sproutboat 0.5.0 → 0.6.0

package/src/patch-porffor.ts

@@ -29,12 +29,15 @@ export async function ensurePorfforPatched(): Promise<void> {
   if (done) return;
   const file = resolve(porfforRoot(), "compiler/render.js");
   const src = await readFile(file, "utf8");
-  if (src.includes(MARKER)) { done = true; return; }
+  if (src.includes(MARKER)) {
+    done = true;
+    return;
+  }
   const anchorAt = src.indexOf(ANCHOR);
   if (anchorAt === -1) {
     throw new Error(
       `could not patch Porffor for $PORT: anchor not found in ${file}. ` +
-      "Porffor's native-fetch renderer changed — check patches/UPSTREAM.md.",
+        "Porffor's native-fetch renderer changed — check patches/UPSTREAM.md.",
     );
   }
   const patched = src.slice(0, anchorAt + ANCHOR.length) + INJECT + src.slice(anchorAt + ANCHOR.length);

package/src/report.ts

@@ -6,7 +6,9 @@ import { bold, dim, leaf, sprout } from "./style";
 
 // Read from package.json so the banner never drifts from the published version.
 // SAFETY: our own package.json, shipped beside src/ by the `files` field; npm requires `version`.
-const packageJson = JSON.parse(readFileSync(new URL("../package.json", import.meta.url), "utf8")) as { version: string };
+const packageJson = JSON.parse(readFileSync(new URL("../package.json", import.meta.url), "utf8")) as {
+  version: string;
+};
 export const CLI_VERSION = packageJson.version;
 
 function bytes(n: number): string {
@@ -21,23 +23,38 @@ function table(headers: string[], rows: string[][], align: boolean[] = []): stri
   const widths = headers.map((h, i) => Math.max(h.length, ...rows.map((r) => (r[i] ?? "").length)));
   const rule = (l: string, m: string, r: string) => leaf(l + widths.map((w) => "─".repeat(w + 2)).join(m) + r);
   const row = (cells: string[], head = false) =>
-    leaf("│ ") + cells.map((c, i) => {
-      const cell = align[i] ? (c ?? "").padStart(widths[i]) : (c ?? "").padEnd(widths[i]);
-      return head ? bold(cell) : cell;
-    }).join(leaf(" │ ")) + leaf(" │");
-  return [rule("┌", "┬", "┐"), row(headers, true), rule("├", "┼", "┤"), ...rows.map((r) => row(r)), rule("└", "┴", "┘")].join("\n");
+    leaf("│ ") +
+    cells
+      .map((c, i) => {
+        const cell = align[i] ? (c ?? "").padStart(widths[i]) : (c ?? "").padEnd(widths[i]);
+        return head ? bold(cell) : cell;
+      })
+      .join(leaf(" │ ")) +
+    leaf(" │");
+  return [
+    rule("┌", "┬", "┐"),
+    row(headers, true),
+    rule("├", "┼", "┤"),
+    ...rows.map((r) => row(r)),
+    rule("└", "┴", "┘"),
+  ].join("\n");
 }
 
 /** Every binding the compiled sprout will see, flattened to (name, type, detail) rows. */
 function bindingRows(config: SproutboatConfig): string[][] {
   const rows: string[][] = [];
-  for (const [name, value] of Object.entries(config.vars ?? {})) rows.push([`env.${name}`, "var", JSON.stringify(value)]);
+  for (const [name, value] of Object.entries(config.vars ?? {}))
+    rows.push([`env.${name}`, "var", JSON.stringify(value)]);
   const list = (names: string[] | undefined, type: string, detail = "") => {
     for (const name of names ?? []) rows.push([`env.${name}`, type, detail]);
   };
   const resourceList = (refs: Parameters<typeof resourceRefs>[0], type: string) => {
     for (const ref of resourceRefs(refs)) {
-      rows.push([`env.${ref.binding}`, type, ref.id ?? "deploy-scoped store (--no-provision) — drop the flag to auto-provision a persistent resource"]);
+      rows.push([
+        `env.${ref.binding}`,
+        type,
+        ref.id ?? "deploy-scoped store (--no-provision) — drop the flag to auto-provision a persistent resource",
+      ]);
     }
   };
   resourceList(config.kv_namespaces, "kv");
@@ -46,7 +63,8 @@ function bindingRows(config: SproutboatConfig): string[][] {
   resourceList(config.r2_buckets, "r2");
   resourceList(config.queues, "queue");
   list(config.analytics_engine_datasets, "analytics");
-  for (const [name, className] of Object.entries(config.durable_objects ?? {})) rows.push([`env.${name}`, "durable object", className]);
+  for (const [name, className] of Object.entries(config.durable_objects ?? {}))
+    rows.push([`env.${name}`, "durable object", className]);
   for (const host of config.outbound ?? []) rows.push([`fetch()`, "outbound", host]);
   for (const cron of config.triggers?.crons ?? []) rows.push([`scheduled()`, "cron", cron]);
   if (config.assets?.binding) rows.push([`env.${config.assets.binding}`, "assets", config.assets.directory ?? ""]);
@@ -74,14 +92,16 @@ export function printDeployReport(
   console.log();
 
   console.log(bold("Artifact"));
-  console.log(table(
-    ["File", "Type", "Size"],
-    [
-      ["sprout", manifest.runtime, bytes(sproutBin.length)],
-      ["manifest.json", "json", bytes(manifestBytes)],
-    ],
-    [false, false, true],
-  ));
+  console.log(
+    table(
+      ["File", "Type", "Size"],
+      [
+        ["sprout", manifest.runtime, bytes(sproutBin.length)],
+        ["manifest.json", "json", bytes(manifestBytes)],
+      ],
+      [false, false, true],
+    ),
+  );
   console.log(`Total upload: ${bold(bytes(total))}  ${dim(`(sprout gzip: ${bytes(gz)})`)}`);
   console.log();
 

package/src/source.ts

@@ -16,7 +16,10 @@ const alwaysForbidden: Array<[RegExp, string]> = [
   // trapped property reads back as `undefined`, with no throw. Rejecting it
   // here is the difference between a build error and a 502 nobody can explain.
   // It is why itty-router and other Proxy-based routers do not work yet.
-  [/\bnew\s+Proxy\s*\(|\bProxy\s*\.\s*revocable\s*\(/, "Proxy is not supported by the compiler: its traps are silently ignored and the property reads back as undefined"],
+  [
+    /\bnew\s+Proxy\s*\(|\bProxy\s*\.\s*revocable\s*\(/,
+    "Proxy is not supported by the compiler: its traps are silently ignored and the property reads back as undefined",
+  ],
 ];
 
 const fetchWithoutAllowlist: [RegExp, string] = [

package/src/style.ts

@@ -3,14 +3,17 @@
  * or NO_COLOR is set (https://no-color.org), so piped/CI output stays plain.
  */
 const enabled = Boolean(process.stdout.isTTY) && !process.env.NO_COLOR;
-const paint = (code: string) => (text: string): string => (enabled ? `\x1b[${code}m${text}\x1b[0m` : text);
+const paint =
+  (code: string) =>
+  (text: string): string =>
+    enabled ? `\x1b[${code}m${text}\x1b[0m` : text;
 
-export const leaf = paint("32");        // green — headings, structure, the accent
-export const sprout = paint("92");      // bright green — success
-export const dim = paint("2");          // secondary detail
+export const leaf = paint("32"); // green — headings, structure, the accent
+export const sprout = paint("92"); // bright green — success
+export const dim = paint("2"); // secondary detail
 export const bold = paint("1");
-export const amber = paint("33");       // warnings
-export const rose = paint("31");        // errors
+export const amber = paint("33"); // warnings
+export const rose = paint("31"); // errors
 
 /** "✓ message" with a green tick. */
 export const ok = (message: string): string => `${sprout("✓")} ${message}`;

package/src/surface.ts

@@ -63,43 +63,121 @@ const storageCommands: readonly Command[] = STORAGE_PRODUCTS.map((product) => ({
 }));
 
 export const COMMANDS: readonly Command[] = [
-  { name: "init", group: "Develop", emoji: "🌱", args: "[name]",
-    summary: "Scaffold sproutboat.jsonc + src/index.js in ./<name>." },
-  { name: "check", group: "Develop", emoji: "🔍", args: "[project-dir]",
-    summary: "Validate the config and entry point without building." },
-  { name: "dev", group: "Develop", emoji: "⚡", args: "[project-dir] [--port <n>] [--no-watch]", brief: "[project-dir] [--port <n>]",
-    summary: "Run the project on this machine against a real broker, rebuilding on save." },
-  { name: "build", group: "Develop", emoji: "🔨", args: "[project-dir] [--target host]", brief: "[project-dir]",
-    summary: "Cross-compile the native-fetch sprout (Porffor + Zig). `--target host` builds for this machine instead, to run locally — not deployable." },
-
-  { name: "deploy", group: "Ship", emoji: "🚀",
-    args: "[project-dir] [--dry-run] [--artifact <dir>] [--no-wait] [--no-provision]", brief: "[project-dir] [--dry-run]",
-    summary: "Build (unless --artifact), auto-provision id-less storage bindings and pin their ids into sproutboat.jsonc, print the report, upload, wait until the URL serves. The control plane skips an upload that matches the live artifact byte-for-byte. --dry-run stops before upload; --no-wait skips the health check; --no-provision leaves id-less bindings as ephemeral deploy-scoped stores." },
-  { name: "versions", group: "Ship", emoji: "📜", args: "<list | view <version-id>> [project-dir]", brief: "<list | view>",
-    summary: "List the project's deployed versions, or show one version's artifact and bindings." },
-  { name: "rollback", group: "Ship", emoji: "⏮", args: "<version-id> [project-dir]", brief: "<version-id>",
-    summary: "Re-activate a previous version." },
-  { name: "tail", group: "Ship", emoji: "📡", args: "[project-dir] [--sprout]",
-    summary: "Print recent request logs; --sprout prints the running sprout + broker stdout/stderr instead." },
+  {
+    name: "init",
+    group: "Develop",
+    emoji: "🌱",
+    args: "[name]",
+    summary: "Scaffold sproutboat.jsonc + src/index.js in ./<name>.",
+  },
+  {
+    name: "check",
+    group: "Develop",
+    emoji: "🔍",
+    args: "[project-dir]",
+    summary: "Validate the config and entry point without building.",
+  },
+  {
+    name: "dev",
+    group: "Develop",
+    emoji: "⚡",
+    args: "[project-dir] [--port <n>] [--no-watch]",
+    brief: "[project-dir] [--port <n>]",
+    summary: "Run the project on this machine against a real broker, rebuilding on save.",
+  },
+  {
+    name: "build",
+    group: "Develop",
+    emoji: "🔨",
+    args: "[project-dir] [--target host]",
+    brief: "[project-dir]",
+    summary:
+      "Cross-compile the native-fetch sprout (Porffor + Zig). `--target host` builds for this machine instead, to run locally — not deployable.",
+  },
+
+  {
+    name: "deploy",
+    group: "Ship",
+    emoji: "🚀",
+    args: "[project-dir] [--dry-run] [--artifact <dir>] [--no-wait] [--no-provision]",
+    brief: "[project-dir] [--dry-run]",
+    summary:
+      "Build (unless --artifact), auto-provision id-less storage bindings and pin their ids into sproutboat.jsonc, print the report, upload, wait until the URL serves. The control plane skips an upload that matches the live artifact byte-for-byte. --dry-run stops before upload; --no-wait skips the health check; --no-provision leaves id-less bindings as ephemeral deploy-scoped stores.",
+  },
+  {
+    name: "versions",
+    group: "Ship",
+    emoji: "📜",
+    args: "<list | view <version-id>> [project-dir]",
+    brief: "<list | view>",
+    summary: "List the project's deployed versions, or show one version's artifact and bindings.",
+  },
+  {
+    name: "rollback",
+    group: "Ship",
+    emoji: "⏮",
+    args: "<version-id> [project-dir]",
+    brief: "<version-id>",
+    summary: "Re-activate a previous version.",
+  },
+  {
+    name: "tail",
+    group: "Ship",
+    emoji: "📡",
+    args: "[project-dir] [--sprout]",
+    summary: "Print recent request logs; --sprout prints the running sprout + broker stdout/stderr instead.",
+  },
 
   ...storageCommands,
 
-  { name: "domains", group: "Configure", emoji: "🌐",
-    args: "<list | add <host> | verify <host> | delete <host>> [project-dir]", brief: "<list | add | verify | delete>",
-    summary: "Attach a custom domain to the project (TXT-verified). No sub-command lists." },
-  { name: "secrets", group: "Configure", emoji: "🔑",
-    args: "<list | put <NAME> [--value <value>] | delete <NAME>> [project-dir]", brief: "<list | put | delete>",
-    summary: "Manage encrypted project secrets (read as env.NAME). `put` reads the value from stdin unless --value is given, so it stays out of shell history; applies on next deploy." },
-  { name: "delete", group: "Configure", emoji: "🗑",
-    args: "[project-dir] [--name <project>] --yes", brief: "[project-dir] --yes",
-    summary: "Delete the project, every version, and its route." },
-
-  { name: "login", group: "Account", emoji: "🔓", args: "[--api-url <url>] [--token <token>]", brief: "[--token <token>]",
-    summary: "Device-code browser flow, or store <token> for <url> directly." },
-  { name: "logout", group: "Account", emoji: "🔒", args: "[--api-url <url>]",
-    summary: "Forget the stored credential for the active endpoint, or for <url>." },
-  { name: "whoami", group: "Account", emoji: "👤", args: "",
-    summary: "Show the active endpoint and the account the stored token belongs to." },
+  {
+    name: "domains",
+    group: "Configure",
+    emoji: "🌐",
+    args: "<list | add <host> | verify <host> | delete <host>> [project-dir]",
+    brief: "<list | add | verify | delete>",
+    summary: "Attach a custom domain to the project (TXT-verified). No sub-command lists.",
+  },
+  {
+    name: "secrets",
+    group: "Configure",
+    emoji: "🔑",
+    args: "<list | put <NAME> [--value <value>] | delete <NAME>> [project-dir]",
+    brief: "<list | put | delete>",
+    summary:
+      "Manage encrypted project secrets (read as env.NAME). `put` reads the value from stdin unless --value is given, so it stays out of shell history; applies on next deploy.",
+  },
+  {
+    name: "delete",
+    group: "Configure",
+    emoji: "🗑",
+    args: "[project-dir] [--name <project>] --yes",
+    brief: "[project-dir] --yes",
+    summary: "Delete the project, every version, and its route.",
+  },
+
+  {
+    name: "login",
+    group: "Account",
+    emoji: "🔓",
+    args: "[--api-url <url>] [--token <token>]",
+    brief: "[--token <token>]",
+    summary: "Device-code browser flow, or store <token> for <url> directly.",
+  },
+  {
+    name: "logout",
+    group: "Account",
+    emoji: "🔒",
+    args: "[--api-url <url>]",
+    summary: "Forget the stored credential for the active endpoint, or for <url>.",
+  },
+  {
+    name: "whoami",
+    group: "Account",
+    emoji: "👤",
+    args: "",
+    summary: "Show the active endpoint and the account the stored token belongs to.",
+  },
 ];
 
 export type EnvVar = { name: string; purpose: string };
@@ -108,18 +186,48 @@ export const ENV_VARS: readonly EnvVar[] = [
   { name: "SPROUTBOAT_API_URL", purpose: "Control-plane URL. Overrides the saved active endpoint." },
   { name: "SPROUTBOAT_TOKEN", purpose: "API token. Overrides the saved credential for the endpoint." },
   { name: "SPROUTBOAT_ZIG", purpose: "Path to a Zig binary to use instead of downloading the pinned one." },
-  { name: "SPROUTBOAT_UWS_TARBALL", purpose: "Path to a prebuilt uWebSockets (x86_64-linux-musl) tarball to seed the Porffor cache with, instead of downloading it (removes the first-build git + make need)." },
+  {
+    name: "SPROUTBOAT_UWS_TARBALL",
+    purpose:
+      "Path to a prebuilt uWebSockets (x86_64-linux-musl) tarball to seed the Porffor cache with, instead of downloading it (removes the first-build git + make need).",
+  },
   { name: "SPROUTBOAT_COMPILE_TIMEOUT_MS", purpose: "Porffor compile timeout in ms (default 600000)." },
-  { name: "SPROUTBOAT_VARS_JSON", purpose: "JSON object of baked `vars` (UPPER_SNAKE -> string), read by the wrapper when generating the sprout module." },
-  { name: "SPROUTBOAT_BINDINGS_JSON", purpose: "The artifact's bindings.json, read by the wrapper to emit the `__sbInstallBindings` line." },
+  {
+    name: "SPROUTBOAT_VARS_JSON",
+    purpose:
+      "JSON object of baked `vars` (UPPER_SNAKE -> string), read by the wrapper when generating the sprout module.",
+  },
+  {
+    name: "SPROUTBOAT_BINDINGS_JSON",
+    purpose: "The artifact's bindings.json, read by the wrapper to emit the `__sbInstallBindings` line.",
+  },
   { name: "SPROUTBOAT_CONFIG_DIR", purpose: "Directory for credentials.json (default ~/.config/sproutboat)." },
-  { name: "NO_COLOR", purpose: "When set, disables coloured terminal output (https://no-color.org). Output is also plain whenever stdout is not a TTY." },
-  { name: "SPROUTBOAT_NO_UPDATE_CHECK", purpose: "When set, skips the once-a-day npm check for a newer `sproutboat` release (also skipped when CI is set)." },
+  {
+    name: "NO_COLOR",
+    purpose:
+      "When set, disables coloured terminal output (https://no-color.org). Output is also plain whenever stdout is not a TTY.",
+  },
+  {
+    name: "SPROUTBOAT_NO_UPDATE_CHECK",
+    purpose: "When set, skips the once-a-day npm check for a newer `sproutboat` release (also skipped when CI is set).",
+  },
   { name: "XDG_CONFIG_HOME", purpose: "Base for the default credentials dir when SPROUTBOAT_CONFIG_DIR is unset." },
   { name: "PORFFOR_VERSION", purpose: "Override the Porffor identity string recorded in the manifest." },
-  { name: "SB_BROKER_PORT", purpose: "Loopback port of the binding broker, read by the compiled sprout at runtime (set by the control plane, or by `src/broker.ts` for local runs)." },
-  { name: "SB_BROKER_TOKEN", purpose: "Per-deployment auth token the sprout sends on every broker frame, and the broker sends back on scheduled/queue triggers (paired with SB_BROKER_PORT)." },
-  { name: "SB_SPROUT_URL", purpose: "http://127.0.0.1:<PORT> of the sprout; when set, `src/broker.ts` runs the cron scheduler and queue consumer and delivers triggers to it." },
+  {
+    name: "SB_BROKER_PORT",
+    purpose:
+      "Loopback port of the binding broker, read by the compiled sprout at runtime (set by the control plane, or by `src/broker.ts` for local runs).",
+  },
+  {
+    name: "SB_BROKER_TOKEN",
+    purpose:
+      "Per-deployment auth token the sprout sends on every broker frame, and the broker sends back on scheduled/queue triggers (paired with SB_BROKER_PORT).",
+  },
+  {
+    name: "SB_SPROUT_URL",
+    purpose:
+      "http://127.0.0.1:<PORT> of the sprout; when set, `src/broker.ts` runs the cron scheduler and queue consumer and delivers triggers to it.",
+  },
 ];
 
 const GROUP_ORDER: readonly Group[] = ["Develop", "Ship", "Storage", "Configure", "Account"];

package/src/toolchain.ts

@@ -49,7 +49,10 @@ const UWS_TARBALL_SHA256 = "e83736f3f8cf9d56a1ebe6ea61625a7af12386763374d47c14cf
 function platformKey(): ZigPlatform {
   const arch = process.arch === "arm64" ? "aarch64" : process.arch === "x64" ? "x86_64" : null;
   const os = process.platform === "linux" ? "linux" : process.platform === "darwin" ? "macos" : null;
-  if (!arch || !os) throw new Error(`no pinned Zig for ${process.platform}/${process.arch} — set SPROUTBOAT_ZIG to a zig ${ZIG_VERSION} binary`);
+  if (!arch || !os)
+    throw new Error(
+      `no pinned Zig for ${process.platform}/${process.arch} — set SPROUTBOAT_ZIG to a zig ${ZIG_VERSION} binary`,
+    );
   return `${arch}-${os}`;
 }
 
@@ -88,7 +91,10 @@ export async function ensureZig(): Promise<string> {
   }
 
   // `tar -xJ` (xz) works on macOS bsdtar and GNU tar with xz on PATH.
-  const untar = Bun.spawn(["tar", "-xJf", archive, "-C", dir, "--strip-components=1"], { stdout: "pipe", stderr: "pipe" });
+  const untar = Bun.spawn(["tar", "-xJf", archive, "-C", dir, "--strip-components=1"], {
+    stdout: "pipe",
+    stderr: "pipe",
+  });
   const [code, err] = await Promise.all([untar.exited, new Response(untar.stderr).text()]);
   if (code !== 0) throw new Error(`could not extract Zig (needs \`tar\` with xz support): ${err.trim()}`);
   await rm(archive, { force: true });
@@ -144,12 +150,17 @@ export async function ensureUWebSockets(): Promise<void> {
   if (!process.env.SPROUTBOAT_UWS_TARBALL) {
     const actual = await sha256File(archive);
     if (actual !== UWS_TARBALL_SHA256) {
-      throw new UwsUnavailableError(`vendored uWebSockets sha256 mismatch\n  expected ${UWS_TARBALL_SHA256}\n  got      ${actual}`);
+      throw new UwsUnavailableError(
+        `vendored uWebSockets sha256 mismatch\n  expected ${UWS_TARBALL_SHA256}\n  got      ${actual}`,
+      );
     }
   }
 
   await mkdir(dir, { recursive: true });
-  const untar = Bun.spawn(["tar", "-xJf", archive, "-C", dir, "--strip-components=1"], { stdout: "pipe", stderr: "pipe" });
+  const untar = Bun.spawn(["tar", "-xJf", archive, "-C", dir, "--strip-components=1"], {
+    stdout: "pipe",
+    stderr: "pipe",
+  });
   const [code, err] = await Promise.all([untar.exited, new Response(untar.stderr).text()]);
   if (code !== 0) {
     await rm(dir, { recursive: true, force: true });

package/src/update-check.ts

@@ -29,7 +29,11 @@ function cachePath(): string {
 
 /** Numeric x.y.z compare; a trailing `-tag` (prerelease) sorts before its release. */
 function isNewer(latest: string, current: string): boolean {
-  const parts = (v: string) => v.split("-")[0].split(".").map((n) => Number.parseInt(n, 10) || 0);
+  const parts = (v: string) =>
+    v
+      .split("-")[0]
+      .split(".")
+      .map((n) => Number.parseInt(n, 10) || 0);
   const [a, b] = [parts(latest), parts(current)];
   for (let i = 0; i < 3; i++) {
     if ((a[i] ?? 0) !== (b[i] ?? 0)) return (a[i] ?? 0) > (b[i] ?? 0);
@@ -41,16 +45,23 @@ async function latestVersion(): Promise<string | undefined> {
   try {
     const cached = parseCache(await readFile(cachePath(), "utf8"));
     if (cached && Date.now() - cached.checkedAt < CACHE_TTL_MS) return cached.latest;
-  } catch { /* no cache yet, or unreadable — fetch below */ }
+  } catch {
+    /* no cache yet, or unreadable — fetch below */
+  }
 
   try {
-    const response = await fetch(REGISTRY, { signal: AbortSignal.timeout(1000), headers: { accept: "application/json" } });
+    const response = await fetch(REGISTRY, {
+      signal: AbortSignal.timeout(1000),
+      headers: { accept: "application/json" },
+    });
     if (!response.ok) return undefined;
     const latest = jsonObject(parseJsonValue(await response.text()))?.version;
     if (!isString(latest)) return undefined;
     await writeFile(cachePath(), JSON.stringify({ checkedAt: Date.now(), latest } satisfies Cache)).catch(() => {});
     return latest;
-  } catch { /* offline / slow / DNS — skip silently */ }
+  } catch {
+    /* offline / slow / DNS — skip silently */
+  }
   return undefined;
 }
 
@@ -59,6 +70,10 @@ export async function notifyIfOutdated(current: string): Promise<void> {
   if (process.env.SPROUTBOAT_NO_UPDATE_CHECK || process.env.CI) return;
   const latest = await latestVersion();
   if (latest && isNewer(latest, current)) {
-    console.error(dim(`  update available: sproutboat ${current} → ${latest}  ·  bump the dependency or run \`bunx sproutboat@latest\``));
+    console.error(
+      dim(
+        `  update available: sproutboat ${current} → ${latest}  ·  bump the dependency or run \`bunx sproutboat@latest\``,
+      ),
+    );
   }
 }

package/src/wrap.ts

@@ -35,12 +35,30 @@ export type Bindings = {
   assets: string;
 };
 
-export const EMPTY_BINDINGS: Bindings = { kv: [], secrets: [], outbound: [], d1: [], r2: [], queues: [], analytics: [], do: [], crons: [], assets: "" };
+export const EMPTY_BINDINGS: Bindings = {
+  kv: [],
+  secrets: [],
+  outbound: [],
+  d1: [],
+  r2: [],
+  queues: [],
+  analytics: [],
+  do: [],
+  crons: [],
+  assets: "",
+};
 
 function hasBindings(b: Bindings): boolean {
   return (
-    b.kv.length > 0 || b.secrets.length > 0 || b.outbound.length > 0 || b.d1.length > 0 || b.r2.length > 0 ||
-    b.queues.length > 0 || b.analytics.length > 0 || b.do.length > 0 || b.assets !== ""
+    b.kv.length > 0 ||
+    b.secrets.length > 0 ||
+    b.outbound.length > 0 ||
+    b.d1.length > 0 ||
+    b.r2.length > 0 ||
+    b.queues.length > 0 ||
+    b.analytics.length > 0 ||
+    b.do.length > 0 ||
+    b.assets !== ""
   );
 }
 
@@ -67,7 +85,10 @@ export function neutraliseExports(source: string): string | null {
   if (block === undefined) return null;
   let handler: string | null = null;
   const aliases: string[] = [];
-  for (const entry of block[1].split(",").map((part) => part.trim()).filter(Boolean)) {
+  for (const entry of block[1]
+    .split(",")
+    .map((part) => part.trim())
+    .filter(Boolean)) {
     const parts = entry.match(/^(\S+)(?:\s+as\s+(\S+))?$/);
     if (parts === null) continue;
     const local = parts[1];
@@ -140,10 +161,13 @@ export function readVarsFromEnv(): Record<string, string> {
   if (!raw) return {};
   const parsed: VarsJson = JSON.parse(raw);
   if (!isVarsObject(parsed)) throw new Error("SPROUTBOAT_VARS_JSON must be a JSON object");
-  return Object.fromEntries(Object.entries(parsed).map(([key, value]): [string, string] => {
-    if (!/^[A-Z][A-Z0-9_]*$/.test(key) || !isVarsString(value)) throw new Error(`SPROUTBOAT_VARS_JSON.${key} must map an UPPER_SNAKE name to a string`);
-    return [key, value];
-  }));
+  return Object.fromEntries(
+    Object.entries(parsed).map(([key, value]): [string, string] => {
+      if (!/^[A-Z][A-Z0-9_]*$/.test(key) || !isVarsString(value))
+        throw new Error(`SPROUTBOAT_VARS_JSON.${key} must map an UPPER_SNAKE name to a string`);
+      return [key, value];
+    }),
+  );
 }
 
 /**