@bleedingdev/modern-js-app-tools 3.4.0-ultramodern.11 → 3.4.0-ultramodern.13

package/dist/cjs/plugins/deploy/platforms/cloudflare.js

@@ -45,6 +45,8 @@ const utils_namespaceObject = require("@modern-js/utils");
 const index_js_namespaceObject = require("../utils/index.js");
 const WORKER_ENTRY = 'server/index.mjs';
 const WORKER_MANIFEST = 'server/modern-worker-manifest.json';
+const WRANGLER_CONFIG_FILE = 'wrangler.json';
+const OUTPUT_PACKAGE_FILE = 'package.json';
 const ASSETS_BINDING = 'ASSETS';
 const ROUTE_SPEC_FILE = 'route.json';
 const ROUTE_SPEC_OUTPUT = `server/${ROUTE_SPEC_FILE}`;
@@ -53,10 +55,28 @@ const ROUTE_MANIFEST_FILE = 'routes-manifest.json';
 const PUBLIC_ASSETS_DIRECTORY = 'public';
 const WORKER_BUNDLE_DIRECTORY = 'worker';
 const SERVER_BUNDLE_DIRECTORY = 'bundles';
+const SERVER_OUTPUT_DIRECTORY = 'server';
+const DEFAULT_SERVER_ONLY_PUBLIC_ASSET_EXCLUDES = [
+    'api',
+    'shared'
+];
 const BFF_EFFECT_WORKER_ENTRY = `${WORKER_BUNDLE_DIRECTORY}/__modern_bff_effect.js`;
 const EFFECT_BFF_CLOUDFLARE_IMPORT_GUIDANCE = 'Ensure the Effect BFF entry exists at api/effect/index.ts or bff.effect.entry, and import Cloudflare edge handlers from @modern-js/plugin-bff/effect-edge instead of lambda/Hono server helpers.';
 const DEFAULT_COMPATIBILITY_DATE = '2026-06-02';
 const COMPATIBILITY_DATE_PATTERN = /^\d{4}-\d{2}-\d{2}$/u;
+const REQUIRED_COMPATIBILITY_FLAGS = [
+    'nodejs_compat',
+    'global_fetch_strictly_public'
+];
+const RESERVED_ARTIFACT_DESTINATION_FILES = new Set([
+    WRANGLER_CONFIG_FILE,
+    OUTPUT_PACKAGE_FILE
+]);
+const RESERVED_ARTIFACT_DESTINATION_DIRECTORIES = new Set([
+    PUBLIC_ASSETS_DIRECTORY,
+    SERVER_OUTPUT_DIRECTORY,
+    WORKER_BUNDLE_DIRECTORY
+]);
 const DEFAULT_SECURITY_HEADERS = {
     referrerPolicy: 'strict-origin-when-cross-origin',
     contentTypeOptions: 'nosniff',
@@ -145,6 +165,13 @@ const getConfiguredWorkerName = (appDirectory, modernConfig)=>{
     const configuredName = modernConfig.deploy?.worker?.name?.trim();
     return configuredName || getWorkerName(appDirectory);
 };
+const normalizeRelativePath = (value, label, scope = 'app output')=>{
+    if ('string' != typeof value) throw new Error(`${label} must be a relative path inside the ${scope}.`);
+    const normalized = value.trim().replace(/\\/g, '/').replace(/^\.\/+/u, '').replace(/\/+$/u, '');
+    const segments = normalized.split('/');
+    if (!normalized || external_node_path_default().isAbsolute(normalized) || '.' === normalized || segments.includes('..')) throw new Error(`${label} must be a relative path inside the ${scope}.`);
+    return normalized;
+};
 const normalizeDirectiveValues = (value)=>{
     const values = Array.isArray(value) ? value : [
         value
@@ -237,6 +264,66 @@ const createCloudflareWorkerSecurityPolicy = (modernConfig)=>{
         reason: security?.reason
     };
 };
+const isJsonRecord = (value)=>'object' == typeof value && null !== value && !Array.isArray(value);
+const getConfiguredWrangler = (modernConfig)=>{
+    const wrangler = modernConfig.deploy?.worker?.wrangler;
+    if (void 0 === wrangler) return {};
+    if (!isJsonRecord(wrangler)) throw new Error('deploy.worker.wrangler must be a JSON object.');
+    return wrangler;
+};
+const createWranglerCompatibilityFlags = (configuredFlags)=>{
+    if (void 0 === configuredFlags) return [
+        ...REQUIRED_COMPATIBILITY_FLAGS
+    ];
+    if (!Array.isArray(configuredFlags) || configuredFlags.some((flag)=>'string' != typeof flag)) throw new Error('deploy.worker.wrangler.compatibility_flags must be an array of strings.');
+    return [
+        ...new Set([
+            ...configuredFlags,
+            ...REQUIRED_COMPATIBILITY_FLAGS
+        ])
+    ];
+};
+const createWranglerAssetsConfig = (configuredAssets)=>{
+    if (void 0 !== configuredAssets && !isJsonRecord(configuredAssets)) throw new Error('deploy.worker.wrangler.assets must be an object.');
+    return {
+        ...isJsonRecord(configuredAssets) ? configuredAssets : {},
+        directory: `./${PUBLIC_ASSETS_DIRECTORY}`,
+        binding: ASSETS_BINDING,
+        run_worker_first: true
+    };
+};
+const createWranglerConfig = (appDirectory, modernConfig)=>{
+    const wrangler = getConfiguredWrangler(modernConfig);
+    return {
+        $schema: 'node_modules/wrangler/config-schema.json',
+        name: getConfiguredWorkerName(appDirectory, modernConfig),
+        compatibility_date: getCompatibilityDate(modernConfig),
+        ...wrangler,
+        main: WORKER_ENTRY,
+        compatibility_flags: createWranglerCompatibilityFlags(wrangler.compatibility_flags),
+        assets: createWranglerAssetsConfig(wrangler.assets)
+    };
+};
+const normalizeCloudflareArtifact = (artifact, index)=>{
+    const from = normalizeRelativePath(artifact.from, `deploy.worker.artifacts[${index}].from`, 'app root');
+    const to = normalizeRelativePath(artifact.to, `deploy.worker.artifacts[${index}].to`, 'Cloudflare output');
+    const [topLevelDestination] = to.split('/');
+    const reservedDestination = RESERVED_ARTIFACT_DESTINATION_FILES.has(to) ? to : topLevelDestination;
+    if (RESERVED_ARTIFACT_DESTINATION_FILES.has(to) || RESERVED_ARTIFACT_DESTINATION_DIRECTORIES.has(topLevelDestination)) throw new Error(`deploy.worker.artifacts[${index}].to must not target generated Cloudflare output path ${JSON.stringify(reservedDestination)}.`);
+    return {
+        from,
+        to,
+        index
+    };
+};
+const getCloudflareArtifacts = (modernConfig)=>(modernConfig.deploy?.worker?.artifacts ?? []).map(normalizeCloudflareArtifact);
+const copyCloudflareArtifacts = async (appDirectory, outputDirectory, artifacts)=>{
+    for (const artifact of artifacts){
+        const sourcePath = external_node_path_default().join(appDirectory, artifact.from);
+        if (!await utils_namespaceObject.fs.pathExists(sourcePath)) throw new Error(`deploy.worker.artifacts[${artifact.index}].from does not exist: ${artifact.from}`);
+        await utils_namespaceObject.fs.copy(sourcePath, external_node_path_default().join(outputDirectory, artifact.to));
+    }
+};
 const readRouteSpec = async (outputDirectory)=>{
     const routeSpecPath = external_node_path_default().join(outputDirectory, ROUTE_SPEC_OUTPUT);
     if (!await utils_namespaceObject.fs.pathExists(routeSpecPath)) return {
@@ -318,12 +405,22 @@ const createWorkerModuleLoaders = (manifest)=>{
     ].map(([worker, loader])=>`${JSON.stringify(worker)}: ${loader}`);
     return `{\n${loaders.join(',\n')}\n}`;
 };
-const shouldCopyToPublicAssets = (src, distDirectory)=>{
+const getPublicAssetExcludes = (appDirectory, modernConfig)=>[
+        ...DEFAULT_SERVER_ONLY_PUBLIC_ASSET_EXCLUDES.filter((directory)=>{
+            try {
+                return utils_namespaceObject.fs.statSync(external_node_path_default().join(appDirectory, directory)).isDirectory();
+            } catch  {
+                return false;
+            }
+        }),
+        ...modernConfig.deploy?.worker?.publicAssetExcludes ?? []
+    ].map((entry)=>normalizeRelativePath(entry, 'deploy.worker.publicAssetExcludes'));
+const shouldCopyToPublicAssets = (src, distDirectory, publicAssetExcludes)=>{
     const relativePath = external_node_path_default().relative(distDirectory, src);
     if (!relativePath) return true;
     const normalizedRelativePath = relativePath.replace(/\\/g, '/');
     const [topLevelDirectory] = normalizedRelativePath.split('/');
-    return normalizedRelativePath !== ROUTE_SPEC_FILE && topLevelDirectory !== WORKER_BUNDLE_DIRECTORY && topLevelDirectory !== SERVER_BUNDLE_DIRECTORY;
+    return normalizedRelativePath !== ROUTE_SPEC_FILE && topLevelDirectory !== WORKER_BUNDLE_DIRECTORY && topLevelDirectory !== SERVER_BUNDLE_DIRECTORY && !publicAssetExcludes.some((exclude)=>normalizedRelativePath === exclude || normalizedRelativePath.startsWith(`${exclude}/`));
 };
 const shouldCopyToWorkerBundle = (src, workerBundleDirectory)=>{
     const relativePath = external_node_path_default().relative(workerBundleDirectory, src);
@@ -345,15 +442,16 @@ const createCloudflarePreset = ({ appContext, modernConfig })=>{
     const workerEntryPath = external_node_path_default().join(outputDirectory, WORKER_ENTRY);
     const workerManifestPath = external_node_path_default().join(outputDirectory, WORKER_MANIFEST);
     const routeSpecOutputPath = external_node_path_default().join(outputDirectory, ROUTE_SPEC_OUTPUT);
-    const wranglerConfigPath = external_node_path_default().join(outputDirectory, 'wrangler.json');
-    const workerName = getConfiguredWorkerName(appDirectory, modernConfig);
+    const wranglerConfigPath = external_node_path_default().join(outputDirectory, WRANGLER_CONFIG_FILE);
+    const cloudflareArtifacts = getCloudflareArtifacts(modernConfig);
+    const publicAssetExcludes = getPublicAssetExcludes(appDirectory, modernConfig);
     return {
         async prepare () {
             await utils_namespaceObject.fs.remove(outputDirectory);
         },
         async writeOutput () {
             await utils_namespaceObject.fs.copy(distDirectory, publicDirectory, {
-                filter: (src)=>shouldCopyToPublicAssets(src, distDirectory)
+                filter: (src)=>shouldCopyToPublicAssets(src, distDirectory, publicAssetExcludes)
             });
             await utils_namespaceObject.fs.ensureDir(external_node_path_default().dirname(workerEntryPath));
             await utils_namespaceObject.fs.ensureDir(external_node_path_default().dirname(workerManifestPath));
@@ -369,27 +467,14 @@ const createCloudflarePreset = ({ appContext, modernConfig })=>{
                     type: 'commonjs'
                 });
             }
-            await utils_namespaceObject.fs.writeJSON(wranglerConfigPath, {
-                $schema: 'node_modules/wrangler/config-schema.json',
-                name: workerName,
-                main: WORKER_ENTRY,
-                compatibility_date: getCompatibilityDate(modernConfig),
-                compatibility_flags: [
-                    'nodejs_compat',
-                    'global_fetch_strictly_public'
-                ],
-                assets: {
-                    directory: `./${PUBLIC_ASSETS_DIRECTORY}`,
-                    binding: ASSETS_BINDING,
-                    run_worker_first: true
-                }
-            }, {
+            await copyCloudflareArtifacts(appDirectory, outputDirectory, cloudflareArtifacts);
+            await utils_namespaceObject.fs.writeJSON(wranglerConfigPath, createWranglerConfig(appDirectory, modernConfig), {
                 spaces: 2
             });
             await utils_namespaceObject.fs.writeJSON(workerManifestPath, await createWorkerManifest(outputDirectory, modernConfig), {
                 spaces: 2
             });
-            await utils_namespaceObject.fs.writeJSON(external_node_path_default().join(outputDirectory, 'package.json'), {
+            await utils_namespaceObject.fs.writeJSON(external_node_path_default().join(outputDirectory, OUTPUT_PACKAGE_FILE), {
                 type: 'module'
             });
         },

package/dist/esm/plugins/deploy/platforms/cloudflare.mjs

@@ -3,6 +3,8 @@ import { fs } from "@modern-js/utils";
 import { readTemplate } from "../utils/index.mjs";
 const WORKER_ENTRY = 'server/index.mjs';
 const WORKER_MANIFEST = 'server/modern-worker-manifest.json';
+const WRANGLER_CONFIG_FILE = 'wrangler.json';
+const OUTPUT_PACKAGE_FILE = 'package.json';
 const ASSETS_BINDING = 'ASSETS';
 const ROUTE_SPEC_FILE = 'route.json';
 const ROUTE_SPEC_OUTPUT = `server/${ROUTE_SPEC_FILE}`;
@@ -11,10 +13,28 @@ const ROUTE_MANIFEST_FILE = 'routes-manifest.json';
 const PUBLIC_ASSETS_DIRECTORY = 'public';
 const WORKER_BUNDLE_DIRECTORY = 'worker';
 const SERVER_BUNDLE_DIRECTORY = 'bundles';
+const SERVER_OUTPUT_DIRECTORY = 'server';
+const DEFAULT_SERVER_ONLY_PUBLIC_ASSET_EXCLUDES = [
+    'api',
+    'shared'
+];
 const BFF_EFFECT_WORKER_ENTRY = `${WORKER_BUNDLE_DIRECTORY}/__modern_bff_effect.js`;
 const EFFECT_BFF_CLOUDFLARE_IMPORT_GUIDANCE = 'Ensure the Effect BFF entry exists at api/effect/index.ts or bff.effect.entry, and import Cloudflare edge handlers from @modern-js/plugin-bff/effect-edge instead of lambda/Hono server helpers.';
 const DEFAULT_COMPATIBILITY_DATE = '2026-06-02';
 const COMPATIBILITY_DATE_PATTERN = /^\d{4}-\d{2}-\d{2}$/u;
+const REQUIRED_COMPATIBILITY_FLAGS = [
+    'nodejs_compat',
+    'global_fetch_strictly_public'
+];
+const RESERVED_ARTIFACT_DESTINATION_FILES = new Set([
+    WRANGLER_CONFIG_FILE,
+    OUTPUT_PACKAGE_FILE
+]);
+const RESERVED_ARTIFACT_DESTINATION_DIRECTORIES = new Set([
+    PUBLIC_ASSETS_DIRECTORY,
+    SERVER_OUTPUT_DIRECTORY,
+    WORKER_BUNDLE_DIRECTORY
+]);
 const DEFAULT_SECURITY_HEADERS = {
     referrerPolicy: 'strict-origin-when-cross-origin',
     contentTypeOptions: 'nosniff',
@@ -103,6 +123,13 @@ const getConfiguredWorkerName = (appDirectory, modernConfig)=>{
     const configuredName = modernConfig.deploy?.worker?.name?.trim();
     return configuredName || getWorkerName(appDirectory);
 };
+const normalizeRelativePath = (value, label, scope = 'app output')=>{
+    if ('string' != typeof value) throw new Error(`${label} must be a relative path inside the ${scope}.`);
+    const normalized = value.trim().replace(/\\/g, '/').replace(/^\.\/+/u, '').replace(/\/+$/u, '');
+    const segments = normalized.split('/');
+    if (!normalized || node_path.isAbsolute(normalized) || '.' === normalized || segments.includes('..')) throw new Error(`${label} must be a relative path inside the ${scope}.`);
+    return normalized;
+};
 const normalizeDirectiveValues = (value)=>{
     const values = Array.isArray(value) ? value : [
         value
@@ -195,6 +222,66 @@ const createCloudflareWorkerSecurityPolicy = (modernConfig)=>{
         reason: security?.reason
     };
 };
+const isJsonRecord = (value)=>'object' == typeof value && null !== value && !Array.isArray(value);
+const getConfiguredWrangler = (modernConfig)=>{
+    const wrangler = modernConfig.deploy?.worker?.wrangler;
+    if (void 0 === wrangler) return {};
+    if (!isJsonRecord(wrangler)) throw new Error('deploy.worker.wrangler must be a JSON object.');
+    return wrangler;
+};
+const createWranglerCompatibilityFlags = (configuredFlags)=>{
+    if (void 0 === configuredFlags) return [
+        ...REQUIRED_COMPATIBILITY_FLAGS
+    ];
+    if (!Array.isArray(configuredFlags) || configuredFlags.some((flag)=>'string' != typeof flag)) throw new Error('deploy.worker.wrangler.compatibility_flags must be an array of strings.');
+    return [
+        ...new Set([
+            ...configuredFlags,
+            ...REQUIRED_COMPATIBILITY_FLAGS
+        ])
+    ];
+};
+const createWranglerAssetsConfig = (configuredAssets)=>{
+    if (void 0 !== configuredAssets && !isJsonRecord(configuredAssets)) throw new Error('deploy.worker.wrangler.assets must be an object.');
+    return {
+        ...isJsonRecord(configuredAssets) ? configuredAssets : {},
+        directory: `./${PUBLIC_ASSETS_DIRECTORY}`,
+        binding: ASSETS_BINDING,
+        run_worker_first: true
+    };
+};
+const createWranglerConfig = (appDirectory, modernConfig)=>{
+    const wrangler = getConfiguredWrangler(modernConfig);
+    return {
+        $schema: 'node_modules/wrangler/config-schema.json',
+        name: getConfiguredWorkerName(appDirectory, modernConfig),
+        compatibility_date: getCompatibilityDate(modernConfig),
+        ...wrangler,
+        main: WORKER_ENTRY,
+        compatibility_flags: createWranglerCompatibilityFlags(wrangler.compatibility_flags),
+        assets: createWranglerAssetsConfig(wrangler.assets)
+    };
+};
+const normalizeCloudflareArtifact = (artifact, index)=>{
+    const from = normalizeRelativePath(artifact.from, `deploy.worker.artifacts[${index}].from`, 'app root');
+    const to = normalizeRelativePath(artifact.to, `deploy.worker.artifacts[${index}].to`, 'Cloudflare output');
+    const [topLevelDestination] = to.split('/');
+    const reservedDestination = RESERVED_ARTIFACT_DESTINATION_FILES.has(to) ? to : topLevelDestination;
+    if (RESERVED_ARTIFACT_DESTINATION_FILES.has(to) || RESERVED_ARTIFACT_DESTINATION_DIRECTORIES.has(topLevelDestination)) throw new Error(`deploy.worker.artifacts[${index}].to must not target generated Cloudflare output path ${JSON.stringify(reservedDestination)}.`);
+    return {
+        from,
+        to,
+        index
+    };
+};
+const getCloudflareArtifacts = (modernConfig)=>(modernConfig.deploy?.worker?.artifacts ?? []).map(normalizeCloudflareArtifact);
+const copyCloudflareArtifacts = async (appDirectory, outputDirectory, artifacts)=>{
+    for (const artifact of artifacts){
+        const sourcePath = node_path.join(appDirectory, artifact.from);
+        if (!await fs.pathExists(sourcePath)) throw new Error(`deploy.worker.artifacts[${artifact.index}].from does not exist: ${artifact.from}`);
+        await fs.copy(sourcePath, node_path.join(outputDirectory, artifact.to));
+    }
+};
 const readRouteSpec = async (outputDirectory)=>{
     const routeSpecPath = node_path.join(outputDirectory, ROUTE_SPEC_OUTPUT);
     if (!await fs.pathExists(routeSpecPath)) return {
@@ -276,12 +363,22 @@ const createWorkerModuleLoaders = (manifest)=>{
     ].map(([worker, loader])=>`${JSON.stringify(worker)}: ${loader}`);
     return `{\n${loaders.join(',\n')}\n}`;
 };
-const shouldCopyToPublicAssets = (src, distDirectory)=>{
+const getPublicAssetExcludes = (appDirectory, modernConfig)=>[
+        ...DEFAULT_SERVER_ONLY_PUBLIC_ASSET_EXCLUDES.filter((directory)=>{
+            try {
+                return fs.statSync(node_path.join(appDirectory, directory)).isDirectory();
+            } catch  {
+                return false;
+            }
+        }),
+        ...modernConfig.deploy?.worker?.publicAssetExcludes ?? []
+    ].map((entry)=>normalizeRelativePath(entry, 'deploy.worker.publicAssetExcludes'));
+const shouldCopyToPublicAssets = (src, distDirectory, publicAssetExcludes)=>{
     const relativePath = node_path.relative(distDirectory, src);
     if (!relativePath) return true;
     const normalizedRelativePath = relativePath.replace(/\\/g, '/');
     const [topLevelDirectory] = normalizedRelativePath.split('/');
-    return normalizedRelativePath !== ROUTE_SPEC_FILE && topLevelDirectory !== WORKER_BUNDLE_DIRECTORY && topLevelDirectory !== SERVER_BUNDLE_DIRECTORY;
+    return normalizedRelativePath !== ROUTE_SPEC_FILE && topLevelDirectory !== WORKER_BUNDLE_DIRECTORY && topLevelDirectory !== SERVER_BUNDLE_DIRECTORY && !publicAssetExcludes.some((exclude)=>normalizedRelativePath === exclude || normalizedRelativePath.startsWith(`${exclude}/`));
 };
 const shouldCopyToWorkerBundle = (src, workerBundleDirectory)=>{
     const relativePath = node_path.relative(workerBundleDirectory, src);
@@ -303,15 +400,16 @@ const createCloudflarePreset = ({ appContext, modernConfig })=>{
     const workerEntryPath = node_path.join(outputDirectory, WORKER_ENTRY);
     const workerManifestPath = node_path.join(outputDirectory, WORKER_MANIFEST);
     const routeSpecOutputPath = node_path.join(outputDirectory, ROUTE_SPEC_OUTPUT);
-    const wranglerConfigPath = node_path.join(outputDirectory, 'wrangler.json');
-    const workerName = getConfiguredWorkerName(appDirectory, modernConfig);
+    const wranglerConfigPath = node_path.join(outputDirectory, WRANGLER_CONFIG_FILE);
+    const cloudflareArtifacts = getCloudflareArtifacts(modernConfig);
+    const publicAssetExcludes = getPublicAssetExcludes(appDirectory, modernConfig);
     return {
         async prepare () {
             await fs.remove(outputDirectory);
         },
         async writeOutput () {
             await fs.copy(distDirectory, publicDirectory, {
-                filter: (src)=>shouldCopyToPublicAssets(src, distDirectory)
+                filter: (src)=>shouldCopyToPublicAssets(src, distDirectory, publicAssetExcludes)
             });
             await fs.ensureDir(node_path.dirname(workerEntryPath));
             await fs.ensureDir(node_path.dirname(workerManifestPath));
@@ -327,27 +425,14 @@ const createCloudflarePreset = ({ appContext, modernConfig })=>{
                     type: 'commonjs'
                 });
             }
-            await fs.writeJSON(wranglerConfigPath, {
-                $schema: 'node_modules/wrangler/config-schema.json',
-                name: workerName,
-                main: WORKER_ENTRY,
-                compatibility_date: getCompatibilityDate(modernConfig),
-                compatibility_flags: [
-                    'nodejs_compat',
-                    'global_fetch_strictly_public'
-                ],
-                assets: {
-                    directory: `./${PUBLIC_ASSETS_DIRECTORY}`,
-                    binding: ASSETS_BINDING,
-                    run_worker_first: true
-                }
-            }, {
+            await copyCloudflareArtifacts(appDirectory, outputDirectory, cloudflareArtifacts);
+            await fs.writeJSON(wranglerConfigPath, createWranglerConfig(appDirectory, modernConfig), {
                 spaces: 2
             });
             await fs.writeJSON(workerManifestPath, await createWorkerManifest(outputDirectory, modernConfig), {
                 spaces: 2
             });
-            await fs.writeJSON(node_path.join(outputDirectory, 'package.json'), {
+            await fs.writeJSON(node_path.join(outputDirectory, OUTPUT_PACKAGE_FILE), {
                 type: 'module'
             });
         },

package/dist/esm-node/plugins/deploy/platforms/cloudflare.mjs

@@ -4,6 +4,8 @@ import { fs } from "@modern-js/utils";
 import { readTemplate } from "../utils/index.mjs";
 const WORKER_ENTRY = 'server/index.mjs';
 const WORKER_MANIFEST = 'server/modern-worker-manifest.json';
+const WRANGLER_CONFIG_FILE = 'wrangler.json';
+const OUTPUT_PACKAGE_FILE = 'package.json';
 const ASSETS_BINDING = 'ASSETS';
 const ROUTE_SPEC_FILE = 'route.json';
 const ROUTE_SPEC_OUTPUT = `server/${ROUTE_SPEC_FILE}`;
@@ -12,10 +14,28 @@ const ROUTE_MANIFEST_FILE = 'routes-manifest.json';
 const PUBLIC_ASSETS_DIRECTORY = 'public';
 const WORKER_BUNDLE_DIRECTORY = 'worker';
 const SERVER_BUNDLE_DIRECTORY = 'bundles';
+const SERVER_OUTPUT_DIRECTORY = 'server';
+const DEFAULT_SERVER_ONLY_PUBLIC_ASSET_EXCLUDES = [
+    'api',
+    'shared'
+];
 const BFF_EFFECT_WORKER_ENTRY = `${WORKER_BUNDLE_DIRECTORY}/__modern_bff_effect.js`;
 const EFFECT_BFF_CLOUDFLARE_IMPORT_GUIDANCE = 'Ensure the Effect BFF entry exists at api/effect/index.ts or bff.effect.entry, and import Cloudflare edge handlers from @modern-js/plugin-bff/effect-edge instead of lambda/Hono server helpers.';
 const DEFAULT_COMPATIBILITY_DATE = '2026-06-02';
 const COMPATIBILITY_DATE_PATTERN = /^\d{4}-\d{2}-\d{2}$/u;
+const REQUIRED_COMPATIBILITY_FLAGS = [
+    'nodejs_compat',
+    'global_fetch_strictly_public'
+];
+const RESERVED_ARTIFACT_DESTINATION_FILES = new Set([
+    WRANGLER_CONFIG_FILE,
+    OUTPUT_PACKAGE_FILE
+]);
+const RESERVED_ARTIFACT_DESTINATION_DIRECTORIES = new Set([
+    PUBLIC_ASSETS_DIRECTORY,
+    SERVER_OUTPUT_DIRECTORY,
+    WORKER_BUNDLE_DIRECTORY
+]);
 const DEFAULT_SECURITY_HEADERS = {
     referrerPolicy: 'strict-origin-when-cross-origin',
     contentTypeOptions: 'nosniff',
@@ -104,6 +124,13 @@ const getConfiguredWorkerName = (appDirectory, modernConfig)=>{
     const configuredName = modernConfig.deploy?.worker?.name?.trim();
     return configuredName || getWorkerName(appDirectory);
 };
+const normalizeRelativePath = (value, label, scope = 'app output')=>{
+    if ('string' != typeof value) throw new Error(`${label} must be a relative path inside the ${scope}.`);
+    const normalized = value.trim().replace(/\\/g, '/').replace(/^\.\/+/u, '').replace(/\/+$/u, '');
+    const segments = normalized.split('/');
+    if (!normalized || node_path.isAbsolute(normalized) || '.' === normalized || segments.includes('..')) throw new Error(`${label} must be a relative path inside the ${scope}.`);
+    return normalized;
+};
 const normalizeDirectiveValues = (value)=>{
     const values = Array.isArray(value) ? value : [
         value
@@ -196,6 +223,66 @@ const createCloudflareWorkerSecurityPolicy = (modernConfig)=>{
         reason: security?.reason
     };
 };
+const isJsonRecord = (value)=>'object' == typeof value && null !== value && !Array.isArray(value);
+const getConfiguredWrangler = (modernConfig)=>{
+    const wrangler = modernConfig.deploy?.worker?.wrangler;
+    if (void 0 === wrangler) return {};
+    if (!isJsonRecord(wrangler)) throw new Error('deploy.worker.wrangler must be a JSON object.');
+    return wrangler;
+};
+const createWranglerCompatibilityFlags = (configuredFlags)=>{
+    if (void 0 === configuredFlags) return [
+        ...REQUIRED_COMPATIBILITY_FLAGS
+    ];
+    if (!Array.isArray(configuredFlags) || configuredFlags.some((flag)=>'string' != typeof flag)) throw new Error('deploy.worker.wrangler.compatibility_flags must be an array of strings.');
+    return [
+        ...new Set([
+            ...configuredFlags,
+            ...REQUIRED_COMPATIBILITY_FLAGS
+        ])
+    ];
+};
+const createWranglerAssetsConfig = (configuredAssets)=>{
+    if (void 0 !== configuredAssets && !isJsonRecord(configuredAssets)) throw new Error('deploy.worker.wrangler.assets must be an object.');
+    return {
+        ...isJsonRecord(configuredAssets) ? configuredAssets : {},
+        directory: `./${PUBLIC_ASSETS_DIRECTORY}`,
+        binding: ASSETS_BINDING,
+        run_worker_first: true
+    };
+};
+const createWranglerConfig = (appDirectory, modernConfig)=>{
+    const wrangler = getConfiguredWrangler(modernConfig);
+    return {
+        $schema: 'node_modules/wrangler/config-schema.json',
+        name: getConfiguredWorkerName(appDirectory, modernConfig),
+        compatibility_date: getCompatibilityDate(modernConfig),
+        ...wrangler,
+        main: WORKER_ENTRY,
+        compatibility_flags: createWranglerCompatibilityFlags(wrangler.compatibility_flags),
+        assets: createWranglerAssetsConfig(wrangler.assets)
+    };
+};
+const normalizeCloudflareArtifact = (artifact, index)=>{
+    const from = normalizeRelativePath(artifact.from, `deploy.worker.artifacts[${index}].from`, 'app root');
+    const to = normalizeRelativePath(artifact.to, `deploy.worker.artifacts[${index}].to`, 'Cloudflare output');
+    const [topLevelDestination] = to.split('/');
+    const reservedDestination = RESERVED_ARTIFACT_DESTINATION_FILES.has(to) ? to : topLevelDestination;
+    if (RESERVED_ARTIFACT_DESTINATION_FILES.has(to) || RESERVED_ARTIFACT_DESTINATION_DIRECTORIES.has(topLevelDestination)) throw new Error(`deploy.worker.artifacts[${index}].to must not target generated Cloudflare output path ${JSON.stringify(reservedDestination)}.`);
+    return {
+        from,
+        to,
+        index
+    };
+};
+const getCloudflareArtifacts = (modernConfig)=>(modernConfig.deploy?.worker?.artifacts ?? []).map(normalizeCloudflareArtifact);
+const copyCloudflareArtifacts = async (appDirectory, outputDirectory, artifacts)=>{
+    for (const artifact of artifacts){
+        const sourcePath = node_path.join(appDirectory, artifact.from);
+        if (!await fs.pathExists(sourcePath)) throw new Error(`deploy.worker.artifacts[${artifact.index}].from does not exist: ${artifact.from}`);
+        await fs.copy(sourcePath, node_path.join(outputDirectory, artifact.to));
+    }
+};
 const readRouteSpec = async (outputDirectory)=>{
     const routeSpecPath = node_path.join(outputDirectory, ROUTE_SPEC_OUTPUT);
     if (!await fs.pathExists(routeSpecPath)) return {
@@ -277,12 +364,22 @@ const createWorkerModuleLoaders = (manifest)=>{
     ].map(([worker, loader])=>`${JSON.stringify(worker)}: ${loader}`);
     return `{\n${loaders.join(',\n')}\n}`;
 };
-const shouldCopyToPublicAssets = (src, distDirectory)=>{
+const getPublicAssetExcludes = (appDirectory, modernConfig)=>[
+        ...DEFAULT_SERVER_ONLY_PUBLIC_ASSET_EXCLUDES.filter((directory)=>{
+            try {
+                return fs.statSync(node_path.join(appDirectory, directory)).isDirectory();
+            } catch  {
+                return false;
+            }
+        }),
+        ...modernConfig.deploy?.worker?.publicAssetExcludes ?? []
+    ].map((entry)=>normalizeRelativePath(entry, 'deploy.worker.publicAssetExcludes'));
+const shouldCopyToPublicAssets = (src, distDirectory, publicAssetExcludes)=>{
     const relativePath = node_path.relative(distDirectory, src);
     if (!relativePath) return true;
     const normalizedRelativePath = relativePath.replace(/\\/g, '/');
     const [topLevelDirectory] = normalizedRelativePath.split('/');
-    return normalizedRelativePath !== ROUTE_SPEC_FILE && topLevelDirectory !== WORKER_BUNDLE_DIRECTORY && topLevelDirectory !== SERVER_BUNDLE_DIRECTORY;
+    return normalizedRelativePath !== ROUTE_SPEC_FILE && topLevelDirectory !== WORKER_BUNDLE_DIRECTORY && topLevelDirectory !== SERVER_BUNDLE_DIRECTORY && !publicAssetExcludes.some((exclude)=>normalizedRelativePath === exclude || normalizedRelativePath.startsWith(`${exclude}/`));
 };
 const shouldCopyToWorkerBundle = (src, workerBundleDirectory)=>{
     const relativePath = node_path.relative(workerBundleDirectory, src);
@@ -304,15 +401,16 @@ const createCloudflarePreset = ({ appContext, modernConfig })=>{
     const workerEntryPath = node_path.join(outputDirectory, WORKER_ENTRY);
     const workerManifestPath = node_path.join(outputDirectory, WORKER_MANIFEST);
     const routeSpecOutputPath = node_path.join(outputDirectory, ROUTE_SPEC_OUTPUT);
-    const wranglerConfigPath = node_path.join(outputDirectory, 'wrangler.json');
-    const workerName = getConfiguredWorkerName(appDirectory, modernConfig);
+    const wranglerConfigPath = node_path.join(outputDirectory, WRANGLER_CONFIG_FILE);
+    const cloudflareArtifacts = getCloudflareArtifacts(modernConfig);
+    const publicAssetExcludes = getPublicAssetExcludes(appDirectory, modernConfig);
     return {
         async prepare () {
             await fs.remove(outputDirectory);
         },
         async writeOutput () {
             await fs.copy(distDirectory, publicDirectory, {
-                filter: (src)=>shouldCopyToPublicAssets(src, distDirectory)
+                filter: (src)=>shouldCopyToPublicAssets(src, distDirectory, publicAssetExcludes)
             });
             await fs.ensureDir(node_path.dirname(workerEntryPath));
             await fs.ensureDir(node_path.dirname(workerManifestPath));
@@ -328,27 +426,14 @@ const createCloudflarePreset = ({ appContext, modernConfig })=>{
                     type: 'commonjs'
                 });
             }
-            await fs.writeJSON(wranglerConfigPath, {
-                $schema: 'node_modules/wrangler/config-schema.json',
-                name: workerName,
-                main: WORKER_ENTRY,
-                compatibility_date: getCompatibilityDate(modernConfig),
-                compatibility_flags: [
-                    'nodejs_compat',
-                    'global_fetch_strictly_public'
-                ],
-                assets: {
-                    directory: `./${PUBLIC_ASSETS_DIRECTORY}`,
-                    binding: ASSETS_BINDING,
-                    run_worker_first: true
-                }
-            }, {
+            await copyCloudflareArtifacts(appDirectory, outputDirectory, cloudflareArtifacts);
+            await fs.writeJSON(wranglerConfigPath, createWranglerConfig(appDirectory, modernConfig), {
                 spaces: 2
             });
             await fs.writeJSON(workerManifestPath, await createWorkerManifest(outputDirectory, modernConfig), {
                 spaces: 2
             });
-            await fs.writeJSON(node_path.join(outputDirectory, 'package.json'), {
+            await fs.writeJSON(node_path.join(outputDirectory, OUTPUT_PACKAGE_FILE), {
                 type: 'module'
             });
         },

package/dist/types/types/config/cloudflareDeploy.d.ts

@@ -1,5 +1,19 @@
 export type DeployTarget = 'node' | 'vercel' | 'netlify' | 'ghPages' | 'cloudflare';
 export type CloudflareWorkerSecurityCspMode = 'enforce' | 'report-only' | 'off';
+export type JsonValue = string | number | boolean | null | JsonValue[] | {
+    [key: string]: JsonValue;
+};
+export interface CloudflareWorkerArtifactConfig {
+    /**
+     * Source file or directory, relative to the app root, to copy into
+     * `.output` after framework output has been staged.
+     */
+    from: string;
+    /**
+     * Destination path relative to `.output`.
+     */
+    to: string;
+}
 export interface CloudflareWorkerSecurityCspConfig {
     mode?: CloudflareWorkerSecurityCspMode;
     directives?: Record<string, string[] | string | false>;

package/dist/types/types/config/deploy.d.ts

@@ -1,5 +1,5 @@
-import type { CloudflareWorkerSecurityConfig, DeployTarget } from './cloudflareDeploy';
-export type { CloudflareWorkerSecurityConfig, CloudflareWorkerSecurityCorsConfig, CloudflareWorkerSecurityCspConfig, CloudflareWorkerSecurityCspMode, CloudflareWorkerSecurityNoindexConfig, DeployTarget, } from './cloudflareDeploy';
+import type { CloudflareWorkerArtifactConfig, CloudflareWorkerSecurityConfig, DeployTarget, JsonValue } from './cloudflareDeploy';
+export type { CloudflareWorkerArtifactConfig, CloudflareWorkerSecurityConfig, CloudflareWorkerSecurityCorsConfig, CloudflareWorkerSecurityCspConfig, CloudflareWorkerSecurityCspMode, CloudflareWorkerSecurityNoindexConfig, DeployTarget, JsonValue, } from './cloudflareDeploy';
 export interface MicroFrontend {
     /**
      * Specifies whether to enable the HTML entry.
@@ -36,5 +36,24 @@ export interface DeployUserConfig {
         compatibilityDate?: string;
         ssr?: boolean;
         security?: CloudflareWorkerSecurityConfig;
+        /**
+         * Raw Wrangler-compatible config merged into `.output/wrangler.json`.
+         * Framework-owned worker invariants still win for `main`, the assets
+         * binding/directory/run mode, and required compatibility flags.
+         */
+        wrangler?: Record<string, JsonValue>;
+        /**
+         * Additional app-root files or directories to stage under `.output`.
+         * Use this for provider resources such as migrations or generated config.
+         */
+        artifacts?: CloudflareWorkerArtifactConfig[];
+        /**
+         * Dist output paths that must not be copied into Cloudflare public assets.
+         * Entries are slash-normalized path prefixes relative to the app dist root.
+         * Top-level `api` and `shared` dist directories are excluded when matching
+         * source directories exist in the app root because they conventionally
+         * contain server-only implementation code.
+         */
+        publicAssetExcludes?: string[];
     };
 }

package/package.json

@@ -17,7 +17,7 @@
     "modern",
     "modern.js"
   ],
-  "version": "3.4.0-ultramodern.11",
+  "version": "3.4.0-ultramodern.13",
   "types": "./dist/types/index.d.ts",
   "main": "./dist/cjs/index.js",
   "exports": {
@@ -90,16 +90,16 @@
     "ndepe": "^0.1.13",
     "pkg-types": "^2.3.1",
     "std-env": "4.1.0",
-    "@modern-js/builder": "npm:@bleedingdev/modern-js-builder@3.4.0-ultramodern.11",
-    "@modern-js/plugin": "npm:@bleedingdev/modern-js-plugin@3.4.0-ultramodern.11",
-    "@modern-js/plugin-data-loader": "npm:@bleedingdev/modern-js-plugin-data-loader@3.4.0-ultramodern.11",
-    "@modern-js/prod-server": "npm:@bleedingdev/modern-js-prod-server@3.4.0-ultramodern.11",
-    "@modern-js/i18n-utils": "npm:@bleedingdev/modern-js-i18n-utils@3.4.0-ultramodern.11",
-    "@modern-js/server-core": "npm:@bleedingdev/modern-js-server-core@3.4.0-ultramodern.11",
-    "@modern-js/utils": "npm:@bleedingdev/modern-js-utils@3.4.0-ultramodern.11",
-    "@modern-js/server-utils": "npm:@bleedingdev/modern-js-server-utils@3.4.0-ultramodern.11",
-    "@modern-js/types": "npm:@bleedingdev/modern-js-types@3.4.0-ultramodern.11",
-    "@modern-js/server": "npm:@bleedingdev/modern-js-server@3.4.0-ultramodern.11"
+    "@modern-js/builder": "npm:@bleedingdev/modern-js-builder@3.4.0-ultramodern.13",
+    "@modern-js/plugin": "npm:@bleedingdev/modern-js-plugin@3.4.0-ultramodern.13",
+    "@modern-js/plugin-data-loader": "npm:@bleedingdev/modern-js-plugin-data-loader@3.4.0-ultramodern.13",
+    "@modern-js/i18n-utils": "npm:@bleedingdev/modern-js-i18n-utils@3.4.0-ultramodern.13",
+    "@modern-js/prod-server": "npm:@bleedingdev/modern-js-prod-server@3.4.0-ultramodern.13",
+    "@modern-js/server": "npm:@bleedingdev/modern-js-server@3.4.0-ultramodern.13",
+    "@modern-js/server-utils": "npm:@bleedingdev/modern-js-server-utils@3.4.0-ultramodern.13",
+    "@modern-js/server-core": "npm:@bleedingdev/modern-js-server-core@3.4.0-ultramodern.13",
+    "@modern-js/types": "npm:@bleedingdev/modern-js-types@3.4.0-ultramodern.13",
+    "@modern-js/utils": "npm:@bleedingdev/modern-js-utils@3.4.0-ultramodern.13"
   },
   "devDependencies": {
     "@rslib/core": "0.23.0",