */
-[data-format="note"] {
-  border-left: 3px solid var(--primary);
-}
+### CSS Tokens
 
-/* Style the home page differently */
-[data-page="home"] {
-  background: var(--muted);
-}
+Customize colors through the dashboard (Settings > Appearance) or by overriding CSS variables. See [Theming](https://github.com/jant-me/jant/blob/main/docs/theming.md).
 
-/* Hide compose prompt for unauthenticated visitors */
-body:not([data-authenticated]) .compose-prompt {
-  display: none;
-}
-```
+### Data Attributes
 
-### Code-Level Customization
+Target specific elements for styling with stable data attributes:
 
-Pass CSS variable overrides or custom color themes via `createApp()`:
+| Attribute        | Purpose                       |
+| ---------------- | ----------------------------- |
+| `data-page`      | Page type identifier          |
+| `data-post`      | Post marker                   |
+| `data-format`    | Post format (note/link/quote) |
+| `data-post-body` | Post body content             |
 
-```typescript
-import { createApp } from "@jant/core";
+### Code-Level
 
-export default createApp({
-  cssVariables: {
-    "--site-width": "720px",
-    "--card-radius": "0.5rem",
-  },
-});
-```
+For deeper changes, fork the project and modify `@jant/core` directly.
 
 ## Updating
 
 ```bash
-# Update @jant/core to latest version
-npm install @jant/core@latest
-
-# Start dev server (auto-applies migrations locally)
-npm run dev
-
-# Deploy (includes remote migrations)
+npm update @jant/core
 npm run deploy
 ```
 
-> New versions of `@jant/core` may include database migrations. Check the [release notes](https://github.com/jant-me/jant/releases) for any breaking changes.
->
-> **Dev dependencies** (vite, wrangler, tailwindcss, etc.) may also need updating. Compare your `devDependencies` with the [latest template](https://github.com/jant-me/jant/blob/main/templates/jant-site/package.json) and update if needed.
+Check the [changelog](https://github.com/jant-me/jant/releases) for breaking changes before updating.
 
 ## Documentation
 
-- [Jant Documentation](https://jant.me/docs)
-- [GitHub Repository](https://github.com/jant-me/jant)
+- [Configuration](https://github.com/jant-me/jant/blob/main/docs/configuration.md)
+- [Theming](https://github.com/jant-me/jant/blob/main/docs/theming.md)
+- [GitHub](https://github.com/jant-me/jant)

package/template/_github/workflows/deploy.yml

@@ -1,25 +1,47 @@
-# Deploy to Cloudflare Workers
-# Documentation: https://jant.me/docs/deployment
+# Deploy your Jant site to Cloudflare Workers.
 #
 # Prerequisites:
-#   1. Complete manual deployment first (see README.md → Deploy to Cloudflare)
-#   2. Set GitHub secrets: CF_API_TOKEN and CF_ACCOUNT_ID
+# 1. Create a D1 database: npx wrangler d1 create <name>
+# 2. Update wrangler.toml with the database_id
+# 3. Add repository secrets: CF_API_TOKEN, CF_ACCOUNT_ID
+# 4. Set production secret: npx wrangler secret put AUTH_SECRET
 #
-# Runtime secrets (AUTH_SECRET, S3 keys, etc.) are managed via
-# `wrangler secret put` and persist across deployments.
+# Full setup guide: https://github.com/jant-me/jant
 
 name: Deploy
 
 on:
-  # Uncomment to auto-deploy on push after configuring secrets:
-  # push:
-  #   branches:
-  #     - main
+  push:
+    branches:
+      - main
   workflow_dispatch:
 
 jobs:
   deploy:
-    uses: jant-me/jant/.github/workflows/deploy.yml@main
-    secrets:
-      CF_API_TOKEN: ${{ secrets.CF_API_TOKEN }}
-      CF_ACCOUNT_ID: ${{ secrets.CF_ACCOUNT_ID }}
+    name: Deploy
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: "24"
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Run migrations
+        run: npx wrangler d1 migrations apply DB --remote
+        env:
+          CLOUDFLARE_API_TOKEN: ${{ secrets.CF_API_TOKEN }}
+          CLOUDFLARE_ACCOUNT_ID: ${{ secrets.CF_ACCOUNT_ID }}
+
+      - name: Deploy to Cloudflare Workers
+        uses: cloudflare/wrangler-action@v3
+        with:
+          apiToken: ${{ secrets.CF_API_TOKEN }}
+          accountId: ${{ secrets.CF_ACCOUNT_ID }}
+          command: deploy