The deploy contract

// pages.deploy.json
{
  "entry": "_worker.js",                 // omit for a static site
  "assets": "dist/client",               // your static files
  "routes": [                            // which paths the Worker answers
    { "pattern": "/*" },
    { "pattern": "/admin/*", "access": "members" }  // Goosy sign-in required
  ],
  "bindings": {
    "database": { "migrations": "migrations", "tables": ["episodes", "guests"] },
    "projectDatabase": "read",           // none | read | readwrite
    "secrets": ["RESEND_API_KEY"],       // names only, never values
    "submissions": "guest_applications", // form posts also land here
    "storage": { "name": "BUCKET" },     // your own object store, as env.BUCKET
    "images": true,                      // env.IMAGES — resize and re-encode
    "kv": { "name": "KV" }               // your own key-value store
  },
  "limits": { "cpuMs": 10000, "subRequests": 20 },
  "runtime": {                           // what your Worker needs to START
    "compatibilityFlags": ["nodejs_compat"],
    "compatibilityDate": "2026-05-15"
  }
}

"routes": [
  { "pattern": "/*" },
  { "pattern": "/admin/*", "access": "members" }
]

// in your Worker — an image optimizer, a custom 404, anything that reads your own build
export default {
  async fetch(request, env) {
    if (new URL(request.url).pathname.startsWith("/img/")) {
      return env.ASSETS.fetch(request);
    }
    return new Response("hello");
  },
};

{
  "routes": [],
  "bindings": { "projectDatabase": "none", "secrets": [] },
  "limits": { "cpuMs": 10000, "subRequests": 20 }
}

{
  "entry": "_worker.js",
  "assets": "assets",
  "routes": [{ "pattern": "/*" }],
  "bindings": {
    "database": {
      "migrations": "migrations",
      "tables": ["episodes", "guests"]
    },
    "secrets": ["RESEND_API_KEY"],
    "submissions": "guest_applications"
  },
  "limits": { "cpuMs": 20000, "subRequests": 30 }
}

curl -X POST https://app.revastack.ai/api/pages/ingest \
  -H "Authorization: Bearer $GOOSY_API_KEY" \
  -F "file=@site.zip" \
  -F "siteId=$GOOSY_SITE_ID"

{
  "conform": {
    "recipe": "astro-cloudflare",
    "changes": [
      { "file": "astro.config.base.mjs", "change": "Your Astro config, copied here unchanged so the adapter can be layered on top of it." },
      { "file": "astro.config.mjs", "change": "Replaced with a wrapper that imports your config and adds `output: \"server\"` and the Cloudflare adapter, so your server routes run on a Worker." }
    ],
    "requiredDependencies": []
  }
}

This project needs "@astrojs/cloudflare": "^14.3.0" (in dependencies) to build for
Cloudflare, and the build installs from your lockfile alone — it never resolves versions off
the registry. Add it to `package.json`, run `pnpm install` to refresh `pnpm-lock.yaml`,
include both in the upload, and import it again.

{
  "advisories": [
    {
      "code": "seo.client-rendered",
      "message": "This site loads its content in the browser from an external backend (VITE_SUPABASE_URL), so a search engine or an AI crawler that does not run JavaScript sees an empty page.",
      "nextStep": "It will work for visitors exactly as it does today. To be found in search, move the pages that matter onto a framework that renders them on the server — Goosy can do that conversion for you."
    }
  ]
}

${env.GOOSY_API_BASE}/api/v1/tools/{operation}   →   https://your-site.example/__api/api/v1/tools/{operation}
${env.GOOSY_API_BASE}/api/pages/leads            →   https://your-site.example/__api/api/pages/leads

<script src="https://challenges.cloudflare.com/turnstile/v0/api.js" async defer></script>

<form method="POST" action="/__lead">
  <input type="hidden" name="form" value="guest_applications" />
  <input type="email" name="email" required />
  <input type="text" name="name" />

  <div class="cf-turnstile" data-sitekey={siteKey}></div>

  <button type="submit">Apply</button>
</form>

import { env } from "cloudflare:workers";

const siteKey = env.PAGES_TURNSTILE_SITE_KEY;

import { env } from "cloudflare:workers";

export async function forwardLead(
  form: string,
  fields: Record<string, string>,
): Promise<void> {
  await fetch(`${env.GOOSY_API_BASE}/api/pages/leads`, {
    method: "POST",
    headers: {
      "content-type": "application/json",
      authorization: `Bearer ${env.GOOSY_API_KEY}`,
    },
    body: JSON.stringify({
      // The discriminator, exactly as the browser path uses it.
      fields: { form, ...fields },
      // OPTIONAL, and the reason to send one is retries — see below.
      submissionId: crypto.randomUUID(),
      submittedAt: new Date().toISOString(),
    }),
  });
}

create table if not exists submissions (
  id text primary key,
  form text,
  email text,
  name text,
  payload text,
  created_at text
);

<input type="hidden" name="form" value="guest_applications" />

{
  "kind": "prebuilt",
  "deploySource": "declared",
  "deploy": { "entry": "_functions/_worker.js", "routes": [{ "pattern": "/*" }], "...": "..." }
}

{
  "ok": true,
  "data": {
    "outcome": "pending_confirmation",
    "handle": "h1.<sha256 of your zip>.<the current revision>",
    "base": { "kind": "bundle", "ref": "r33bf7467a8579859" },
    "diff": {
      "added": [{ "path": "about.html", "bytes": 1204, "sha256": "…" }],
      "removed": [],
      "changed": [{ "path": "index.html", "kind": "text", "hunks": ["@@ -1,1 +1,1 @@", "-…", "+…"] }],
      "summary": { "added": 1, "removed": 0, "changed": 1, "unchanged": 4 }
    }
  }
}

curl -X POST "https://app.revastack.ai/api/pages/ingest?confirm=$HANDLE" \
  -H "Authorization: Bearer $GOOSY_API_KEY" \
  -F "file=@site.zip" \
  -F "siteId=$GOOSY_SITE_ID"

"bindings": { "kv": { "name": "KV" } }

// in your Worker
export default {
  async fetch(request, env) {
    const seen = Number((await env.KV.get("visits")) ?? 0) + 1;
    await env.KV.put("visits", String(seen));
    return new Response(`visit ${seen}`);
  },
};