sproutboat 0.5.0 → 0.6.0

package/src/main.ts

@@ -23,7 +23,13 @@ async function responseText(response: Response, failure: string): Promise<string
 }
 
 type VersionSummary = { id: string; artifact: string; deployedAt: string; active: boolean };
-type CliAuthorization = { deviceCode: string; userCode: string; verificationUri: string; interval: number; expiresAt: string };
+type CliAuthorization = {
+  deviceCode: string;
+  userCode: string;
+  verificationUri: string;
+  interval: number;
+  expiresAt: string;
+};
 
 function parseVersionList(source: string): VersionSummary[] | undefined {
   const value = parseJsonValue(source);
@@ -31,13 +37,27 @@ function parseVersionList(source: string): VersionSummary[] | undefined {
   const deployments: VersionSummary[] = [];
   for (const item of value) {
     const record = jsonObject(item);
-    if (!record || !isString(record.id) || !isString(record.artifact) || !isString(record.deployedAt) || (record.active !== true && record.active !== false)) return undefined;
-    deployments.push({ id: record.id, artifact: record.artifact, deployedAt: record.deployedAt, active: record.active });
+    if (
+      !record ||
+      !isString(record.id) ||
+      !isString(record.artifact) ||
+      !isString(record.deployedAt) ||
+      (record.active !== true && record.active !== false)
+    )
+      return undefined;
+    deployments.push({
+      id: record.id,
+      artifact: record.artifact,
+      deployedAt: record.deployedAt,
+      active: record.active,
+    });
   }
   return deployments;
 }
 
-function parseUrlResponse(source: string): { url: string; id?: string; artifact?: string; unchanged: boolean } | undefined {
+function parseUrlResponse(
+  source: string,
+): { url: string; id?: string; artifact?: string; unchanged: boolean } | undefined {
   const record = jsonObject(parseJsonValue(source));
   if (!record || !isString(record.url)) return undefined;
   return {
@@ -53,15 +73,35 @@ function parseUrlResponse(source: string): { url: string; id?: string; artifact?
  *  the pin only changes by redeploying — and the alpha compiler's output can
  *  differ between pins. */
 function parsePorfforDrift(source: string): { from: string; to: string } | undefined {
-  const drift = (() => { try { return jsonObject(parseJsonValue(source))?.porfforDrift; } catch { return undefined; } })();
+  const drift = (() => {
+    try {
+      return jsonObject(parseJsonValue(source))?.porfforDrift;
+    } catch {
+      return undefined;
+    }
+  })();
   const record = drift && jsonObject(drift);
   return record && isString(record.from) && isString(record.to) ? { from: record.from, to: record.to } : undefined;
 }
 
 function parseAuthorization(source: string): CliAuthorization | undefined {
   const record = jsonObject(parseJsonValue(source));
-  if (!record || !isString(record.deviceCode) || !isString(record.userCode) || !isString(record.verificationUri) || !isSafeInteger(record.interval) || !isString(record.expiresAt)) return undefined;
-  return { deviceCode: record.deviceCode, userCode: record.userCode, verificationUri: record.verificationUri, interval: record.interval, expiresAt: record.expiresAt };
+  if (
+    !record ||
+    !isString(record.deviceCode) ||
+    !isString(record.userCode) ||
+    !isString(record.verificationUri) ||
+    !isSafeInteger(record.interval) ||
+    !isString(record.expiresAt)
+  )
+    return undefined;
+  return {
+    deviceCode: record.deviceCode,
+    userCode: record.userCode,
+    verificationUri: record.verificationUri,
+    interval: record.interval,
+    expiresAt: record.expiresAt,
+  };
 }
 
 function parseToken(source: string): string | undefined {
@@ -140,7 +180,8 @@ async function readProject(directory = process.cwd()) {
 }
 
 async function init(name = "hello") {
-  if (!/^[a-z0-9](?:[a-z0-9-]{1,30}[a-z0-9])?$/.test(name)) fail("project name must be a 3–32 character lowercase slug");
+  if (!/^[a-z0-9](?:[a-z0-9-]{1,30}[a-z0-9])?$/.test(name))
+    fail("project name must be a 3–32 character lowercase slug");
   const directory = resolve(process.cwd(), name);
   const configPath = resolve(directory, "sproutboat.jsonc");
   const handlerPath = resolve(directory, "src/index.js");
@@ -148,7 +189,10 @@ async function init(name = "hello") {
   // unrelated existing directory, and a second `wx` write failing partway
   // through used to crash with a raw EEXIST stack trace after already having
   // created sproutboat.jsonc, leaving a half-scaffolded project behind.
-  for (const [path, label] of [[configPath, "sproutboat.jsonc"], [handlerPath, "src/index.js"]] as const) {
+  for (const [path, label] of [
+    [configPath, "sproutboat.jsonc"],
+    [handlerPath, "src/index.js"],
+  ] as const) {
     if (await Bun.file(path).exists()) fail(`${basename(directory)} already contains ${label}`);
   }
   await mkdir(resolve(directory, "src"), { recursive: true });
@@ -173,12 +217,21 @@ async function check(directory?: string) {
 
 async function build(directory?: string, target: "linux-x86_64" | "host" = "linux-x86_64") {
   const project = await readProject(directory);
-  console.log(target === "host"
-    ? dim(`Compiling the native-fetch server with Porffor for this machine (${hostTarget()}, local only)…`)
-    : dim("Compiling the native-fetch server with Porffor + Zig (linux-x86_64, static)…"));
-  const artifact = await buildArtifact({ projectDir: project.directory, config: project.config, sourcePath: project.sourcePath, source: project.bundle.code, target });
+  console.log(
+    target === "host"
+      ? dim(`Compiling the native-fetch server with Porffor for this machine (${hostTarget()}, local only)…`)
+      : dim("Compiling the native-fetch server with Porffor + Zig (linux-x86_64, static)…"),
+  );
+  const artifact = await buildArtifact({
+    projectDir: project.directory,
+    config: project.config,
+    sourcePath: project.sourcePath,
+    source: project.bundle.code,
+    target,
+  });
   console.log(ok(`built ${project.config.name}`));
-  if (target === "host") console.log(dim("  host build — runs here, not deployable; drop --target host to build for a box"));
+  if (target === "host")
+    console.log(dim("  host build — runs here, not deployable; drop --target host to build for a box"));
   console.log(artifact.artifactDir);
   return { project, artifact };
 }
@@ -189,7 +242,8 @@ async function dev(args: string[]) {
   const portIndex = args.indexOf("--port");
   const portArg = portIndex >= 0 ? args[portIndex + 1] : undefined;
   const port = Number(portArg ?? 8787);
-  if (!Number.isSafeInteger(port) || port < 1 || port > 65_535) usageError(`invalid --port: ${portArg}`, "dev [project-dir] [--port <n>] [--no-watch]");
+  if (!Number.isSafeInteger(port) || port < 1 || port > 65_535)
+    usageError(`invalid --port: ${portArg}`, "dev [project-dir] [--port <n>] [--no-watch]");
   const project = await readProject(directory);
   console.log(dim(`Building ${project.config.name} for this machine (${hostTarget()})…`));
   await runDev({
@@ -254,9 +308,9 @@ async function provisionBindings(directory = process.cwd()): Promise<void> {
 /** #79 — wrangler parity: drop the stored credential for an endpoint. */
 async function logout(args: string[]) {
   const { apiUrl } = parseLoginArgs(args);
-  console.log(await forgetToken(apiUrl)
-    ? ok(`forgot the credential for ${apiUrl}`)
-    : `no stored credential for ${apiUrl}`);
+  console.log(
+    (await forgetToken(apiUrl)) ? ok(`forgot the credential for ${apiUrl}`) : `no stored credential for ${apiUrl}`,
+  );
 }
 
 /**
@@ -265,15 +319,23 @@ async function logout(args: string[]) {
  * works rather than only reporting what is on disk.
  */
 async function whoami() {
-  const apiUrl = process.env.SPROUTBOAT_API_URL || await activeApiUrl();
-  if (!apiUrl) { console.log("not logged in — run `sproutboat login`"); return; }
-  const token = process.env.SPROUTBOAT_TOKEN || await savedToken(apiUrl);
+  const apiUrl = process.env.SPROUTBOAT_API_URL || (await activeApiUrl());
+  if (!apiUrl) {
+    console.log("not logged in — run `sproutboat login`");
+    return;
+  }
+  const token = process.env.SPROUTBOAT_TOKEN || (await savedToken(apiUrl));
   console.log(`endpoint  ${apiUrl}`);
-  if (!token) { console.log(`account   ${dim("no stored token — run `sproutboat login`")}`); return; }
+  if (!token) {
+    console.log(`account   ${dim("no stored token — run `sproutboat login`")}`);
+    return;
+  }
 
   const response = await fetch(`${apiUrl}/api/account`, { headers: { "x-api-key": token } });
   if (!response.ok) {
-    console.log(`account   ${rose(response.status === 401 ? "token rejected — run `sproutboat login`" : `control plane said ${response.status}`)}`);
+    console.log(
+      `account   ${rose(response.status === 401 ? "token rejected — run `sproutboat login`" : `control plane said ${response.status}`)}`,
+    );
     return;
   }
   const account = jsonObject(parseJsonValue(await response.text()));
@@ -293,7 +355,10 @@ async function deploy(args: string[]) {
   if (artifactIndex >= 0) {
     artifactDir = args[artifactIndex + 1]
       ? resolve(args[artifactIndex + 1])
-      : usageError("deploy: --artifact needs a directory", "deploy [project-dir] [--dry-run] [--artifact <dir>] [--no-wait]");
+      : usageError(
+          "deploy: --artifact needs a directory",
+          "deploy [project-dir] [--dry-run] [--artifact <dir>] [--no-wait]",
+        );
     projectName = "";
   } else {
     // wrangler-style: create resources for id-less bindings and pin the ids
@@ -338,7 +403,10 @@ async function deploy(args: string[]) {
   if (await assetsManifestFile.exists()) {
     // assets.json is written by `sproutboat build` from the AssetManifest contract.
     const assetsManifest: { files?: AssetFiles } = await assetsManifestFile.json();
-    form.set("assets_manifest", new File([await assetsManifestFile.arrayBuffer()], "assets.json", { type: "application/json" }));
+    form.set(
+      "assets_manifest",
+      new File([await assetsManifestFile.arrayBuffer()], "assets.json", { type: "application/json" }),
+    );
     for (const key of Object.keys(assetsManifest.files ?? {})) {
       const file = Bun.file(resolve(artifactDir, "assets", `.${key}`));
       if (!(await file.exists())) fail(`assets.json lists ${key} but assets${key} is missing — rebuild`);
@@ -361,18 +429,29 @@ async function deploy(args: string[]) {
   }
   console.log(`\n${leaf("🌱")} ${bold(leaf(`Deployed ${projectName}`))}`);
   console.log(`  ${bold(deployed.url)}`);
-  if (deployed.id) console.log(dim(`  version ${deployed.id}${deployed.artifact ? `  ·  artifact ${deployed.artifact.slice(0, 12)}` : ""}`));
+  if (deployed.id)
+    console.log(
+      dim(`  version ${deployed.id}${deployed.artifact ? `  ·  artifact ${deployed.artifact.slice(0, 12)}` : ""}`),
+    );
   for (const cron of config?.triggers?.crons ?? []) console.log(dim(`  schedule ${cron}`));
   const drift = parsePorfforDrift(body);
   if (drift) {
     console.warn(amber(`\n! Porffor pin changed: ${drift.from} -> ${drift.to}`));
     console.warn(dim(`  The previous live version stays frozen at ${drift.from}; this one is built with ${drift.to}.`));
-    console.warn(dim(`  The alpha compiler's output can differ between pins (see COMPAT.md) — roll back if this version misbehaves.`));
+    console.warn(
+      dim(
+        `  The alpha compiler's output can differ between pins (see COMPAT.md) — roll back if this version misbehaves.`,
+      ),
+    );
   }
   // Verify the edge actually answers (cert issuance + sprout boot). Say nothing
   // on success — "Deployed" already implied that; only speak up if it doesn't.
   if (!args.includes("--no-wait") && !(await waitForHealthy(deployed.url, 90_000))) {
-    console.warn(amber("  ! not serving after 90s — Caddy may still be issuing the cert, or the sprout is crashing (`sproutboat tail`)"));
+    console.warn(
+      amber(
+        "  ! not serving after 90s — Caddy may still be issuing the cert, or the sprout is crashing (`sproutboat tail`)",
+      ),
+    );
   }
 }
 
@@ -389,7 +468,9 @@ async function waitForHealthy(url: string, timeoutMs: number): Promise<boolean>
     try {
       const response = await fetch(url, { method: "HEAD", redirect: "manual" });
       if (response.status < 500) return true;
-    } catch { /* DNS / TLS-not-yet-issued / connection refused — keep waiting */ }
+    } catch {
+      /* DNS / TLS-not-yet-issued / connection refused — keep waiting */
+    }
     await Bun.sleep(Math.min(wait, Math.max(0, deadline - Date.now())));
     if (wait < 5000) wait += 1000;
   }
@@ -422,9 +503,17 @@ async function login(args: string[]) {
   const authorization = parseAuthorization(body);
   if (!authorization) fail("login response did not include a valid authorization request");
   const verificationUrl = new URL(authorization.verificationUri, `${apiUrl}/`).toString();
-  const openCommand = process.platform === "darwin" ? ["open", verificationUrl] : process.platform === "win32" ? ["cmd", "/c", "start", "", verificationUrl] : ["xdg-open", verificationUrl];
-  try { Bun.spawn(openCommand, { stdout: "ignore", stderr: "ignore" }); }
-  catch { console.log(`Open ${verificationUrl}`); }
+  const openCommand =
+    process.platform === "darwin"
+      ? ["open", verificationUrl]
+      : process.platform === "win32"
+        ? ["cmd", "/c", "start", "", verificationUrl]
+        : ["xdg-open", verificationUrl];
+  try {
+    Bun.spawn(openCommand, { stdout: "ignore", stderr: "ignore" });
+  } catch {
+    console.log(`Open ${verificationUrl}`);
+  }
   console.log("Opening the browser to approve this CLI login.");
   console.log(`Confirm code: ${authorization.userCode}`);
   while (new Date(authorization.expiresAt).getTime() > Date.now()) {
@@ -447,8 +536,8 @@ async function login(args: string[]) {
 }
 
 async function apiCredentials() {
-  const apiUrl = (process.env.SPROUTBOAT_API_URL || await activeApiUrl() || defaultApiUrl).replace(/\/$/, "");
-  const token = process.env.SPROUTBOAT_TOKEN || await savedToken(apiUrl);
+  const apiUrl = (process.env.SPROUTBOAT_API_URL || (await activeApiUrl()) || defaultApiUrl).replace(/\/$/, "");
+  const token = process.env.SPROUTBOAT_TOKEN || (await savedToken(apiUrl));
   if (!token) fail("not logged in; run sproutboat login or set SPROUTBOAT_TOKEN for this command");
   return { apiUrl, token };
 }
@@ -456,7 +545,10 @@ async function apiCredentials() {
 async function versions(args: string[]) {
   const sub = args[0];
   if (sub !== "list" && sub !== "view") {
-    usageError(sub ? `versions: unknown subcommand "${sub}"` : "versions: missing subcommand", "versions <list | view <version-id>> [project-dir]");
+    usageError(
+      sub ? `versions: unknown subcommand "${sub}"` : "versions: missing subcommand",
+      "versions <list | view <version-id>> [project-dir]",
+    );
   }
   args.shift();
 
@@ -465,7 +557,9 @@ async function versions(args: string[]) {
     if (!id) usageError("versions view: missing <version-id>", "versions view <version-id> [project-dir]");
     const [project, { apiUrl, token }] = await Promise.all([readProject(args[0]), apiCredentials()]);
     const body = await responseText(
-      await fetch(`${apiUrl}/api/projects/${project.config.name}/deployments/${encodeURIComponent(id)}`, { headers: { "x-api-key": token } }),
+      await fetch(`${apiUrl}/api/projects/${project.config.name}/deployments/${encodeURIComponent(id)}`, {
+        headers: { "x-api-key": token },
+      }),
       "could not read that version",
     );
     const detail = jsonObject(parseJsonValue(body));
@@ -474,31 +568,44 @@ async function versions(args: string[]) {
     console.log(`${bold(String(detail.id))} ${detail.active ? ok("active") : dim("superseded")}`);
     console.log(`  route     ${String(detail.hostname)}`);
     console.log(`  artifact  ${String(detail.artifact)}`);
-    console.log(`  deployed  ${String(detail.deployedAt)}${isString(detail.deployedBy) ? ` by ${detail.deployedBy}` : ""}`);
+    console.log(
+      `  deployed  ${String(detail.deployedAt)}${isString(detail.deployedBy) ? ` by ${detail.deployedBy}` : ""}`,
+    );
     if (manifest) {
-      console.log(`  built     ${String(manifest.builtAt)} · porffor ${String(manifest.porfforVersion)} · ${String(manifest.binarySize)} bytes`);
+      console.log(
+        `  built     ${String(manifest.builtAt)} · porffor ${String(manifest.porfforVersion)} · ${String(manifest.binarySize)} bytes`,
+      );
     } else if (isString(detail.manifestError)) {
       console.log(`  ! manifest unavailable: ${detail.manifestError}`);
     }
     const resources = Array.isArray(detail.resources) ? detail.resources.map((entry) => jsonObject(entry)) : [];
     for (const resource of resources) {
-      if (resource) console.log(`  bound     ${String(resource.kind)} ${String(resource.name)} ${dim(String(resource.id))}`);
+      if (resource)
+        console.log(`  bound     ${String(resource.kind)} ${String(resource.name)} ${dim(String(resource.id))}`);
     }
     return;
   }
 
   const [project, { apiUrl, token }] = await Promise.all([readProject(args[0]), apiCredentials()]);
-  const response = await fetch(`${apiUrl}/api/projects/${project.config.name}/deployments`, { headers: { "x-api-key": token } });
+  const response = await fetch(`${apiUrl}/api/projects/${project.config.name}/deployments`, {
+    headers: { "x-api-key": token },
+  });
   const deployments = parseVersionList(await responseText(response, "could not list versions"));
   if (!deployments) fail("could not parse versions response");
-  for (const deployment of deployments) console.log(`${deployment.active ? "*" : " "} ${deployment.id} ${deployment.artifact.slice(0, 12)} ${deployment.deployedAt}`);
+  for (const deployment of deployments)
+    console.log(
+      `${deployment.active ? "*" : " "} ${deployment.id} ${deployment.artifact.slice(0, 12)} ${deployment.deployedAt}`,
+    );
 }
 
 async function rollback(args: string[]) {
   const id = args[0];
   if (!id) usageError("rollback: missing <version-id>", "rollback <version-id> [project-dir]");
   const [project, { apiUrl, token }] = await Promise.all([readProject(args[1]), apiCredentials()]);
-  const response = await fetch(`${apiUrl}/api/projects/${project.config.name}/deployments/${id}/activate`, { method: "POST", headers: { "x-api-key": token } });
+  const response = await fetch(`${apiUrl}/api/projects/${project.config.name}/deployments/${id}/activate`, {
+    method: "POST",
+    headers: { "x-api-key": token },
+  });
   const deployment = parseUrlResponse(await responseText(response, "rollback rejected"));
   if (!deployment) fail("rollback response did not include a URL");
   console.log(ok(`rolled back ${project.config.name}`));
@@ -510,7 +617,9 @@ async function tail(args: string[]) {
   const dir = args.find((arg) => !arg.startsWith("-"));
   const [project, { apiUrl, token }] = await Promise.all([readProject(dir), apiCredentials()]);
   const path = sproutLog ? "logs/sprout" : "logs/recent";
-  const response = await fetch(`${apiUrl}/api/projects/${project.config.name}/${path}`, { headers: { "x-api-key": token } });
+  const response = await fetch(`${apiUrl}/api/projects/${project.config.name}/${path}`, {
+    headers: { "x-api-key": token },
+  });
   process.stdout.write(await responseText(response, "could not read logs"));
 }
 
@@ -525,9 +634,18 @@ function parseDomain(source: string): DomainView | undefined {
   const record = jsonObject(parseJsonValue(source));
   if (!record || !isString(record.hostname) || !isBoolean(record.verified)) return undefined;
   const v = jsonObject(record.verification ?? null);
-  const verification = v && isString(v.type) && isString(v.name) && isString(v.value) ? { type: v.type, name: v.name, value: v.value } : null;
+  const verification =
+    v && isString(v.type) && isString(v.name) && isString(v.value)
+      ? { type: v.type, name: v.name, value: v.value }
+      : null;
   const serverAddresses = Array.isArray(record.serverAddresses) ? record.serverAddresses.filter(isString) : [];
-  return { hostname: record.hostname, verified: record.verified, verification, serverAddresses, warning: isString(record.warning) ? record.warning : undefined };
+  return {
+    hostname: record.hostname,
+    verified: record.verified,
+    verification,
+    serverAddresses,
+    warning: isString(record.warning) ? record.warning : undefined,
+  };
 }
 function printDomain(domain: DomainView) {
   const status = domain.verified ? "verified" : "unverified";
@@ -536,16 +654,22 @@ function printDomain(domain: DomainView) {
     console.log("  add these DNS records, then run: sproutboat domains verify " + domain.hostname);
     console.log(`  ${domain.verification.type}  ${domain.verification.name}  "${domain.verification.value}"`);
     if (domain.serverAddresses[0]) {
-      console.log(`  A    ${domain.hostname}  ${domain.serverAddresses[0]}   (point the hostname here, DNS-only / not proxied)`);
+      console.log(
+        `  A    ${domain.hostname}  ${domain.serverAddresses[0]}   (point the hostname here, DNS-only / not proxied)`,
+      );
     }
   }
   if (domain.warning) console.log(amber(`  ! ${domain.warning}`));
 }
 
 async function domains(args: string[]) {
-  const sub = args[0] && !args[0].startsWith("-") && ["list", "add", "verify", "delete"].includes(args[0]) ? args.shift()! : "list";
+  const sub =
+    args[0] && !args[0].startsWith("-") && ["list", "add", "verify", "delete"].includes(args[0])
+      ? args.shift()!
+      : "list";
   const host = sub === "list" ? undefined : args.shift();
-  if (sub !== "list" && !host) usageError(`domains ${sub}: missing <hostname>`, `domains ${sub} <hostname> [project-dir]`);
+  if (sub !== "list" && !host)
+    usageError(`domains ${sub}: missing <hostname>`, `domains ${sub} <hostname> [project-dir]`);
   const [project, { apiUrl, token }] = await Promise.all([readProject(args[0]), apiCredentials()]);
   const base = `${apiUrl}/api/projects/${project.config.name}/domains`;
   const auth = { "x-api-key": token };
@@ -555,8 +679,14 @@ async function domains(args: string[]) {
     const body = await responseText(response, "could not list domains");
     const list = parseJsonValue(body);
     if (!Array.isArray(list)) fail("could not parse domains response");
-    if (list.length === 0) { console.log("no custom domains"); return; }
-    for (const entry of list) { const d = parseDomain(JSON.stringify(entry)); if (d) printDomain(d); }
+    if (list.length === 0) {
+      console.log("no custom domains");
+      return;
+    }
+    for (const entry of list) {
+      const d = parseDomain(JSON.stringify(entry));
+      if (d) printDomain(d);
+    }
     return;
   }
   if (sub === "delete") {
@@ -566,9 +696,14 @@ async function domains(args: string[]) {
     return;
   }
   const url = sub === "add" ? base : `${base}/${host}/verify`;
-  const init = sub === "add"
-    ? { method: "POST", headers: { ...auth, "content-type": "application/json" }, body: JSON.stringify({ hostname: host }) }
-    : { method: "POST", headers: auth };
+  const init =
+    sub === "add"
+      ? {
+          method: "POST",
+          headers: { ...auth, "content-type": "application/json" },
+          body: JSON.stringify({ hostname: host }),
+        }
+      : { method: "POST", headers: auth };
   const response = await fetch(url, init);
   const domain = parseDomain(await responseText(response, `${sub} rejected`));
   if (!domain) fail(`${sub} response was not a domain record`);
@@ -612,7 +747,11 @@ async function secrets(args: string[]) {
   const value = inlineValue ?? (await Bun.stdin.text()).replace(/\r?\n$/, "");
   if (!value) fail("no value — pipe it on stdin, or pass --value <value>");
   await responseText(
-    await fetch(`${base}/${name}`, { method: "PUT", headers: { ...auth, "content-type": "application/json" }, body: JSON.stringify({ value }) }),
+    await fetch(`${base}/${name}`, {
+      method: "PUT",
+      headers: { ...auth, "content-type": "application/json" },
+      body: JSON.stringify({ value }),
+    }),
     "put rejected",
   );
   console.log(ok(`set ${name} — applies on the next deploy or sprout restart`));
@@ -653,10 +792,15 @@ async function storage(key: string, args: string[]) {
 
   if (sub === "list") {
     const rows = await storageRows(base, auth, product);
-    if (rows.length === 0) { console.log(`no ${product.plural}`); return; }
+    if (rows.length === 0) {
+      console.log(`no ${product.plural}`);
+      return;
+    }
     for (const row of rows) {
       const bound = Array.isArray(row.projects) ? row.projects.filter(isString) : [];
-      console.log(`${String(row.id).padEnd(30)} ${String(row.name).padEnd(24)} ${bound.length ? bound.join(", ") : dim("unbound")}`);
+      console.log(
+        `${String(row.id).padEnd(30)} ${String(row.name).padEnd(24)} ${bound.length ? bound.join(", ") : dim("unbound")}`,
+      );
     }
     return;
   }
@@ -666,7 +810,11 @@ async function storage(key: string, args: string[]) {
 
   if (sub === "create") {
     const body = await responseText(
-      await fetch(base, { method: "POST", headers: { ...auth, "content-type": "application/json" }, body: JSON.stringify({ name }) }),
+      await fetch(base, {
+        method: "POST",
+        headers: { ...auth, "content-type": "application/json" },
+        body: JSON.stringify({ name }),
+      }),
       "create rejected",
     );
     const record = jsonObject(jsonObject(parseJsonValue(body))?.resource ?? null);
@@ -692,7 +840,11 @@ async function storage(key: string, args: string[]) {
     const next = args.shift();
     if (!next) usageError(`${key} rename: missing <new-name>`, `${key} rename <name> <new-name>`);
     await responseText(
-      await fetch(`${base}/${id}`, { method: "PATCH", headers: { ...auth, "content-type": "application/json" }, body: JSON.stringify({ name: next }) }),
+      await fetch(`${base}/${id}`, {
+        method: "PATCH",
+        headers: { ...auth, "content-type": "application/json" },
+        body: JSON.stringify({ name: next }),
+      }),
       "rename rejected",
     );
     console.log(ok(`renamed ${name} → ${next}`));
@@ -721,10 +873,17 @@ async function deleteProject(args: string[]) {
   if (!confirmed) fail(`this permanently removes "${name}", every version, and its route — re-run with --yes`);
 
   const url = `${apiUrl}/api/projects/${encodeURIComponent(name)}?confirm=${encodeURIComponent(name)}`;
-  const body = await responseText(await fetch(url, { method: "DELETE", headers: { "x-api-key": token } }), "delete rejected");
+  const body = await responseText(
+    await fetch(url, { method: "DELETE", headers: { "x-api-key": token } }),
+    "delete rejected",
+  );
 
   let result: JsonObject = {};
-  try { result = jsonObject(parseJsonValue(body)) ?? {}; } catch { /* a 2xx already confirmed the delete */ }
+  try {
+    result = jsonObject(parseJsonValue(body)) ?? {};
+  } catch {
+    /* a 2xx already confirmed the delete */
+  }
   const versions = isSafeInteger(result.versionsRemoved) ? result.versionsRemoved : 0;
   const routes = Array.isArray(result.routeRemoved) ? result.routeRemoved.filter(isString) : [];
   const failed = Array.isArray(result.artifactCleanupFailed) ? result.artifactCleanupFailed.filter(isString) : [];
@@ -748,29 +907,67 @@ function usage(): never {
 
 const [command, ...args] = process.argv.slice(2);
 if (command === undefined || command === "help" || command === "-h" || command === "--help") help();
-if (command === "--version" || command === "-v") { console.log(`sproutboat ${CLI_VERSION}`); process.exit(0); }
+if (command === "--version" || command === "-v") {
+  console.log(`sproutboat ${CLI_VERSION}`);
+  process.exit(0);
+}
 
 await notifyIfOutdated(CLI_VERSION);
 
 switch (command) {
-  case "init": await init(args[0]); break;
-  case "check": await check(args[0]); break;
-  case "dev": await dev(args); break;
+  case "init":
+    await init(args[0]);
+    break;
+  case "check":
+    await check(args[0]);
+    break;
+  case "dev":
+    await dev(args);
+    break;
   case "build": {
     const hostBuild = args.includes("--target") && args[args.indexOf("--target") + 1] === "host";
-    await build(args.find((arg) => !arg.startsWith("--") && arg !== "host"), hostBuild ? "host" : "linux-x86_64");
+    await build(
+      args.find((arg) => !arg.startsWith("--") && arg !== "host"),
+      hostBuild ? "host" : "linux-x86_64",
+    );
     break;
   }
-  case "login": await login(args); break;
-  case "logout": await logout(args); break;
-  case "whoami": await whoami(); break;
-  case "deploy": await deploy(args); break;
-  case "versions": await versions(args); break;
-  case "rollback": await rollback(args); break;
-  case "domains": await domains(args); break;
-  case "secrets": await secrets(args); break;
-  case "kv": case "d1": case "r2": case "queues": await storage(command, args); break;
-  case "tail": await tail(args); break;
-  case "delete": await deleteProject(args); break;
-  default: usage();
+  case "login":
+    await login(args);
+    break;
+  case "logout":
+    await logout(args);
+    break;
+  case "whoami":
+    await whoami();
+    break;
+  case "deploy":
+    await deploy(args);
+    break;
+  case "versions":
+    await versions(args);
+    break;
+  case "rollback":
+    await rollback(args);
+    break;
+  case "domains":
+    await domains(args);
+    break;
+  case "secrets":
+    await secrets(args);
+    break;
+  case "kv":
+  case "d1":
+  case "r2":
+  case "queues":
+    await storage(command, args);
+    break;
+  case "tail":
+    await tail(args);
+    break;
+  case "delete":
+    await deleteProject(args);
+    break;
+  default:
+    usage();
 }