@cloudflare/vite-plugin 1.53.0 → 1.54.0

package/dist/index.mjs

@@ -3,7 +3,7 @@ import { a as __require$1, i as __name$3, n as __commonJS$1, o as __require$1$1,
 import * as nodeModule from "node:module";
 import { builtinModules, createRequire } from "node:module";
 import * as fs$1 from "node:fs";
-import fs2, { accessSync, chmodSync, constants, existsSync, mkdirSync, readFileSync, readdirSync, realpathSync, renameSync, rmSync, statSync, unlinkSync, writeFileSync } from "node:fs";
+import fs2, { accessSync, appendFileSync, chmodSync, constants, existsSync, mkdirSync, readFileSync, readdirSync, realpathSync, renameSync, rmSync, statSync, unlinkSync, writeFileSync } from "node:fs";
 import os, { arch } from "node:os";
 import * as path2 from "node:path";
 import path2__default, { basename, dirname, isAbsolute, join, relative, resolve } from "node:path";
@@ -43,8 +43,8 @@ import { basename as basename$1, dirname as dirname$1, isAbsolute as isAbsolute$
 import { fileURLToPath as fileURLToPath$1 } from "url";
 import { createRequire as createRequire$1 } from "module";
 
-//#region ../workers-utils/dist/chunk-IV7UMGT2.mjs
-var DEFAULT_COMPAT_DATE = "2026-08-15";
+//#region ../workers-utils/dist/chunk-SUQD2A5M.mjs
+var DEFAULT_COMPAT_DATE = "2026-08-25";
 function assertNever(_value) {}
 __name$5(assertNever, "assertNever");
 function mapWorkerMetadataBindings(bindings$1) {
@@ -499,43 +499,43 @@ function hasKnownExportType$2(entry) {
 	return type === "durable-object" || type === "worker";
 }
 __name$5(hasKnownExportType$2, "hasKnownExportType");
-function partitionExports$2(exports$2) {
+function partitionExports$2(exports$1$1) {
 	const partitioned = {
 		"durable-object": {},
 		worker: {}
 	};
-	if (exports$2 === void 0) return partitioned;
-	for (const [name, entry] of Object.entries(exports$2)) {
+	if (exports$1$1 === void 0) return partitioned;
+	for (const [name, entry] of Object.entries(exports$1$1)) {
 		if (!hasKnownExportType$2(entry)) continue;
 		partitioned[entry.type][name] = entry;
 	}
 	return partitioned;
 }
 __name$5(partitionExports$2, "partitionExports");
-function getDurableObjectExports$2(exports$2) {
-	return partitionExports$2(exports$2)["durable-object"];
+function getDurableObjectExports$2(exports$1$1) {
+	return partitionExports$2(exports$1$1)["durable-object"];
 }
 __name$5(getDurableObjectExports$2, "getDurableObjectExports");
-function hasDurableObjectExports$2(exports$2) {
-	return Object.keys(getDurableObjectExports$2(exports$2)).length > 0;
+function hasDurableObjectExports$2(exports$1$1) {
+	return Object.keys(getDurableObjectExports$2(exports$1$1)).length > 0;
 }
 __name$5(hasDurableObjectExports$2, "hasDurableObjectExports");
-function getContainerNameToClassNameMap$2(exports$2) {
+function getContainerNameToClassNameMap$2(exports$1$1) {
 	const containerNameToClassName = /* @__PURE__ */ new Map();
-	for (const [className, entry] of Object.entries(getDurableObjectExports$2(exports$2))) if ("container" in entry && typeof entry.container === "string" && !containerNameToClassName.has(entry.container)) containerNameToClassName.set(entry.container, className);
+	for (const [className, entry] of Object.entries(getDurableObjectExports$2(exports$1$1))) if ("container" in entry && typeof entry.container === "string" && !containerNameToClassName.has(entry.container)) containerNameToClassName.set(entry.container, className);
 	return containerNameToClassName;
 }
 __name$5(getContainerNameToClassNameMap$2, "getContainerNameToClassNameMap");
-function resolveContainerClassName(container, exports$2) {
+function resolveContainerClassName(container, exports$1$1) {
 	if (container.class_name !== void 0) return container.class_name;
 	if (container.name === void 0) return;
-	return getContainerNameToClassNameMap$2(exports$2).get(container.name);
+	return getContainerNameToClassNameMap$2(exports$1$1).get(container.name);
 }
 __name$5(resolveContainerClassName, "resolveContainerClassName");
-function getContainerDurableObjectClassNames$2(containers, exports$2) {
+function getContainerDurableObjectClassNames$2(containers, exports$1$1) {
 	const classNames = /* @__PURE__ */ new Set();
 	for (const container of containers ?? []) {
-		const className = resolveContainerClassName(container, exports$2);
+		const className = resolveContainerClassName(container, exports$1$1);
 		if (className !== void 0) classNames.add(className);
 	}
 	return classNames;
@@ -25308,7 +25308,7 @@ var require_undici = /* @__PURE__ */ __commonJS$4({ "../../node_modules/.pnpm/un
 //#endregion
 //#region ../workers-utils/dist/index.mjs
 var import_undici$4 = require_undici();
-var require_vendors$2 = __commonJS$3({ "../../node_modules/.pnpm/ci-info@4.4.0/node_modules/ci-info/vendors.json"(exports$2, module$1) {
+var require_vendors$2 = __commonJS$3({ "../../node_modules/.pnpm/ci-info@4.4.0/node_modules/ci-info/vendors.json"(exports$1$1, module$1) {
 	module$1.exports = [
 		{
 			name: "Agola CI",
@@ -25634,26 +25634,26 @@ var require_vendors$2 = __commonJS$3({ "../../node_modules/.pnpm/ci-info@4.4.0/n
 		}
 	];
 } });
-var require_ci_info$2 = __commonJS$3({ "../../node_modules/.pnpm/ci-info@4.4.0/node_modules/ci-info/index.js"(exports$2) {
+var require_ci_info$2 = __commonJS$3({ "../../node_modules/.pnpm/ci-info@4.4.0/node_modules/ci-info/index.js"(exports$1$1) {
 	var vendors$1 = require_vendors$2();
 	var env$3 = process.env;
-	Object.defineProperty(exports$2, "_vendors", { value: vendors$1.map(function(v) {
+	Object.defineProperty(exports$1$1, "_vendors", { value: vendors$1.map(function(v) {
 		return v.constant;
 	}) });
-	exports$2.name = null;
-	exports$2.isPR = null;
-	exports$2.id = null;
+	exports$1$1.name = null;
+	exports$1$1.isPR = null;
+	exports$1$1.id = null;
 	if (env$3.CI !== "false") vendors$1.forEach(function(vendor) {
 		const isCI2 = (Array.isArray(vendor.env) ? vendor.env : [vendor.env]).every(function(obj) {
 			return checkEnv$1(obj);
 		});
-		exports$2[vendor.constant] = isCI2;
+		exports$1$1[vendor.constant] = isCI2;
 		if (!isCI2) return;
-		exports$2.name = vendor.name;
-		exports$2.isPR = checkPR$1(vendor);
-		exports$2.id = vendor.constant;
+		exports$1$1.name = vendor.name;
+		exports$1$1.isPR = checkPR$1(vendor);
+		exports$1$1.id = vendor.constant;
 	});
-	exports$2.isCI = !!(env$3.CI !== "false" && (env$3.BUILD_ID || env$3.BUILD_NUMBER || env$3.CI || env$3.CI_APP_ID || env$3.CI_BUILD_ID || env$3.CI_BUILD_NUMBER || env$3.CI_NAME || env$3.CONTINUOUS_INTEGRATION || env$3.RUN_ID || exports$2.name || false));
+	exports$1$1.isCI = !!(env$3.CI !== "false" && (env$3.BUILD_ID || env$3.BUILD_NUMBER || env$3.CI || env$3.CI_APP_ID || env$3.CI_BUILD_ID || env$3.CI_BUILD_NUMBER || env$3.CI_NAME || env$3.CONTINUOUS_INTEGRATION || env$3.RUN_ID || exports$1$1.name || false));
 	function checkEnv$1(obj) {
 		if (typeof obj === "string") return !!env$3[obj];
 		if ("env" in obj) return env$3[obj.env] && env$3[obj.env].includes(obj.includes);
@@ -25681,7 +25681,7 @@ var require_ci_info$2 = __commonJS$3({ "../../node_modules/.pnpm/ci-info@4.4.0/n
 	}
 	__name$5(checkPR$1, "checkPR");
 } });
-var require_command_exists$3 = __commonJS$3({ "../../node_modules/.pnpm/command-exists@1.2.9/node_modules/command-exists/lib/command-exists.js"(exports$2, module$1) {
+var require_command_exists$3 = __commonJS$3({ "../../node_modules/.pnpm/command-exists@1.2.9/node_modules/command-exists/lib/command-exists.js"(exports$1$1, module$1) {
 	var exec$3 = __require$2("child_process").exec;
 	var execSync$2 = __require$2("child_process").execSync;
 	var fs3 = __require$2("fs");
@@ -25762,17 +25762,17 @@ var require_command_exists$3 = __commonJS$3({ "../../node_modules/.pnpm/command-
 	}, "cleanInput");
 	if (isUsingWindows$1) cleanInput$1 = /* @__PURE__ */ __name$5(function(s) {
 		if (/[\\]/.test(s)) {
-			var dirname3 = "\"" + path6.dirname(s) + "\"";
+			var dirname4 = "\"" + path6.dirname(s) + "\"";
 			var basename2 = "\"" + path6.basename(s) + "\"";
-			return dirname3 + ":" + basename2;
+			return dirname4 + ":" + basename2;
 		}
 		return "\"" + s + "\"";
 	}, "cleanInput");
 	module$1.exports = /* @__PURE__ */ __name$5(function commandExists(commandName, callback$1) {
 		var cleanedCommandName = cleanInput$1(commandName);
-		if (!callback$1 && typeof Promise !== "undefined") return new Promise(function(resolve2, reject) {
+		if (!callback$1 && typeof Promise !== "undefined") return new Promise(function(resolve3, reject) {
 			commandExists(commandName, function(error51, output) {
-				if (output) resolve2(commandName);
+				if (output) resolve3(commandName);
 				else reject(error51);
 			});
 		});
@@ -25785,14 +25785,14 @@ var require_command_exists$3 = __commonJS$3({ "../../node_modules/.pnpm/command-
 		else return commandExistsUnixSync$1(commandName, cleanedCommandName);
 	};
 } });
-var require_command_exists2$1 = __commonJS$3({ "../../node_modules/.pnpm/command-exists@1.2.9/node_modules/command-exists/index.js"(exports$2, module$1) {
+var require_command_exists2$1 = __commonJS$3({ "../../node_modules/.pnpm/command-exists@1.2.9/node_modules/command-exists/index.js"(exports$1$1, module$1) {
 	module$1.exports = require_command_exists$3();
 } });
-var require_ini$1 = __commonJS$3({ "../../node_modules/.pnpm/ini@1.3.8/node_modules/ini/ini.js"(exports$2) {
-	exports$2.parse = exports$2.decode = decode3;
-	exports$2.stringify = exports$2.encode = encode3;
-	exports$2.safe = safe;
-	exports$2.unsafe = unsafe;
+var require_ini$1 = __commonJS$3({ "../../node_modules/.pnpm/ini@1.3.8/node_modules/ini/ini.js"(exports$1$1) {
+	exports$1$1.parse = exports$1$1.decode = decode3;
+	exports$1$1.stringify = exports$1$1.encode = encode3;
+	exports$1$1.safe = safe;
+	exports$1$1.unsafe = unsafe;
 	var eol = typeof process !== "undefined" && process.platform === "win32" ? "\r\n" : "\n";
 	function encode3(obj, opt) {
 		var children = [];
@@ -25924,7 +25924,7 @@ var require_ini$1 = __commonJS$3({ "../../node_modules/.pnpm/ini@1.3.8/node_modu
 	}
 	__name$5(unsafe, "unsafe");
 } });
-var require_strip_json_comments$1 = __commonJS$3({ "../../node_modules/.pnpm/strip-json-comments@2.0.1/node_modules/strip-json-comments/index.js"(exports$2, module$1) {
+var require_strip_json_comments$1 = __commonJS$3({ "../../node_modules/.pnpm/strip-json-comments@2.0.1/node_modules/strip-json-comments/index.js"(exports$1$1, module$1) {
 	var singleComment = 1;
 	var multiComment = 2;
 	function stripWithoutWhitespace() {
@@ -25983,16 +25983,16 @@ var require_strip_json_comments$1 = __commonJS$3({ "../../node_modules/.pnpm/str
 		return ret + (insideComment ? strip(str.substr(offset)) : str.substr(offset));
 	};
 } });
-var require_utils$3 = __commonJS$3({ "../../node_modules/.pnpm/rc@1.2.8/node_modules/rc/lib/utils.js"(exports$2) {
+var require_utils$3 = __commonJS$3({ "../../node_modules/.pnpm/rc@1.2.8/node_modules/rc/lib/utils.js"(exports$1$1) {
 	var fs3 = __require$2("fs");
 	var ini = require_ini$1();
 	var path6 = __require$2("path");
 	var stripJsonComments = require_strip_json_comments$1();
-	var parse3$3 = exports$2.parse = function(content) {
+	var parse3$3 = exports$1$1.parse = function(content) {
 		if (/^\s*{/.test(content)) return JSON.parse(stripJsonComments(content));
 		return ini.parse(content);
 	};
-	var file2 = exports$2.file = function() {
+	var file2 = exports$1$1.file = function() {
 		var args = [].slice.call(arguments).filter(function(arg) {
 			return arg != null;
 		});
@@ -26004,11 +26004,11 @@ var require_utils$3 = __commonJS$3({ "../../node_modules/.pnpm/rc@1.2.8/node_mod
 			return;
 		}
 	};
-	exports$2.json = function() {
+	exports$1$1.json = function() {
 		var content = file2.apply(null, arguments);
 		return content ? parse3$3(content) : null;
 	};
-	exports$2.env = function(prefix, env2) {
+	exports$1$1.env = function(prefix, env2) {
 		env2 = env2 || process.env;
 		var obj = {};
 		var l = prefix.length;
@@ -26026,7 +26026,7 @@ var require_utils$3 = __commonJS$3({ "../../node_modules/.pnpm/rc@1.2.8/node_mod
 		}
 		return obj;
 	};
-	exports$2.find = function() {
+	exports$1$1.find = function() {
 		var rel = path6.join.apply(null, [].slice.call(arguments));
 		function find2(start, rel2) {
 			var file3 = path6.join(start, rel2);
@@ -26041,7 +26041,7 @@ var require_utils$3 = __commonJS$3({ "../../node_modules/.pnpm/rc@1.2.8/node_mod
 		return find2(process.cwd(), rel);
 	};
 } });
-var require_deep_extend$1 = __commonJS$3({ "../../node_modules/.pnpm/deep-extend@0.6.0/node_modules/deep-extend/lib/deep-extend.js"(exports$2, module$1) {
+var require_deep_extend$1 = __commonJS$3({ "../../node_modules/.pnpm/deep-extend@0.6.0/node_modules/deep-extend/lib/deep-extend.js"(exports$1$1, module$1) {
 	function isSpecificValue(val) {
 		return val instanceof Buffer || val instanceof Date || val instanceof RegExp ? true : false;
 	}
@@ -26104,7 +26104,7 @@ var require_deep_extend$1 = __commonJS$3({ "../../node_modules/.pnpm/deep-extend
 		return target$1;
 	};
 } });
-var require_minimist$1 = __commonJS$3({ "../../node_modules/.pnpm/minimist@1.2.6/node_modules/minimist/index.js"(exports$2, module$1) {
+var require_minimist$1 = __commonJS$3({ "../../node_modules/.pnpm/minimist@1.2.6/node_modules/minimist/index.js"(exports$1$1, module$1) {
 	module$1.exports = function(args, opts) {
 		if (!opts) opts = {};
 		var flags = {
@@ -26279,7 +26279,7 @@ var require_minimist$1 = __commonJS$3({ "../../node_modules/.pnpm/minimist@1.2.6
 	}
 	__name$5(isConstructorOrProto, "isConstructorOrProto");
 } });
-var require_rc$1 = __commonJS$3({ "../../node_modules/.pnpm/rc@1.2.8/node_modules/rc/index.js"(exports$2, module$1) {
+var require_rc$1 = __commonJS$3({ "../../node_modules/.pnpm/rc@1.2.8/node_modules/rc/index.js"(exports$1$1, module$1) {
 	var cc = require_utils$3();
 	var join3 = __require$2("path").join;
 	var deepExtend = require_deep_extend$1();
@@ -26323,14 +26323,14 @@ var require_rc$1 = __commonJS$3({ "../../node_modules/.pnpm/rc@1.2.8/node_module
 		]));
 	};
 } });
-var require_registry_url$1 = __commonJS$3({ "../../node_modules/.pnpm/registry-url@3.1.0/node_modules/registry-url/index.js"(exports$2, module$1) {
+var require_registry_url$1 = __commonJS$3({ "../../node_modules/.pnpm/registry-url@3.1.0/node_modules/registry-url/index.js"(exports$1$1, module$1) {
 	module$1.exports = function(scope) {
 		var rc = require_rc$1()("npm", { registry: "https://registry.npmjs.org/" });
 		var url2 = rc[scope + ":registry"] || rc.registry;
 		return url2.slice(-1) === "/" ? url2 : url2 + "/";
 	};
 } });
-var require_safe_buffer$1 = __commonJS$3({ "../../node_modules/.pnpm/safe-buffer@5.2.1/node_modules/safe-buffer/index.js"(exports$2, module$1) {
+var require_safe_buffer$1 = __commonJS$3({ "../../node_modules/.pnpm/safe-buffer@5.2.1/node_modules/safe-buffer/index.js"(exports$1$1, module$1) {
 	var buffer$1 = __require$2("buffer");
 	var Buffer2 = buffer$1.Buffer;
 	function copyProps(src$1, dst) {
@@ -26339,8 +26339,8 @@ var require_safe_buffer$1 = __commonJS$3({ "../../node_modules/.pnpm/safe-buffer
 	__name$5(copyProps, "copyProps");
 	if (Buffer2.from && Buffer2.alloc && Buffer2.allocUnsafe && Buffer2.allocUnsafeSlow) module$1.exports = buffer$1;
 	else {
-		copyProps(buffer$1, exports$2);
-		exports$2.Buffer = SafeBuffer;
+		copyProps(buffer$1, exports$1$1);
+		exports$1$1.Buffer = SafeBuffer;
 	}
 	function SafeBuffer(arg, encodingOrOffset, length) {
 		return Buffer2(arg, encodingOrOffset, length);
@@ -26369,7 +26369,7 @@ var require_safe_buffer$1 = __commonJS$3({ "../../node_modules/.pnpm/safe-buffer
 		return buffer$1.SlowBuffer(size);
 	};
 } });
-var require_base64$1 = __commonJS$3({ "../../node_modules/.pnpm/registry-auth-token@3.3.2/node_modules/registry-auth-token/base64.js"(exports$2, module$1) {
+var require_base64$1 = __commonJS$3({ "../../node_modules/.pnpm/registry-auth-token@3.3.2/node_modules/registry-auth-token/base64.js"(exports$1$1, module$1) {
 	var safeBuffer = require_safe_buffer$1().Buffer;
 	function decodeBase64(base643) {
 		return safeBuffer.from(base643, "base64").toString("utf8");
@@ -26384,7 +26384,7 @@ var require_base64$1 = __commonJS$3({ "../../node_modules/.pnpm/registry-auth-to
 		encodeBase64
 	};
 } });
-var require_registry_auth_token$1 = __commonJS$3({ "../../node_modules/.pnpm/registry-auth-token@3.3.2/node_modules/registry-auth-token/index.js"(exports$2, module$1) {
+var require_registry_auth_token$1 = __commonJS$3({ "../../node_modules/.pnpm/registry-auth-token@3.3.2/node_modules/registry-auth-token/index.js"(exports$1$1, module$1) {
 	var url2 = __require$2("url");
 	var base643 = require_base64$1();
 	var decodeBase64 = base643.decodeBase64;
@@ -26459,7 +26459,7 @@ var require_registry_auth_token$1 = __commonJS$3({ "../../node_modules/.pnpm/reg
 	}
 	__name$5(getTokenForUsernameAndPassword, "getTokenForUsernameAndPassword");
 } });
-var require_update_check$1 = __commonJS$3({ "../../node_modules/.pnpm/update-check@1.5.4/node_modules/update-check/index.js"(exports$2, module$1) {
+var require_update_check$1 = __commonJS$3({ "../../node_modules/.pnpm/update-check@1.5.4/node_modules/update-check/index.js"(exports$1$1, module$1) {
 	var { URL: URL2 } = __require$2("url");
 	var { join: join3 } = __require$2("path");
 	var fs3 = __require$2("fs");
@@ -26498,7 +26498,7 @@ var require_update_check$1 = __commonJS$3({ "../../node_modules/.pnpm/update-che
 			lastUpdate
 		}), "utf8");
 	}, "updateCache");
-	var loadPackage = /* @__PURE__ */ __name$5((url2, authInfo) => new Promise((resolve2, reject) => {
+	var loadPackage = /* @__PURE__ */ __name$5((url2, authInfo) => new Promise((resolve3, reject) => {
 		const options = {
 			host: url2.hostname,
 			path: url2.pathname,
@@ -26524,7 +26524,7 @@ var require_update_check$1 = __commonJS$3({ "../../node_modules/.pnpm/update-che
 			});
 			response.on("end", () => {
 				try {
-					resolve2(JSON.parse(rawData));
+					resolve3(JSON.parse(rawData));
 				} catch (e2) {
 					reject(e2);
 				}
@@ -26625,6 +26625,7 @@ var defaultWranglerConfig$1 = {
 		producers: [],
 		consumers: []
 	},
+	connect: [],
 	r2_buckets: [],
 	d1_databases: [],
 	vectorize: [],
@@ -40540,8 +40541,8 @@ var getSanitizeLogs = getBooleanEnvironmentVariableFactory({
 	variableName: "WRANGLER_LOG_SANITIZE",
 	defaultValue: true
 });
-var getOutputFileDirectoryFromEnv = getEnvironmentVariableFactory({ variableName: "WRANGLER_OUTPUT_FILE_DIRECTORY" });
-var getOutputFilePathFromEnv = getEnvironmentVariableFactory({ variableName: "WRANGLER_OUTPUT_FILE_PATH" });
+var getOutputFileDirectoryFromEnv$1 = getEnvironmentVariableFactory({ variableName: "WRANGLER_OUTPUT_FILE_DIRECTORY" });
+var getOutputFilePathFromEnv$1 = getEnvironmentVariableFactory({ variableName: "WRANGLER_OUTPUT_FILE_PATH" });
 var getCIMatchTag = getEnvironmentVariableFactory({ variableName: "WRANGLER_CI_MATCH_TAG" });
 var getCIOverrideName$1 = getEnvironmentVariableFactory({ variableName: "WRANGLER_CI_OVERRIDE_NAME" });
 var getCIOverrideNetworkModeHost = getEnvironmentVariableFactory({ variableName: "WRANGLER_CI_OVERRIDE_NETWORK_MODE_HOST" });
@@ -41419,6 +41420,7 @@ function normalizeAndValidateEnvironment$1(diagnostics, configPath, rawEnv, isDi
 			producers: [],
 			consumers: []
 		}),
+		connect: notInheritable$1(diagnostics, topLevelEnv, rawConfig, rawEnv, envName, "connect", validateConnectHandlers$1(envName), []),
 		r2_buckets: notInheritable$1(diagnostics, topLevelEnv, rawConfig, rawEnv, envName, "r2_buckets", validateBindingArray$1(envName, validateR2Binding$1), []),
 		d1_databases: notInheritable$1(diagnostics, topLevelEnv, rawConfig, rawEnv, envName, "d1_databases", validateBindingArray$1(envName, validateD1Binding$1), []),
 		vectorize: notInheritable$1(diagnostics, topLevelEnv, rawConfig, rawEnv, envName, "vectorize", validateBindingArray$1(envName, validateVectorizeBinding$1), []),
@@ -41461,7 +41463,7 @@ function normalizeAndValidateEnvironment$1(diagnostics, configPath, rawEnv, isDi
 		cache: inheritable$1(diagnostics, topLevelEnv, rawEnv, "cache", validateCache$1, void 0),
 		compliance_region: inheritable$1(diagnostics, topLevelEnv, rawEnv, "compliance_region", isOneOf$1("public", "fedramp_high"), void 0),
 		python_modules: inheritable$1(diagnostics, topLevelEnv, rawEnv, "python_modules", validatePythonModules$1, { exclude: ["**/*.pyc"] }),
-		previews: inheritable$1(diagnostics, topLevelEnv, rawEnv, "previews", validatePreviewsConfig$1(envName), void 0)
+		previews: inheritable$1(diagnostics, topLevelEnv, rawEnv, "previews", validatePreviewsConfig$1(envName, configPath), void 0)
 	};
 	warnIfDurableObjectsHaveNoLifecycleConfig$1(diagnostics, environment.durable_objects, environment.migrations, environment.exports, configPath);
 	errorIfMigrationsAndExportsBothSet$1(diagnostics, environment.migrations, environment.exports);
@@ -41743,6 +41745,14 @@ var validateDurableObjectBinding$1 = /* @__PURE__ */ __name$5((diagnostics, fiel
 	return isValid;
 }, "validateDurableObjectBinding");
 var workflowNameFormatMessage$1 = `Workflow names must be 1-64 characters long, start with a letter, number, or underscore, and may only contain letters, numbers, underscores, or hyphens.`;
+function validateWorkflowRetentionValue$1(diagnostics, field, key, value) {
+	const isValidNumber = typeof value === "number" && Number.isInteger(value) && value > 0;
+	const isValidString = typeof value === "string" && value.length > 0;
+	if (isValidNumber || isValidString) return true;
+	diagnostics.errors.push(`"${field}" bindings "default_retention.${key}" field must be a positive integer of milliseconds or a duration string such as "3 days", but got ${JSON.stringify(value)}.`);
+	return false;
+}
+__name$5(validateWorkflowRetentionValue$1, "validateWorkflowRetentionValue");
 var validateWorkflowBinding$1 = /* @__PURE__ */ __name$5((diagnostics, field, value) => {
 	if (typeof value !== "object" || value === null) {
 		diagnostics.errors.push(`"workflows" bindings should be objects, but got ${JSON.stringify(value)}`);
@@ -41768,10 +41778,6 @@ var validateWorkflowBinding$1 = /* @__PURE__ */ __name$5((diagnostics, field, va
 		diagnostics.errors.push(`"${field}" bindings should, optionally, have a string "script_name" field but got ${JSON.stringify(value)}.`);
 		isValid = false;
 	}
-	if (!isOptionalProperty$1(value, "remote", "boolean")) {
-		diagnostics.errors.push(`"${field}" bindings should, optionally, have a boolean "remote" field but got ${JSON.stringify(value)}.`);
-		isValid = false;
-	}
 	if (hasProperty$1(value, "schedules") && value.schedules !== void 0) if (typeof value.schedules === "string") {
 		if (value.schedules.length === 0) {
 			diagnostics.errors.push(`"${field}" bindings "schedules" field must not be an empty string.`);
@@ -41805,14 +41811,22 @@ var validateWorkflowBinding$1 = /* @__PURE__ */ __name$5((diagnostics, field, va
 		}
 		validateAdditionalProperties$1(diagnostics, `${field}.limits`, Object.keys(limits), ["steps"]);
 	}
+	if (hasProperty$1(value, "default_retention") && value.default_retention !== void 0) if (typeof value.default_retention !== "object" || value.default_retention === null || Array.isArray(value.default_retention)) {
+		diagnostics.errors.push(`"${field}" bindings should, optionally, have an object "default_retention" field but got ${JSON.stringify(value)}.`);
+		isValid = false;
+	} else {
+		const defaultRetention = value.default_retention;
+		for (const key of ["success_retention", "error_retention"]) if (defaultRetention[key] !== void 0 && !validateWorkflowRetentionValue$1(diagnostics, field, key, defaultRetention[key])) isValid = false;
+		validateAdditionalProperties$1(diagnostics, `${field}.default_retention`, Object.keys(defaultRetention), ["success_retention", "error_retention"]);
+	}
 	validateAdditionalProperties$1(diagnostics, field, Object.keys(value), [
 		"binding",
 		"name",
 		"class_name",
 		"script_name",
-		"remote",
 		"limits",
-		"schedules"
+		"schedules",
+		"default_retention"
 	]);
 	return isValid;
 }, "validateWorkflowBinding");
@@ -42005,7 +42019,36 @@ function validateSshPublicKeys$1(diagnostics, field, value, nameRequired) {
 	}
 }
 __name$5(validateSshPublicKeys$1, "validateSshPublicKeys");
-function validateContainerApp$1(envName, topLevelName, configPath) {
+function validatePreviewsContainers$1(envName, configPath) {
+	const innerValidator = validateContainerApp$1(envName, void 0, configPath, { generateDefaultName: false });
+	return (diagnostics, field, value, config2) => {
+		if (Array.isArray(value)) {
+			const nameFields = [...value.entries()].filter(([, entry]) => entry && typeof entry === "object" && "name" in entry).map(([index]) => `"${field}[${index}].name"`);
+			if (nameFields.length > 0) {
+				diagnostics.errors.push(`${nameFields.join(", ")} cannot be set. A preview container's application name is generated from the worker name, preview slug, and Durable Object class name, so that separate previews of the same Worker do not collide. Remove it and identify the container with "class_name".`);
+				return false;
+			}
+			const seenClasses = /* @__PURE__ */ new Set();
+			const duplicateClasses = /* @__PURE__ */ new Set();
+			for (const entry of value) {
+				if (!entry || typeof entry !== "object") continue;
+				if (typeof entry.class_name === "string") {
+					if (seenClasses.has(entry.class_name)) duplicateClasses.add(entry.class_name);
+					seenClasses.add(entry.class_name);
+				}
+			}
+			if (duplicateClasses.size > 0) {
+				const classList = [...duplicateClasses].map((className) => `"${className}"`).join(", ");
+				diagnostics.errors.push(`"${field}" declares more than one container for the Durable Object class ${classList}; each Durable Object class may appear at most once.`);
+				return false;
+			}
+		}
+		return innerValidator(diagnostics, field, value, config2);
+	};
+}
+__name$5(validatePreviewsContainers$1, "validatePreviewsContainers");
+function validateContainerApp$1(envName, topLevelName, configPath, options = {}) {
+	const { generateDefaultName = true } = options;
 	return (diagnostics, field, value, config2) => {
 		if (!value) return true;
 		if (!Array.isArray(value)) {
@@ -42015,7 +42058,7 @@ function validateContainerApp$1(envName, topLevelName, configPath) {
 		for (const containerAppOptional of value) {
 			validateOptionalProperty$1(diagnostics, field, "class_name", containerAppOptional.class_name, "string");
 			validateOptionalProperty$1(diagnostics, field, "name", containerAppOptional.name, "string");
-			if (!containerAppOptional.name) if (containerAppOptional.class_name === void 0) diagnostics.errors.push(`"containers.name" is required when "containers.class_name" is not defined, because there is no class name to derive a default name from. Either name this container and reference it from a Durable Object's \`exports\` entry, or set "containers.class_name".`);
+			if (generateDefaultName && !containerAppOptional.name) if (containerAppOptional.class_name === void 0) diagnostics.errors.push(`"containers.name" is required when "containers.class_name" is not defined, because there is no class name to derive a default name from. Either name this container and reference it from a Durable Object's \`exports\` entry, or set "containers.class_name".`);
 			else if (!topLevelName) diagnostics.errors.push(`Must have either a top level "name" and "containers.class_name" field defined, or have field "containers.name" defined.`);
 			else {
 				let name = `${topLevelName}-${containerAppOptional.class_name}`;
@@ -42830,6 +42873,63 @@ var validateConsumer$1 = /* @__PURE__ */ __name$5((diagnostics, field, value, _c
 	}
 	return isValid;
 }, "validateConsumer");
+function validateConnectHandlers$1(envName) {
+	return (diagnostics, field, value, config2) => {
+		if (value === void 0) return true;
+		const fieldPath = config2 === void 0 ? `${field}` : `env.${envName}.${field}`;
+		if (!Array.isArray(value)) {
+			diagnostics.errors.push(`The field "${fieldPath}" should be an array but got ${JSON.stringify(value)}.`);
+			return false;
+		}
+		let isValid = true;
+		for (let i$1 = 0; i$1 < value.length; i$1++) if (!validateConnectHandler$1(diagnostics, `${fieldPath}[${i$1}]`, value[i$1], config2)) isValid = false;
+		const firstIndexByKey = /* @__PURE__ */ new Map();
+		for (let i$1 = 0; i$1 < value.length; i$1++) {
+			const handler = value[i$1];
+			if (typeof handler !== "object" || handler === null || typeof handler.port !== "number" || typeof handler.protocol !== "string") continue;
+			const { protocol, port } = handler;
+			const key = `${protocol}:${port}`;
+			const firstIndex = firstIndexByKey.get(key);
+			if (firstIndex !== void 0) {
+				diagnostics.errors.push(`"${fieldPath}[${i$1}]" has the same "protocol" (${protocol}) and "port" (${port}) as "${fieldPath}[${firstIndex}]". Each entry in "connect" must use a unique protocol/port combination.`);
+				isValid = false;
+			} else firstIndexByKey.set(key, i$1);
+		}
+		return isValid;
+	};
+}
+__name$5(validateConnectHandlers$1, "validateConnectHandlers");
+var validateConnectHandler$1 = /* @__PURE__ */ __name$5((diagnostics, field, value) => {
+	if (typeof value !== "object" || value === null) {
+		diagnostics.errors.push(`"${field}" should be an object, but got ${JSON.stringify(value)}`);
+		return false;
+	}
+	let isValid = true;
+	if (!validateAdditionalProperties$1(diagnostics, field, Object.keys(value), [
+		"protocol",
+		"port",
+		"address"
+	])) isValid = false;
+	if ("protocol" in value && value.protocol !== "tcp") {
+		diagnostics.errors.push(`"${field}" should have a "protocol" field of "tcp" but got ${JSON.stringify(value.protocol)}.`);
+		isValid = false;
+	} else if (!("protocol" in value)) {
+		diagnostics.errors.push(`"${field}" should have a "protocol" field of "tcp" but got ${JSON.stringify(value)}.`);
+		isValid = false;
+	}
+	if (!isRequiredProperty$1(value, "port", "number")) {
+		diagnostics.errors.push(`"${field}" should have a number "port" field but got ${JSON.stringify(value)}.`);
+		isValid = false;
+	} else if (!Number.isInteger(value.port) || value.port < 1 || value.port > 65535) {
+		diagnostics.errors.push(`"${field}" should have an integer "port" field between 1 and 65535 but got ${JSON.stringify(value)}.`);
+		isValid = false;
+	}
+	if (!isOptionalProperty$1(value, "address", "string")) {
+		diagnostics.errors.push(`"${field}" should, optionally, have a string "address" field but got ${JSON.stringify(value)}.`);
+		isValid = false;
+	}
+	return isValid;
+}, "validateConnectHandler");
 var validateCompatibilityDate$1 = /* @__PURE__ */ __name$5((diagnostics, field, value) => {
 	if (value === void 0) return true;
 	if (typeof value !== "string") {
@@ -43011,7 +43111,7 @@ function normalizeAndValidateLimits$1(diagnostics, topLevelEnv, rawEnv) {
 	return inheritable$1(diagnostics, topLevelEnv, rawEnv, "limits", () => true, void 0);
 }
 __name$5(normalizeAndValidateLimits$1, "normalizeAndValidateLimits");
-var validatePreviewsConfig$1 = /* @__PURE__ */ __name$5((envName) => (diagnostics, field, value) => {
+var validatePreviewsConfig$1 = /* @__PURE__ */ __name$5((envName, configPath) => (diagnostics, field, value) => {
 	if (value === void 0) return true;
 	if (typeof value !== "object" || value === null || Array.isArray(value)) {
 		diagnostics.errors.push(`The field "${field}" should be an object but got ${JSON.stringify(value)}.`);
@@ -43052,6 +43152,7 @@ var validatePreviewsConfig$1 = /* @__PURE__ */ __name$5((envName) => (diagnostic
 		"ratelimits",
 		"vpc_services",
 		"version_metadata",
+		"containers",
 		"logpush",
 		"observability",
 		"limits",
@@ -43089,6 +43190,7 @@ var validatePreviewsConfig$1 = /* @__PURE__ */ __name$5((envName) => (diagnostic
 	isValid = validateBindingArray$1(envName, validateRateLimitBinding$1)(diagnostics, `${field}.ratelimits`, previews.ratelimits, void 0) && isValid;
 	isValid = validateBindingArray$1(envName, validateVpcServiceBinding$1)(diagnostics, `${field}.vpc_services`, previews.vpc_services, void 0) && isValid;
 	if (previews.version_metadata !== void 0) isValid = validateVersionMetadataBinding$1(envName)(diagnostics, `${field}.version_metadata`, previews.version_metadata, void 0) && isValid;
+	if (previews.containers !== void 0) isValid = validatePreviewsContainers$1(envName, configPath)(diagnostics, `${field}.containers`, previews.containers, void 0) && isValid;
 	isValid = isBoolean$1(diagnostics, `${field}.logpush`, previews.logpush, void 0) && isValid;
 	isValid = validateObservability$1(diagnostics, `${field}.observability`, previews.observability, void 0) && isValid;
 	if (previews.limits) {
@@ -43381,11 +43483,11 @@ var validateCache$1 = /* @__PURE__ */ __name$5((diagnostics, field, value) => {
 	isValid = validateAdditionalProperties$1(diagnostics, field, Object.keys(val), ["enabled", "cross_version_cache"]) && isValid;
 	return isValid;
 }, "validateCache");
-function warnIfDurableObjectsHaveNoLifecycleConfig$1(diagnostics, durableObjects, migrations, exports$2, configPath) {
+function warnIfDurableObjectsHaveNoLifecycleConfig$1(diagnostics, durableObjects, migrations, exports$1$1, configPath) {
 	if (!Array.isArray(durableObjects.bindings) || durableObjects.bindings.length === 0) return;
 	const exportedDurableObjects = durableObjects.bindings.filter((binding) => !binding.script_name);
 	const exportsCovers = /* @__PURE__ */ __name$5((className) => {
-		const entry = exports$2?.[className];
+		const entry = exports$1$1?.[className];
 		if (entry === void 0 || entry.type !== "durable-object") return false;
 		const state = entry.state ?? "created";
 		return state === "created" || state === "expecting-transfer";
@@ -43407,11 +43509,11 @@ function warnIfDurableObjectsHaveNoLifecycleConfig$1(diagnostics, durableObjects
 	\`\`\``);
 }
 __name$5(warnIfDurableObjectsHaveNoLifecycleConfig$1, "warnIfDurableObjectsHaveNoLifecycleConfig");
-function errorIfMigrationsAndExportsBothSet$1(diagnostics, migrations, exports$2) {
-	if (migrations.length > 0 && exports$2 !== void 0 && Object.values(exports$2).some((entry) => entry.type === "durable-object")) diagnostics.errors.push(`\`migrations\` and \`exports\` are mutually exclusive. Choose one or the other to declare your Durable Object lifecycle, but not both.`);
+function errorIfMigrationsAndExportsBothSet$1(diagnostics, migrations, exports$1$1) {
+	if (migrations.length > 0 && exports$1$1 !== void 0 && Object.values(exports$1$1).some((entry) => entry.type === "durable-object")) diagnostics.errors.push(`\`migrations\` and \`exports\` are mutually exclusive. Choose one or the other to declare your Durable Object lifecycle, but not both.`);
 }
 __name$5(errorIfMigrationsAndExportsBothSet$1, "errorIfMigrationsAndExportsBothSet");
-function validateContainerExportLinks$1(diagnostics, containers, exports$2, containersDeclaredElsewhere) {
+function validateContainerExportLinks$1(diagnostics, containers, exports$1$1, containersDeclaredElsewhere) {
 	if (containers !== void 0 && !Array.isArray(containers)) return;
 	if (containers === void 0 && containersDeclaredElsewhere) return;
 	const containersByName = /* @__PURE__ */ new Map();
@@ -43429,7 +43531,7 @@ function validateContainerExportLinks$1(diagnostics, containers, exports$2, cont
 	}
 	const overSubscribedClassNames = new Set([...containerCountByClassName].filter(([, count]) => count > 1).map(([className]) => className));
 	for (const className of [...overSubscribedClassNames].sort()) diagnostics.errors.push(`More than one container is attached to the Durable Object "${className}". A Durable Object can only have one container attached to it.`);
-	const durableObjectExports = getDurableObjectExports$2(exports$2);
+	const durableObjectExports = getDurableObjectExports$2(exports$1$1);
 	const liveExportClassNames = /* @__PURE__ */ new Set();
 	const classNamesByContainerName = /* @__PURE__ */ new Map();
 	for (const [className, entry] of Object.entries(durableObjectExports)) {
@@ -43443,7 +43545,7 @@ function validateContainerExportLinks$1(diagnostics, containers, exports$2, cont
 		classNamesByContainerName.set(entry.container, [...classNamesByContainerName.get(entry.container) ?? [], className]);
 	}
 	for (const [containerName, classNames] of classNamesByContainerName) if (classNames.length > 1) diagnostics.errors.push(`The container "${containerName}" is referenced by more than one Durable Object export (${classNames.join(", ")}). A container can only back a single Durable Object.`);
-	const containerNameToClassName = getContainerNameToClassNameMap$2(exports$2);
+	const containerNameToClassName = getContainerNameToClassNameMap$2(exports$1$1);
 	const usesDurableObjectExports = Object.keys(durableObjectExports).length > 0;
 	for (const container of containers ?? []) {
 		if (typeof container.name !== "string") continue;
@@ -43534,7 +43636,7 @@ var BINDING_LOCAL_SUPPORT$1 = {
 	kv_namespace: "local-and-remote",
 	r2_bucket: "local-and-remote",
 	d1: "local-and-remote",
-	workflow: "local-and-remote",
+	workflow: "local-only",
 	browser: "local-and-remote",
 	images: "local-and-remote",
 	stream: "local-and-remote",
@@ -43649,6 +43751,10 @@ function getPackagePath$1(packageName, projectPath) {
 	try {
 		return path2__default.dirname(__require$2.resolve(packageName, { paths: [projectPath] }));
 	} catch {}
+	try {
+		const candidate = path2__default.join(projectPath, "node_modules", packageName, "package.json");
+		if (statSync(candidate).isFile()) return path2__default.dirname(candidate);
+	} catch {}
 }
 __name$5(getPackagePath$1, "getPackagePath");
 function isPackageInstalled$1(packageName, projectPath) {
@@ -44544,7 +44650,7 @@ function terminateCloudflared$1(cloudflared) {
 }
 __name$5(terminateCloudflared$1, "terminateCloudflared");
 function waitForQuickTunnelReady$1(cloudflared, timeoutMs, options) {
-	return new Promise((resolve2, reject) => {
+	return new Promise((resolve3, reject) => {
 		let resolved = false;
 		let stderrOutput = "";
 		const logger$1 = options?.logger;
@@ -44565,7 +44671,7 @@ function waitForQuickTunnelReady$1(cloudflared, timeoutMs, options) {
 			if (match && !resolved) {
 				resolved = true;
 				clearTimeout(timeoutId);
-				resolve2({
+				resolve3({
 					mode: "quick",
 					publicUrl: new URL(match[0])
 				});
@@ -44884,7 +44990,7 @@ async function fetchLatestNpmVersion(name, version2) {
 __name$5(fetchLatestNpmVersion, "fetchLatestNpmVersion");
 async function openInBrowser(url2, logger$1) {
 	try {
-		const { default: open$1 } = await import("./open-PBXRGS4R-BtaaKU2N.mjs");
+		const { default: open$1 } = await import("./open-PBXRGS4R-rCTko7Ic.mjs");
 		(await open$1(url2)).on("error", (err) => {
 			handleBrowserOpenError$1(url2, err, logger$1);
 		});
@@ -44903,6 +45009,31 @@ ${url2}`);
 	logger$1.debug(err instanceof Error ? err.stack ?? String(err) : String(err));
 }
 __name$5(handleBrowserOpenError$1, "handleBrowserOpenError");
+function writeOutput$1(entry) {
+	if (outputFilePath$1 === void 0) outputFilePath$1 = getOutputFilePath$1();
+	if (outputFilePath$1 !== null) {
+		mkdirSync(dirname(outputFilePath$1), { recursive: true });
+		const entryJSON = JSON.stringify({
+			...entry,
+			timestamp: (/* @__PURE__ */ new Date()).toISOString()
+		});
+		appendFileSync(outputFilePath$1, entryJSON + "\n");
+	}
+}
+__name$5(writeOutput$1, "writeOutput");
+function clearOutputFilePath$1() {
+	outputFilePath$1 = void 0;
+}
+__name$5(clearOutputFilePath$1, "clearOutputFilePath");
+var outputFilePath$1 = void 0;
+function getOutputFilePath$1() {
+	const outputFilePathFromEnv = getOutputFilePathFromEnv$1();
+	if (outputFilePathFromEnv) return outputFilePathFromEnv;
+	const outputFileDirectoryFromEnv = getOutputFileDirectoryFromEnv$1();
+	if (outputFileDirectoryFromEnv) return resolve(outputFileDirectoryFromEnv, `wrangler-output-${(/* @__PURE__ */ new Date()).toISOString().replaceAll(":", "-").replace(".", "_").replace("T", "_").replace("Z", "")}-${randomBytes(3).toString("hex")}.json`);
+	return null;
+}
+__name$5(getOutputFilePath$1, "getOutputFilePath");
 var MAX_ATTEMPTS$1 = 3;
 var MAX_RETRY_AFTER_MS$1 = 6e4;
 async function retryOnAPIFailure(action, logger$1, backoff = 0, attempts = MAX_ATTEMPTS$1, abortSignal) {
@@ -49262,7 +49393,7 @@ function assertIsPreview(ctx) {
 }
 
 //#endregion
-//#region ../config/dist/public-CgtRnd2s.mjs
+//#region ../config/dist/public-BwQqexwo.mjs
 const DEFINITION = Symbol.for("@cloudflare/config:definition");
 /**
 * Unwrap an authored config from its value / promise / function shape, awaiting
@@ -53792,6 +53923,7 @@ var __getOwnPropNames = Object.getOwnPropertyNames;
 var __commonJS$2 = (cb, mod$1) => function() {
 	return mod$1 || (0, cb[__getOwnPropNames(cb)[0]])((mod$1 = { exports: {} }).exports, mod$1), mod$1.exports;
 };
+const RemoteBindingDevSchema = strictObject$1({ remote: boolean$1().optional() });
 const AssetsSchema = strictObject$1({
 	htmlHandling: _enum$1([
 		"auto-trailing-slash",
@@ -53808,76 +53940,80 @@ const AssetsSchema = strictObject$1({
 });
 const BrowserBindingSchema = strictObject$1({
 	type: literal$2("browser"),
-	remote: boolean$1().optional()
+	dev: RemoteBindingDevSchema.optional()
 });
 const WorkerBindingSchema = strictObject$1({
 	type: literal$2("worker"),
 	workerName: string$1(),
 	exportName: string$1().optional(),
 	props: record$1(string$1(), unknown$1()).optional(),
-	remote: boolean$1().optional()
+	dev: RemoteBindingDevSchema.optional()
 });
 const D1BindingSchema = strictObject$1({
 	type: literal$2("d1"),
 	name: string$1().optional(),
 	id: string$1().optional(),
-	remote: boolean$1().optional()
+	dev: RemoteBindingDevSchema.optional()
 });
 const KVBindingSchema = strictObject$1({
 	type: literal$2("kv"),
 	id: string$1().optional(),
-	remote: boolean$1().optional()
+	dev: RemoteBindingDevSchema.optional()
 });
 const QueueBindingSchema = strictObject$1({
 	type: literal$2("queue"),
 	name: string$1().optional(),
 	deliveryDelay: number$1().optional(),
-	remote: boolean$1().optional()
+	dev: RemoteBindingDevSchema.optional()
 });
 const R2BindingSchema = strictObject$1({
 	type: literal$2("r2"),
 	name: string$1().optional(),
 	jurisdiction: string$1().optional(),
-	remote: boolean$1().optional()
+	dev: RemoteBindingDevSchema.extend({ experimentalS3Credentials: object$1({
+		accessKeyId: string$1(),
+		secretAccessKey: string$1()
+	}).optional() }).optional()
+});
+const AnalyticsEngineDatasetBindingSchema = strictObject$1({
+	type: literal$2("analytics-engine-dataset"),
+	name: string$1().optional()
 });
 const FlagshipBindingSchema = strictObject$1({
 	type: literal$2("flagship"),
 	id: string$1().optional(),
-	remote: boolean$1().optional()
+	dev: RemoteBindingDevSchema.optional()
 });
 const HyperdriveBindingSchema = strictObject$1({
 	type: literal$2("hyperdrive"),
 	id: string$1(),
-	localConnectionString: string$1().optional()
+	dev: strictObject$1({ connectionString: string$1().optional() }).optional()
 });
 const KnownBindingSchema = discriminatedUnion$1("type", [
 	strictObject$1({
 		type: literal$2("agent-memory"),
 		namespace: string$1(),
-		remote: boolean$1().optional()
+		dev: RemoteBindingDevSchema.optional()
 	}),
 	strictObject$1({
 		type: literal$2("ai"),
-		remote: boolean$1().optional()
+		dev: RemoteBindingDevSchema.optional()
 	}),
 	strictObject$1({
 		type: literal$2("ai-search"),
 		name: string$1(),
-		remote: boolean$1().optional()
+		dev: RemoteBindingDevSchema.optional()
 	}),
 	strictObject$1({
 		type: literal$2("ai-search-namespace"),
 		namespace: string$1(),
-		remote: boolean$1().optional()
-	}),
-	strictObject$1({
-		type: literal$2("analytics-engine-dataset"),
-		name: string$1().optional()
+		dev: RemoteBindingDevSchema.optional()
 	}),
+	AnalyticsEngineDatasetBindingSchema,
 	strictObject$1({
 		type: literal$2("artifacts"),
 		namespace: string$1(),
-		remote: boolean$1().optional()
+		dev: RemoteBindingDevSchema.optional()
 	}),
 	strictObject$1({ type: literal$2("assets") }),
 	BrowserBindingSchema,
@@ -53889,7 +54025,7 @@ const KnownBindingSchema = discriminatedUnion$1("type", [
 			workerName: string$1(),
 			parameters: array$1(string$1()).optional()
 		}).optional(),
-		remote: boolean$1().optional()
+		dev: RemoteBindingDevSchema.optional()
 	}),
 	strictObject$1({
 		type: literal$2("durable-object"),
@@ -53900,7 +54036,7 @@ const KnownBindingSchema = discriminatedUnion$1("type", [
 	HyperdriveBindingSchema,
 	strictObject$1({
 		type: literal$2("images"),
-		remote: boolean$1().optional()
+		dev: RemoteBindingDevSchema.optional()
 	}),
 	strictObject$1({
 		type: literal$2("json"),
@@ -53913,17 +54049,17 @@ const KnownBindingSchema = discriminatedUnion$1("type", [
 	}),
 	strictObject$1({
 		type: literal$2("media"),
-		remote: boolean$1().optional()
+		dev: RemoteBindingDevSchema.optional()
 	}),
 	strictObject$1({
 		type: literal$2("mtls-certificate"),
 		id: string$1(),
-		remote: boolean$1().optional()
+		dev: RemoteBindingDevSchema.optional()
 	}),
 	strictObject$1({
 		type: literal$2("pipeline"),
 		name: string$1(),
-		remote: boolean$1().optional()
+		dev: RemoteBindingDevSchema.optional()
 	}),
 	QueueBindingSchema,
 	strictObject$1({
@@ -53946,11 +54082,11 @@ const KnownBindingSchema = discriminatedUnion$1("type", [
 		destinationAddress: string$1().optional(),
 		allowedDestinationAddresses: array$1(string$1()).optional(),
 		allowedSenderAddresses: array$1(string$1()).optional(),
-		remote: boolean$1().optional()
-	}),
+		dev: RemoteBindingDevSchema.optional()
+	}).refine((value) => value.destinationAddress === void 0 || value.allowedDestinationAddresses === void 0, { message: "\"send-email\" bindings cannot specify both \"destinationAddress\" and \"allowedDestinationAddresses\"" }),
 	strictObject$1({
 		type: literal$2("stream"),
-		remote: boolean$1().optional()
+		dev: RemoteBindingDevSchema.optional()
 	}),
 	strictObject$1({
 		type: literal$2("text"),
@@ -53959,29 +54095,26 @@ const KnownBindingSchema = discriminatedUnion$1("type", [
 	strictObject$1({
 		type: literal$2("vectorize"),
 		name: string$1(),
-		remote: boolean$1().optional()
+		dev: RemoteBindingDevSchema.optional()
 	}),
 	strictObject$1({ type: literal$2("version-metadata") }),
 	strictObject$1({
 		type: literal$2("vpc-service"),
 		id: string$1(),
-		remote: boolean$1().optional()
+		dev: RemoteBindingDevSchema.optional()
 	}),
 	strictObject$1({
 		type: literal$2("vpc-network"),
 		tunnelId: string$1().optional(),
 		networkId: string$1().optional(),
-		remote: boolean$1().optional()
-	}).superRefine((value, ctx) => {
-		const hasTunnel = value.tunnelId !== void 0;
-		if (hasTunnel === (value.networkId !== void 0)) ctx.addIssue({
-			code: "custom",
-			message: hasTunnel ? `"vpc-network" bindings must specify exactly one of "tunnelId" or "networkId", not both` : `"vpc-network" bindings must specify either "tunnelId" or "networkId"`
-		});
-	}),
+		dev: RemoteBindingDevSchema.optional()
+	}).refine((value) => value.tunnelId !== void 0 !== (value.networkId !== void 0), { error: ({ input }) => {
+		const value = input;
+		return value.tunnelId !== void 0 && value.networkId !== void 0 ? `"vpc-network" bindings must specify exactly one of "tunnelId" or "networkId", not both` : `"vpc-network" bindings must specify either "tunnelId" or "networkId"`;
+	} }),
 	strictObject$1({
 		type: literal$2("web-search"),
-		remote: boolean$1().optional()
+		dev: RemoteBindingDevSchema.optional()
 	}),
 	WorkerBindingSchema,
 	strictObject$1({ type: literal$2("worker-loader") })
@@ -54153,6 +54286,12 @@ const TriggerSchema = discriminatedUnion$1("type", [
 	strictObject$1({
 		type: literal$2("scheduled"),
 		schedule: string$1()
+	}),
+	strictObject$1({
+		type: literal$2("connect"),
+		protocol: _enum$1(["tcp"]),
+		port: number$1(),
+		address: string$1().optional()
 	})
 ]);
 const UnsafeSchema = strictObject$1({
@@ -54199,30 +54338,39 @@ const BaseWorkerSchema = strictObject$1({
 */
 const InputWorkerSchema = BaseWorkerSchema.extend({ entrypoint: union$1([string$1(), strictObject$1({ default: string$1() })]).transform((value) => typeof value === "string" ? value : value.default).optional() });
 /**
-* Settings schema — validates the named `settings` export of a
+* Input settings schema — validates the named `settings` export of a
 * `cloudflare.config.ts`. Holds account/deployment settings shared by the other exports.
 */
-const SettingsSchema = strictObject$1({
+const InputSettingsSchema = strictObject$1({
 	type: literal$2("settings"),
 	accountId: string$1().optional(),
 	complianceRegion: _enum$1(["public", "fedramp-high"]).optional()
 });
 /**
-* Discriminated union of the config kinds a single export may resolve to.
+* Output settings schema — the shape of the top-level `config.json` in the
+* Build Output Specification. Adds the `mode` the build was produced in.
 */
-const ConfigExportSchema = discriminatedUnion$1("type", [InputWorkerSchema, SettingsSchema]);
+const OutputSettingsSchema = InputSettingsSchema.extend({ mode: string$1().optional() });
 const SETTINGS_EXPORT_NAME = "settings";
-/**
-* Schema for the resolved config exports, keyed by export
-* name. Each value is discriminated on its `type` field. Reserves the
-* `settings` export name exclusively for settings configs: a `settings`
-* config must live on the `settings` export, and the `settings` export
-* may only hold a `settings` config.
-*/
-const ConfigExportsSchema = record$1(string$1(), ConfigExportSchema).check((ctx) => {
+const SUPPORTED_EXPORT_TYPES = new Set(["worker", "settings"]);
+function invalidConfigExportMessage(exportName) {
+	return `The \`${exportName}\` export is not a supported export type. Move constants, helper functions, and other unsupported exports to a separate module.`;
+}
+const ConfigExportsTypeSchema = record$1(string$1(), unknown$1()).check((ctx) => {
 	for (const [key, value] of Object.entries(ctx.value)) {
+		const isObject$5 = typeof value === "object" && value !== null;
+		const type = isObject$5 && "type" in value ? value.type : void 0;
+		if (typeof type !== "string" || !SUPPORTED_EXPORT_TYPES.has(type)) {
+			ctx.issues.push({
+				code: "custom",
+				input: value,
+				path: isObject$5 ? [key, "type"] : [key],
+				message: invalidConfigExportMessage(key)
+			});
+			continue;
+		}
 		const isSettingsName = key === SETTINGS_EXPORT_NAME;
-		const isSettingsType = value.type === "settings";
+		const isSettingsType = type === "settings";
 		if (isSettingsType && !isSettingsName) ctx.issues.push({
 			code: "custom",
 			input: value,
@@ -54233,10 +54381,19 @@ const ConfigExportsSchema = record$1(string$1(), ConfigExportSchema).check((ctx)
 			code: "custom",
 			input: value,
 			path: [key],
-			message: `The \`${SETTINGS_EXPORT_NAME}\` export is reserved for a \`settings\` config; found a \`${value.type}\` config.`
+			message: `The \`${SETTINGS_EXPORT_NAME}\` export is reserved for a \`settings\` config; found a \`${type}\` config.`
 		});
 	}
 });
+const ConfigExportsObjectSchema = object$1({ settings: InputSettingsSchema.optional() }).catchall(InputWorkerSchema);
+/**
+* Schema for the resolved config exports, keyed by export
+* name. Each value is discriminated on its `type` field. Reserves the
+* `settings` export name exclusively for settings configs: a `settings`
+* config must live on the `settings` export, and the `settings` export
+* may only hold a `settings` config.
+*/
+const ConfigExportsSchema = ConfigExportsTypeSchema.pipe(ConfigExportsObjectSchema);
 const ModuleTypeSchema = _enum$1([
 	"esm",
 	"cjs",
@@ -54338,43 +54495,43 @@ function hasKnownExportType$1(entry) {
 	return type === "durable-object" || type === "worker";
 }
 __name$4(hasKnownExportType$1, "hasKnownExportType");
-function partitionExports$1(exports$2) {
+function partitionExports$1(exports$1$1) {
 	const partitioned = {
 		"durable-object": {},
 		worker: {}
 	};
-	if (exports$2 === void 0) return partitioned;
-	for (const [name, entry] of Object.entries(exports$2)) {
+	if (exports$1$1 === void 0) return partitioned;
+	for (const [name, entry] of Object.entries(exports$1$1)) {
 		if (!hasKnownExportType$1(entry)) continue;
 		partitioned[entry.type][name] = entry;
 	}
 	return partitioned;
 }
 __name$4(partitionExports$1, "partitionExports");
-function getDurableObjectExports$1(exports$2) {
-	return partitionExports$1(exports$2)["durable-object"];
+function getDurableObjectExports$1(exports$1$1) {
+	return partitionExports$1(exports$1$1)["durable-object"];
 }
 __name$4(getDurableObjectExports$1, "getDurableObjectExports");
-function hasDurableObjectExports$1(exports$2) {
-	return Object.keys(getDurableObjectExports$1(exports$2)).length > 0;
+function hasDurableObjectExports$1(exports$1$1) {
+	return Object.keys(getDurableObjectExports$1(exports$1$1)).length > 0;
 }
 __name$4(hasDurableObjectExports$1, "hasDurableObjectExports");
-function getContainerNameToClassNameMap$1(exports$2) {
+function getContainerNameToClassNameMap$1(exports$1$1) {
 	const containerNameToClassName = /* @__PURE__ */ new Map();
-	for (const [className, entry] of Object.entries(getDurableObjectExports$1(exports$2))) if ("container" in entry && typeof entry.container === "string" && !containerNameToClassName.has(entry.container)) containerNameToClassName.set(entry.container, className);
+	for (const [className, entry] of Object.entries(getDurableObjectExports$1(exports$1$1))) if ("container" in entry && typeof entry.container === "string" && !containerNameToClassName.has(entry.container)) containerNameToClassName.set(entry.container, className);
 	return containerNameToClassName;
 }
 __name$4(getContainerNameToClassNameMap$1, "getContainerNameToClassNameMap");
-function resolveContainerClassName$2(container, exports$2) {
+function resolveContainerClassName$2(container, exports$1$1) {
 	if (container.class_name !== void 0) return container.class_name;
 	if (container.name === void 0) return;
-	return getContainerNameToClassNameMap$1(exports$2).get(container.name);
+	return getContainerNameToClassNameMap$1(exports$1$1).get(container.name);
 }
 __name$4(resolveContainerClassName$2, "resolveContainerClassName");
-function getContainerDurableObjectClassNames$1(containers, exports$2) {
+function getContainerDurableObjectClassNames$1(containers, exports$1$1) {
 	const classNames = /* @__PURE__ */ new Set();
 	for (const container of containers ?? []) {
-		const className = resolveContainerClassName$2(container, exports$2);
+		const className = resolveContainerClassName$2(container, exports$1$1);
 		if (className !== void 0) classNames.add(className);
 	}
 	return classNames;
@@ -56965,27 +57122,27 @@ function convertBindingsAndAssets(config$3, result) {
 				agentMemory.push(omitUndefined({
 					binding: name,
 					namespace: binding.namespace,
-					remote: binding.remote
+					remote: binding.dev?.remote
 				}));
 				break;
 			case "ai":
 				result.ai = omitUndefined({
 					binding: name,
-					remote: binding.remote
+					remote: binding.dev?.remote
 				});
 				break;
 			case "ai-search":
 				aiSearch.push(omitUndefined({
 					binding: name,
 					instance_name: binding.name,
-					remote: binding.remote
+					remote: binding.dev?.remote
 				}));
 				break;
 			case "ai-search-namespace":
 				aiSearchNamespaces.push(omitUndefined({
 					binding: name,
 					namespace: binding.namespace,
-					remote: binding.remote
+					remote: binding.dev?.remote
 				}));
 				break;
 			case "analytics-engine-dataset":
@@ -56998,7 +57155,7 @@ function convertBindingsAndAssets(config$3, result) {
 				artifacts.push(omitUndefined({
 					binding: name,
 					namespace: binding.namespace,
-					remote: binding.remote
+					remote: binding.dev?.remote
 				}));
 				break;
 			case "assets":
@@ -57007,7 +57164,7 @@ function convertBindingsAndAssets(config$3, result) {
 			case "browser":
 				result.browser = omitUndefined({
 					binding: name,
-					remote: binding.remote
+					remote: binding.dev?.remote
 				});
 				break;
 			case "d1":
@@ -57015,7 +57172,7 @@ function convertBindingsAndAssets(config$3, result) {
 					binding: name,
 					database_id: binding.id,
 					database_name: binding.name,
-					remote: binding.remote
+					remote: binding.dev?.remote
 				}));
 				break;
 			case "dispatch-namespace": {
@@ -57027,7 +57184,7 @@ function convertBindingsAndAssets(config$3, result) {
 					service: binding.outbound.workerName,
 					parameters: binding.outbound.parameters
 				});
-				if (binding.remote !== void 0) entry.remote = binding.remote;
+				if (binding.dev?.remote !== void 0) entry.remote = binding.dev.remote;
 				dispatchNamespaces.push(entry);
 				break;
 			}
@@ -57042,20 +57199,20 @@ function convertBindingsAndAssets(config$3, result) {
 				flagship.push(omitUndefined({
 					binding: name,
 					app_id: binding.id,
-					remote: binding.remote
+					remote: binding.dev?.remote
 				}));
 				break;
 			case "hyperdrive":
 				hyperdrive.push(omitUndefined({
 					binding: name,
 					id: binding.id,
-					localConnectionString: binding.localConnectionString
+					localConnectionString: binding.dev?.connectionString
 				}));
 				break;
 			case "images":
 				result.images = omitUndefined({
 					binding: name,
-					remote: binding.remote
+					remote: binding.dev?.remote
 				});
 				break;
 			case "json":
@@ -57065,7 +57222,7 @@ function convertBindingsAndAssets(config$3, result) {
 				kvNamespaces.push(omitUndefined({
 					binding: name,
 					id: binding.id,
-					remote: binding.remote
+					remote: binding.dev?.remote
 				}));
 				break;
 			case "logfwdr":
@@ -57077,21 +57234,21 @@ function convertBindingsAndAssets(config$3, result) {
 			case "media":
 				result.media = omitUndefined({
 					binding: name,
-					remote: binding.remote
+					remote: binding.dev?.remote
 				});
 				break;
 			case "mtls-certificate":
 				mtlsCertificates.push(omitUndefined({
 					binding: name,
 					certificate_id: binding.id,
-					remote: binding.remote
+					remote: binding.dev?.remote
 				}));
 				break;
 			case "pipeline":
 				pipelines.push(omitUndefined({
 					binding: name,
 					stream: binding.name,
-					remote: binding.remote
+					remote: binding.dev?.remote
 				}));
 				break;
 			case "queue":
@@ -57099,7 +57256,7 @@ function convertBindingsAndAssets(config$3, result) {
 					binding: name,
 					queue: binding.name,
 					delivery_delay: binding.deliveryDelay,
-					remote: binding.remote
+					remote: binding.dev?.remote
 				}));
 				break;
 			case "rate-limit":
@@ -57109,14 +57266,17 @@ function convertBindingsAndAssets(config$3, result) {
 					simple: binding.simple
 				});
 				break;
-			case "r2":
+			case "r2": {
+				const experimentalS3Credentials = binding.dev?.experimentalS3Credentials;
 				r2Buckets.push(omitUndefined({
 					binding: name,
 					bucket_name: binding.name,
 					jurisdiction: binding.jurisdiction,
-					remote: binding.remote
+					remote: binding.dev?.remote,
+					local_dev: experimentalS3Credentials === void 0 ? void 0 : { experimental_s3_credentials: experimentalS3Credentials }
 				}));
 				break;
+			}
 			case "secret":
 				secretsRequired.push(name);
 				break;
@@ -57133,13 +57293,13 @@ function convertBindingsAndAssets(config$3, result) {
 					destination_address: binding.destinationAddress,
 					allowed_destination_addresses: binding.allowedDestinationAddresses,
 					allowed_sender_addresses: binding.allowedSenderAddresses,
-					remote: binding.remote
+					remote: binding.dev?.remote
 				}));
 				break;
 			case "stream":
 				result.stream = omitUndefined({
 					binding: name,
-					remote: binding.remote
+					remote: binding.dev?.remote
 				});
 				break;
 			case "text":
@@ -57149,7 +57309,7 @@ function convertBindingsAndAssets(config$3, result) {
 				vectorize.push(omitUndefined({
 					binding: name,
 					index_name: binding.name,
-					remote: binding.remote
+					remote: binding.dev?.remote
 				}));
 				break;
 			case "version-metadata":
@@ -57159,25 +57319,25 @@ function convertBindingsAndAssets(config$3, result) {
 				vpcServices.push(omitUndefined({
 					binding: name,
 					service_id: binding.id,
-					remote: binding.remote
+					remote: binding.dev?.remote
 				}));
 				break;
 			case "vpc-network":
 				if (binding.tunnelId !== void 0) vpcNetworks.push(omitUndefined({
 					binding: name,
 					tunnel_id: binding.tunnelId,
-					remote: binding.remote
+					remote: binding.dev?.remote
 				}));
 				else if (binding.networkId !== void 0) vpcNetworks.push(omitUndefined({
 					binding: name,
 					network_id: binding.networkId,
-					remote: binding.remote
+					remote: binding.dev?.remote
 				}));
 				break;
 			case "web-search":
 				result.websearch = omitUndefined({
 					binding: name,
-					remote: binding.remote
+					remote: binding.dev?.remote
 				});
 				break;
 			case "worker":
@@ -57186,7 +57346,7 @@ function convertBindingsAndAssets(config$3, result) {
 					service: binding.workerName,
 					entrypoint: binding.exportName,
 					props: binding.props,
-					remote: binding.remote
+					remote: binding.dev?.remote
 				}));
 				break;
 			case "worker-loader":
@@ -57300,6 +57460,7 @@ function convertTriggers(config$3, result) {
 	const crons = [];
 	const routes = result.routes ? [...result.routes] : [];
 	const queueConsumers = result.queues?.consumers ? [...result.queues.consumers] : [];
+	const connectHandlers = result.connect ? [...result.connect] : [];
 	let addresses;
 	for (const trigger of triggers$1) switch (trigger.type) {
 		case "email":
@@ -57332,6 +57493,13 @@ function convertTriggers(config$3, result) {
 				visibility_timeout_ms: trigger.visibilityTimeoutMs
 			}));
 			break;
+		case "connect":
+			connectHandlers.push(omitUndefined({
+				protocol: trigger.protocol,
+				port: trigger.port,
+				address: trigger.address
+			}));
+			break;
 	}
 	if (crons.length) result.triggers = { crons };
 	if (routes.length) result.routes = routes;
@@ -57339,6 +57507,7 @@ function convertTriggers(config$3, result) {
 		...result.queues ?? {},
 		consumers: queueConsumers
 	};
+	if (connectHandlers.length) result.connect = connectHandlers;
 	if (addresses !== void 0) result.addresses = addresses;
 }
 function convertDomains(config$3, result) {
@@ -82520,17 +82689,17 @@ var require_command_exists$2 = __commonJS({ "../../node_modules/.pnpm/command-ex
 	}, "cleanInput");
 	if (isUsingWindows$1) cleanInput$1 = /* @__PURE__ */ __name$3(function(s) {
 		if (/[\\]/.test(s)) {
-			var dirname3 = "\"" + path6.dirname(s) + "\"";
+			var dirname4 = "\"" + path6.dirname(s) + "\"";
 			var basename2 = "\"" + path6.basename(s) + "\"";
-			return dirname3 + ":" + basename2;
+			return dirname4 + ":" + basename2;
 		}
 		return "\"" + s + "\"";
 	}, "cleanInput");
 	module$1.exports = /* @__PURE__ */ __name$3(function commandExists(commandName, callback$1) {
 		var cleanedCommandName = cleanInput$1(commandName);
-		if (!callback$1 && typeof Promise !== "undefined") return new Promise(function(resolve2, reject) {
+		if (!callback$1 && typeof Promise !== "undefined") return new Promise(function(resolve3, reject) {
 			commandExists(commandName, function(error51, output) {
-				if (output) resolve2(commandName);
+				if (output) resolve3(commandName);
 				else reject(error51);
 			});
 		});
@@ -83256,7 +83425,7 @@ var require_update_check = __commonJS({ "../../node_modules/.pnpm/update-check@1
 			lastUpdate
 		}), "utf8");
 	}, "updateCache");
-	var loadPackage = /* @__PURE__ */ __name$3((url2, authInfo) => new Promise((resolve2, reject) => {
+	var loadPackage = /* @__PURE__ */ __name$3((url2, authInfo) => new Promise((resolve3, reject) => {
 		const options = {
 			host: url2.hostname,
 			path: url2.pathname,
@@ -83282,7 +83451,7 @@ var require_update_check = __commonJS({ "../../node_modules/.pnpm/update-check@1
 			});
 			response.on("end", () => {
 				try {
-					resolve2(JSON.parse(rawData));
+					resolve3(JSON.parse(rawData));
 				} catch (e2) {
 					reject(e2);
 				}
@@ -83383,6 +83552,7 @@ var defaultWranglerConfig = {
 		producers: [],
 		consumers: []
 	},
+	connect: [],
 	r2_buckets: [],
 	d1_databases: [],
 	vectorize: [],
@@ -97296,8 +97466,8 @@ getBooleanEnvironmentVariableFactory$1({
 	variableName: "WRANGLER_LOG_SANITIZE",
 	defaultValue: true
 });
-getEnvironmentVariableFactory$1({ variableName: "WRANGLER_OUTPUT_FILE_DIRECTORY" });
-getEnvironmentVariableFactory$1({ variableName: "WRANGLER_OUTPUT_FILE_PATH" });
+var getOutputFileDirectoryFromEnv = getEnvironmentVariableFactory$1({ variableName: "WRANGLER_OUTPUT_FILE_DIRECTORY" });
+var getOutputFilePathFromEnv = getEnvironmentVariableFactory$1({ variableName: "WRANGLER_OUTPUT_FILE_PATH" });
 getEnvironmentVariableFactory$1({ variableName: "WRANGLER_CI_MATCH_TAG" });
 var getCIOverrideName = getEnvironmentVariableFactory$1({ variableName: "WRANGLER_CI_OVERRIDE_NAME" });
 getEnvironmentVariableFactory$1({ variableName: "WRANGLER_CI_OVERRIDE_NETWORK_MODE_HOST" });
@@ -98175,6 +98345,7 @@ function normalizeAndValidateEnvironment(diagnostics, configPath, rawEnv, isDisp
 			producers: [],
 			consumers: []
 		}),
+		connect: notInheritable(diagnostics, topLevelEnv, rawConfig, rawEnv, envName, "connect", validateConnectHandlers(envName), []),
 		r2_buckets: notInheritable(diagnostics, topLevelEnv, rawConfig, rawEnv, envName, "r2_buckets", validateBindingArray(envName, validateR2Binding), []),
 		d1_databases: notInheritable(diagnostics, topLevelEnv, rawConfig, rawEnv, envName, "d1_databases", validateBindingArray(envName, validateD1Binding), []),
 		vectorize: notInheritable(diagnostics, topLevelEnv, rawConfig, rawEnv, envName, "vectorize", validateBindingArray(envName, validateVectorizeBinding), []),
@@ -98217,7 +98388,7 @@ function normalizeAndValidateEnvironment(diagnostics, configPath, rawEnv, isDisp
 		cache: inheritable(diagnostics, topLevelEnv, rawEnv, "cache", validateCache, void 0),
 		compliance_region: inheritable(diagnostics, topLevelEnv, rawEnv, "compliance_region", isOneOf("public", "fedramp_high"), void 0),
 		python_modules: inheritable(diagnostics, topLevelEnv, rawEnv, "python_modules", validatePythonModules, { exclude: ["**/*.pyc"] }),
-		previews: inheritable(diagnostics, topLevelEnv, rawEnv, "previews", validatePreviewsConfig(envName), void 0)
+		previews: inheritable(diagnostics, topLevelEnv, rawEnv, "previews", validatePreviewsConfig(envName, configPath), void 0)
 	};
 	warnIfDurableObjectsHaveNoLifecycleConfig(diagnostics, environment.durable_objects, environment.migrations, environment.exports, configPath);
 	errorIfMigrationsAndExportsBothSet(diagnostics, environment.migrations, environment.exports);
@@ -98499,6 +98670,14 @@ var validateDurableObjectBinding = /* @__PURE__ */ __name$3((diagnostics, field,
 	return isValid;
 }, "validateDurableObjectBinding");
 var workflowNameFormatMessage = `Workflow names must be 1-64 characters long, start with a letter, number, or underscore, and may only contain letters, numbers, underscores, or hyphens.`;
+function validateWorkflowRetentionValue(diagnostics, field, key, value) {
+	const isValidNumber = typeof value === "number" && Number.isInteger(value) && value > 0;
+	const isValidString = typeof value === "string" && value.length > 0;
+	if (isValidNumber || isValidString) return true;
+	diagnostics.errors.push(`"${field}" bindings "default_retention.${key}" field must be a positive integer of milliseconds or a duration string such as "3 days", but got ${JSON.stringify(value)}.`);
+	return false;
+}
+__name$3(validateWorkflowRetentionValue, "validateWorkflowRetentionValue");
 var validateWorkflowBinding = /* @__PURE__ */ __name$3((diagnostics, field, value) => {
 	if (typeof value !== "object" || value === null) {
 		diagnostics.errors.push(`"workflows" bindings should be objects, but got ${JSON.stringify(value)}`);
@@ -98524,10 +98703,6 @@ var validateWorkflowBinding = /* @__PURE__ */ __name$3((diagnostics, field, valu
 		diagnostics.errors.push(`"${field}" bindings should, optionally, have a string "script_name" field but got ${JSON.stringify(value)}.`);
 		isValid = false;
 	}
-	if (!isOptionalProperty(value, "remote", "boolean")) {
-		diagnostics.errors.push(`"${field}" bindings should, optionally, have a boolean "remote" field but got ${JSON.stringify(value)}.`);
-		isValid = false;
-	}
 	if (hasProperty(value, "schedules") && value.schedules !== void 0) if (typeof value.schedules === "string") {
 		if (value.schedules.length === 0) {
 			diagnostics.errors.push(`"${field}" bindings "schedules" field must not be an empty string.`);
@@ -98561,14 +98736,22 @@ var validateWorkflowBinding = /* @__PURE__ */ __name$3((diagnostics, field, valu
 		}
 		validateAdditionalProperties(diagnostics, `${field}.limits`, Object.keys(limits), ["steps"]);
 	}
+	if (hasProperty(value, "default_retention") && value.default_retention !== void 0) if (typeof value.default_retention !== "object" || value.default_retention === null || Array.isArray(value.default_retention)) {
+		diagnostics.errors.push(`"${field}" bindings should, optionally, have an object "default_retention" field but got ${JSON.stringify(value)}.`);
+		isValid = false;
+	} else {
+		const defaultRetention = value.default_retention;
+		for (const key of ["success_retention", "error_retention"]) if (defaultRetention[key] !== void 0 && !validateWorkflowRetentionValue(diagnostics, field, key, defaultRetention[key])) isValid = false;
+		validateAdditionalProperties(diagnostics, `${field}.default_retention`, Object.keys(defaultRetention), ["success_retention", "error_retention"]);
+	}
 	validateAdditionalProperties(diagnostics, field, Object.keys(value), [
 		"binding",
 		"name",
 		"class_name",
 		"script_name",
-		"remote",
 		"limits",
-		"schedules"
+		"schedules",
+		"default_retention"
 	]);
 	return isValid;
 }, "validateWorkflowBinding");
@@ -98761,7 +98944,36 @@ function validateSshPublicKeys(diagnostics, field, value, nameRequired) {
 	}
 }
 __name$3(validateSshPublicKeys, "validateSshPublicKeys");
-function validateContainerApp(envName, topLevelName, configPath) {
+function validatePreviewsContainers(envName, configPath) {
+	const innerValidator = validateContainerApp(envName, void 0, configPath, { generateDefaultName: false });
+	return (diagnostics, field, value, config2) => {
+		if (Array.isArray(value)) {
+			const nameFields = [...value.entries()].filter(([, entry]) => entry && typeof entry === "object" && "name" in entry).map(([index]) => `"${field}[${index}].name"`);
+			if (nameFields.length > 0) {
+				diagnostics.errors.push(`${nameFields.join(", ")} cannot be set. A preview container's application name is generated from the worker name, preview slug, and Durable Object class name, so that separate previews of the same Worker do not collide. Remove it and identify the container with "class_name".`);
+				return false;
+			}
+			const seenClasses = /* @__PURE__ */ new Set();
+			const duplicateClasses = /* @__PURE__ */ new Set();
+			for (const entry of value) {
+				if (!entry || typeof entry !== "object") continue;
+				if (typeof entry.class_name === "string") {
+					if (seenClasses.has(entry.class_name)) duplicateClasses.add(entry.class_name);
+					seenClasses.add(entry.class_name);
+				}
+			}
+			if (duplicateClasses.size > 0) {
+				const classList = [...duplicateClasses].map((className) => `"${className}"`).join(", ");
+				diagnostics.errors.push(`"${field}" declares more than one container for the Durable Object class ${classList}; each Durable Object class may appear at most once.`);
+				return false;
+			}
+		}
+		return innerValidator(diagnostics, field, value, config2);
+	};
+}
+__name$3(validatePreviewsContainers, "validatePreviewsContainers");
+function validateContainerApp(envName, topLevelName, configPath, options = {}) {
+	const { generateDefaultName = true } = options;
 	return (diagnostics, field, value, config2) => {
 		if (!value) return true;
 		if (!Array.isArray(value)) {
@@ -98771,7 +98983,7 @@ function validateContainerApp(envName, topLevelName, configPath) {
 		for (const containerAppOptional of value) {
 			validateOptionalProperty(diagnostics, field, "class_name", containerAppOptional.class_name, "string");
 			validateOptionalProperty(diagnostics, field, "name", containerAppOptional.name, "string");
-			if (!containerAppOptional.name) if (containerAppOptional.class_name === void 0) diagnostics.errors.push(`"containers.name" is required when "containers.class_name" is not defined, because there is no class name to derive a default name from. Either name this container and reference it from a Durable Object's \`exports\` entry, or set "containers.class_name".`);
+			if (generateDefaultName && !containerAppOptional.name) if (containerAppOptional.class_name === void 0) diagnostics.errors.push(`"containers.name" is required when "containers.class_name" is not defined, because there is no class name to derive a default name from. Either name this container and reference it from a Durable Object's \`exports\` entry, or set "containers.class_name".`);
 			else if (!topLevelName) diagnostics.errors.push(`Must have either a top level "name" and "containers.class_name" field defined, or have field "containers.name" defined.`);
 			else {
 				let name = `${topLevelName}-${containerAppOptional.class_name}`;
@@ -99586,6 +99798,63 @@ var validateConsumer = /* @__PURE__ */ __name$3((diagnostics, field, value, _con
 	}
 	return isValid;
 }, "validateConsumer");
+function validateConnectHandlers(envName) {
+	return (diagnostics, field, value, config2) => {
+		if (value === void 0) return true;
+		const fieldPath = config2 === void 0 ? `${field}` : `env.${envName}.${field}`;
+		if (!Array.isArray(value)) {
+			diagnostics.errors.push(`The field "${fieldPath}" should be an array but got ${JSON.stringify(value)}.`);
+			return false;
+		}
+		let isValid = true;
+		for (let i$1 = 0; i$1 < value.length; i$1++) if (!validateConnectHandler(diagnostics, `${fieldPath}[${i$1}]`, value[i$1], config2)) isValid = false;
+		const firstIndexByKey = /* @__PURE__ */ new Map();
+		for (let i$1 = 0; i$1 < value.length; i$1++) {
+			const handler = value[i$1];
+			if (typeof handler !== "object" || handler === null || typeof handler.port !== "number" || typeof handler.protocol !== "string") continue;
+			const { protocol, port } = handler;
+			const key = `${protocol}:${port}`;
+			const firstIndex = firstIndexByKey.get(key);
+			if (firstIndex !== void 0) {
+				diagnostics.errors.push(`"${fieldPath}[${i$1}]" has the same "protocol" (${protocol}) and "port" (${port}) as "${fieldPath}[${firstIndex}]". Each entry in "connect" must use a unique protocol/port combination.`);
+				isValid = false;
+			} else firstIndexByKey.set(key, i$1);
+		}
+		return isValid;
+	};
+}
+__name$3(validateConnectHandlers, "validateConnectHandlers");
+var validateConnectHandler = /* @__PURE__ */ __name$3((diagnostics, field, value) => {
+	if (typeof value !== "object" || value === null) {
+		diagnostics.errors.push(`"${field}" should be an object, but got ${JSON.stringify(value)}`);
+		return false;
+	}
+	let isValid = true;
+	if (!validateAdditionalProperties(diagnostics, field, Object.keys(value), [
+		"protocol",
+		"port",
+		"address"
+	])) isValid = false;
+	if ("protocol" in value && value.protocol !== "tcp") {
+		diagnostics.errors.push(`"${field}" should have a "protocol" field of "tcp" but got ${JSON.stringify(value.protocol)}.`);
+		isValid = false;
+	} else if (!("protocol" in value)) {
+		diagnostics.errors.push(`"${field}" should have a "protocol" field of "tcp" but got ${JSON.stringify(value)}.`);
+		isValid = false;
+	}
+	if (!isRequiredProperty(value, "port", "number")) {
+		diagnostics.errors.push(`"${field}" should have a number "port" field but got ${JSON.stringify(value)}.`);
+		isValid = false;
+	} else if (!Number.isInteger(value.port) || value.port < 1 || value.port > 65535) {
+		diagnostics.errors.push(`"${field}" should have an integer "port" field between 1 and 65535 but got ${JSON.stringify(value)}.`);
+		isValid = false;
+	}
+	if (!isOptionalProperty(value, "address", "string")) {
+		diagnostics.errors.push(`"${field}" should, optionally, have a string "address" field but got ${JSON.stringify(value)}.`);
+		isValid = false;
+	}
+	return isValid;
+}, "validateConnectHandler");
 var validateCompatibilityDate = /* @__PURE__ */ __name$3((diagnostics, field, value) => {
 	if (value === void 0) return true;
 	if (typeof value !== "string") {
@@ -99767,7 +100036,7 @@ function normalizeAndValidateLimits(diagnostics, topLevelEnv, rawEnv) {
 	return inheritable(diagnostics, topLevelEnv, rawEnv, "limits", () => true, void 0);
 }
 __name$3(normalizeAndValidateLimits, "normalizeAndValidateLimits");
-var validatePreviewsConfig = /* @__PURE__ */ __name$3((envName) => (diagnostics, field, value) => {
+var validatePreviewsConfig = /* @__PURE__ */ __name$3((envName, configPath) => (diagnostics, field, value) => {
 	if (value === void 0) return true;
 	if (typeof value !== "object" || value === null || Array.isArray(value)) {
 		diagnostics.errors.push(`The field "${field}" should be an object but got ${JSON.stringify(value)}.`);
@@ -99808,6 +100077,7 @@ var validatePreviewsConfig = /* @__PURE__ */ __name$3((envName) => (diagnostics,
 		"ratelimits",
 		"vpc_services",
 		"version_metadata",
+		"containers",
 		"logpush",
 		"observability",
 		"limits",
@@ -99845,6 +100115,7 @@ var validatePreviewsConfig = /* @__PURE__ */ __name$3((envName) => (diagnostics,
 	isValid = validateBindingArray(envName, validateRateLimitBinding)(diagnostics, `${field}.ratelimits`, previews.ratelimits, void 0) && isValid;
 	isValid = validateBindingArray(envName, validateVpcServiceBinding)(diagnostics, `${field}.vpc_services`, previews.vpc_services, void 0) && isValid;
 	if (previews.version_metadata !== void 0) isValid = validateVersionMetadataBinding(envName)(diagnostics, `${field}.version_metadata`, previews.version_metadata, void 0) && isValid;
+	if (previews.containers !== void 0) isValid = validatePreviewsContainers(envName, configPath)(diagnostics, `${field}.containers`, previews.containers, void 0) && isValid;
 	isValid = isBoolean(diagnostics, `${field}.logpush`, previews.logpush, void 0) && isValid;
 	isValid = validateObservability(diagnostics, `${field}.observability`, previews.observability, void 0) && isValid;
 	if (previews.limits) {
@@ -100290,7 +100561,7 @@ var BINDING_LOCAL_SUPPORT = {
 	kv_namespace: "local-and-remote",
 	r2_bucket: "local-and-remote",
 	d1: "local-and-remote",
-	workflow: "local-and-remote",
+	workflow: "local-only",
 	browser: "local-and-remote",
 	images: "local-and-remote",
 	stream: "local-and-remote",
@@ -100405,6 +100676,10 @@ function getPackagePath(packageName, projectPath) {
 	try {
 		return path2__default.dirname(__require$1.resolve(packageName, { paths: [projectPath] }));
 	} catch {}
+	try {
+		const candidate = path2__default.join(projectPath, "node_modules", packageName, "package.json");
+		if (statSync(candidate).isFile()) return path2__default.dirname(candidate);
+	} catch {}
 }
 __name$3(getPackagePath, "getPackagePath");
 function isPackageInstalled(packageName, projectPath) {
@@ -101300,7 +101575,7 @@ function terminateCloudflared(cloudflared) {
 }
 __name$3(terminateCloudflared, "terminateCloudflared");
 function waitForQuickTunnelReady(cloudflared, timeoutMs, options) {
-	return new Promise((resolve2, reject) => {
+	return new Promise((resolve3, reject) => {
 		let resolved = false;
 		let stderrOutput = "";
 		const logger$1 = options?.logger;
@@ -101321,7 +101596,7 @@ function waitForQuickTunnelReady(cloudflared, timeoutMs, options) {
 			if (match && !resolved) {
 				resolved = true;
 				clearTimeout(timeoutId);
-				resolve2({
+				resolve3({
 					mode: "quick",
 					publicUrl: new URL(match[0])
 				});
@@ -101640,7 +101915,7 @@ async function fetchLatestNpmVersion$1(name, version2) {
 __name$3(fetchLatestNpmVersion$1, "fetchLatestNpmVersion");
 async function openInBrowser$1(url2, logger$1) {
 	try {
-		const { default: open$1 } = await import("./open-PBXRGS4R-qOWuyhJy-DF6hl_jp.mjs");
+		const { default: open$1 } = await import("./open-PBXRGS4R-DmJH7r1k-rXrDiJei.mjs");
 		(await open$1(url2)).on("error", (err) => {
 			handleBrowserOpenError(url2, err, logger$1);
 		});
@@ -101659,6 +101934,31 @@ ${url2}`);
 	logger$1.debug(err instanceof Error ? err.stack ?? String(err) : String(err));
 }
 __name$3(handleBrowserOpenError, "handleBrowserOpenError");
+function writeOutput(entry) {
+	if (outputFilePath === void 0) outputFilePath = getOutputFilePath();
+	if (outputFilePath !== null) {
+		mkdirSync(dirname(outputFilePath), { recursive: true });
+		const entryJSON = JSON.stringify({
+			...entry,
+			timestamp: (/* @__PURE__ */ new Date()).toISOString()
+		});
+		appendFileSync(outputFilePath, entryJSON + "\n");
+	}
+}
+__name$3(writeOutput, "writeOutput");
+function clearOutputFilePath() {
+	outputFilePath = void 0;
+}
+__name$3(clearOutputFilePath, "clearOutputFilePath");
+var outputFilePath = void 0;
+function getOutputFilePath() {
+	const outputFilePathFromEnv = getOutputFilePathFromEnv();
+	if (outputFilePathFromEnv) return outputFilePathFromEnv;
+	const outputFileDirectoryFromEnv = getOutputFileDirectoryFromEnv();
+	if (outputFileDirectoryFromEnv) return resolve(outputFileDirectoryFromEnv, `wrangler-output-${(/* @__PURE__ */ new Date()).toISOString().replaceAll(":", "-").replace(".", "_").replace("T", "_").replace("Z", "")}-${randomBytes(3).toString("hex")}.json`);
+	return null;
+}
+__name$3(getOutputFilePath, "getOutputFilePath");
 var MAX_ATTEMPTS = 3;
 var MAX_RETRY_AFTER_MS = 6e4;
 async function retryOnAPIFailure$1(action, logger$1, backoff = 0, attempts = MAX_ATTEMPTS, abortSignal) {
@@ -102180,9 +102480,11 @@ function getBuildOutputDir(root) {
 /**
 * Absolute path to the top-level `config.json` for the current project.
 *
-* This corresponds with the `settings` export in the input `cloudflare.config.ts`.
+* Holds the project-level settings shared by every Worker: those declared by
+* the `settings` export of the input `cloudflare.config.ts`, including the
+* mode the build was produced in.
 */
-function getRootConfigPath(root) {
+function getSettingsConfigPath(root) {
 	return path2.join(getBuildOutputDir(root), BUILD_OUTPUT_VERSION, CONFIG_FILENAME);
 }
 /**
@@ -102267,13 +102569,25 @@ async function writeWorkerConfig(root, parsedConfig, manifest) {
 	await fsp.writeFile(getWorkerConfigPath(root), JSON.stringify(outputConfig));
 }
 /**
-* Write the top-level `config.json` holding shared settings to the Build
-* Output Specification tree.
+* Write the top-level `config.json` to the Build Output Specification tree.
+*
+* Holds the project-level settings shared by every Worker: those declared by
+* the `settings` export, including the `mode`, which is supplied at build time
+* rather than declared. Always written, even when there are no declared
+* settings and no mode: the result then degrades to `{ "type": "settings" }`.
+*
+* `mode` is omitted when undefined, which is the case for Wrangler builds that
+* selected no mode (Vite always resolves one).
 */
-async function writeRootConfig(root, settings) {
-	const configPath = getRootConfigPath(root);
+async function writeSettingsConfig(root, settings, mode) {
+	const outputConfig = {
+		...settings,
+		type: "settings",
+		...mode !== void 0 ? { mode } : {}
+	};
+	const configPath = getSettingsConfigPath(root);
 	await fsp.mkdir(path2.dirname(configPath), { recursive: true });
-	await fsp.writeFile(configPath, JSON.stringify(settings));
+	await fsp.writeFile(configPath, JSON.stringify(outputConfig));
 }
 const BUILD_OUTPUT_ERROR_PREFIX = "Build Output Specification: ";
 /**
@@ -102290,7 +102604,7 @@ var BuildOutputError = class extends Error {
 * Read and validate the Build Output Specification tree at
 * `<root>/.cloudflare/output/v0/`.
 *
-* Reads the optional top-level `config.json` settings, then reads and
+* Reads the optional top-level settings `config.json`, then reads and
 * schema-validates the Worker's `config.json` and resolves its
 * `bundle/` / `assets/` directories.
 *
@@ -102309,12 +102623,13 @@ async function readBuildOutput(root) {
 * Read and schema-validate the Worker's `config.json` and resolve its
 * `bundle/` / `assets/` directories.
 *
+* @returns the Worker, with whichever of its directories exist resolved.
 * @throws {BuildOutputError} if the config is missing, is not valid JSON, or
 * fails schema validation.
 */
 async function readWorker(root) {
 	const configPath = getWorkerConfigPath(root);
-	if (!fs$1.existsSync(configPath)) throw new BuildOutputError(`No Worker config found at ${configPath}.`);
+	if (!fs$1.existsSync(configPath)) throw new BuildOutputError(`no Worker config found at ${configPath}.`);
 	const contents = await fsp.readFile(configPath, "utf-8");
 	const result = OutputWorkerSchema.safeParse(parseJson(contents, configPath));
 	if (!result.success) throw new BuildOutputError(`invalid Worker config at ${configPath}.\n${result.error.message}`);
@@ -102339,18 +102654,22 @@ async function readWorker(root) {
 }
 /**
 * Read and schema-validate the optional top-level `config.json` holding the
-* project-level settings shared by every Worker.
+* project-level settings shared by every Worker, including the mode the build
+* was produced in.
+*
+* Returned whole: consumers that need only the settings the user declared
+* narrow it themselves.
 *
 * @returns the parsed settings, or `undefined` when the file is absent.
 * @throws {BuildOutputError} if the file is not valid JSON or fails schema
 * validation.
 */
 async function readSettings(root) {
-	const configPath = getRootConfigPath(root);
+	const configPath = getSettingsConfigPath(root);
 	if (!fs$1.existsSync(configPath)) return;
 	const contents = await fsp.readFile(configPath, "utf-8");
-	const result = SettingsSchema.safeParse(parseJson(contents, configPath));
-	if (!result.success) throw new BuildOutputError(`invalid root config at ${configPath}.\n${result.error.message}`);
+	const result = OutputSettingsSchema.safeParse(parseJson(contents, configPath));
+	if (!result.success) throw new BuildOutputError(`invalid settings config at ${configPath}.\n${result.error.message}`);
 	return result.data;
 }
 function parseJson(contents, configPath) {
@@ -111414,7 +111733,7 @@ const buildOutputPlugin = createPlugin("build-output", (ctx) => {
 			const workerNewConfig$1 = defaultExport?.type === "worker" ? defaultExport : void 0;
 			assert2(workerNewConfig$1, "Expected a default worker export on assets-only resolved config");
 			await writeWorkerConfig(ctx.resolvedViteConfig.root, workerNewConfig$1);
-			await writeSettingsConfig();
+			await writeSettings();
 			return;
 		}
 		if (ctx.resolvedPluginConfig.type === "workers" && this.environment.name !== ctx.resolvedPluginConfig.entryWorkerEnvironmentName) return;
@@ -111434,14 +111753,20 @@ const buildOutputPlugin = createPlugin("build-output", (ctx) => {
 			mainModule: entryChunk.fileName,
 			modules
 		});
-		await writeSettingsConfig();
+		await writeSettings();
 	} };
-	async function writeSettingsConfig() {
+	/**
+	* Write the top-level `config.json`, recording the settings shared by every
+	* Worker, including the Vite mode the build ran in.
+	*
+	* Written even when there is no `settings` export, so the mode is always
+	* captured.
+	*/
+	async function writeSettings() {
 		if (ctx.resolvedPluginConfig.type === "preview") return;
 		const settingsExport = ctx.resolvedPluginConfig.parsedNewConfig?.settings;
 		const settings = settingsExport?.type === "settings" ? settingsExport : void 0;
-		if (!settings) return;
-		await writeRootConfig(ctx.resolvedViteConfig.root, settings);
+		await writeSettingsConfig(ctx.resolvedViteConfig.root, settings, ctx.resolvedViteConfig.mode);
 	}
 });
 /**
@@ -118136,7 +118461,7 @@ var __name$1 = (target$1, value) => __defProp$1(target$1, "name", {
 });
 
 //#endregion
-//#region ../workers-auth/dist/chunk-LXNXA7SZ.mjs
+//#region ../workers-auth/dist/chunk-LQW53VED.mjs
 var import_undici$2 = require_undici();
 var hasWarnedAboutDeprecatedV1ApiToken = false;
 function readStoredAuthState(options) {
@@ -120620,11 +120945,20 @@ function getInstalledBindingPath(installDir) {
 	return path2__default.join(installDir, "node_modules", "@napi-rs", "keyring");
 }
 __name$1(getInstalledBindingPath, "getInstalledBindingPath");
+function canLoadKeyringBinding(candidate) {
+	try {
+		createRequire(candidate)(candidate);
+		return true;
+	} catch {
+		return false;
+	}
+}
+__name$1(canLoadKeyringBinding, "canLoadKeyringBinding");
 function findKeyringBinding(installDir) {
 	const cached$3 = cachedBindingPathByDir.get(installDir);
 	if (cached$3 !== void 0) return cached$3;
 	const lazy$3 = getInstalledBindingPath(installDir);
-	if (existsSync(path2__default.join(lazy$3, "index.js"))) {
+	if (existsSync(path2__default.join(lazy$3, "index.js")) && canLoadKeyringBinding(lazy$3)) {
 		cachedBindingPathByDir.set(installDir, lazy$3);
 		return lazy$3;
 	}
@@ -120632,7 +120966,7 @@ function findKeyringBinding(installDir) {
 		const r$1 = npmRunner(["root", "-g"]);
 		if (r$1.status === 0) {
 			const global$3 = path2__default.join(r$1.stdout.trim(), "@napi-rs", "keyring");
-			if (existsSync(path2__default.join(global$3, "index.js"))) {
+			if (existsSync(path2__default.join(global$3, "index.js")) && canLoadKeyringBinding(global$3)) {
 				cachedBindingPathByDir.set(installDir, global$3);
 				return global$3;
 			}
@@ -120675,6 +121009,12 @@ ${r$1.stderr?.trim() ?? "(no stderr)"}
 Retry once the underlying issue is fixed, or install the binding globally:
   npm install -g @napi-rs/keyring@${PINNED_KEYRING_VERSION}`, { telemetryMessage: "workers-auth keyring npm install failed" });
 	cachedBindingPathByDir.delete(installDir);
+	if (findKeyringBinding(installDir) === null) throw new UserError(`\`npm\` reported success but the \`@napi-rs/keyring\` native binding still cannot be loaded.
+
+Its platform-specific binary ships as a separate optional package, so a download that was skipped or interrupted leaves the binding unusable.
+
+Retry once the underlying issue is fixed, or install the binding globally:
+  npm install -g @napi-rs/keyring@${PINNED_KEYRING_VERSION}`, { telemetryMessage: "workers-auth keyring install incomplete" });
 }
 __name$1(installKeyringBindingSync, "installKeyringBindingSync");
 var entryFactoryOverride;
@@ -120685,7 +121025,10 @@ __name$1(setKeyringEntryFactory, "setKeyringEntryFactory");
 function resolveKeyringEntryFactory(installDir) {
 	if (entryFactoryOverride !== void 0) return entryFactoryOverride;
 	const bindingPath = findKeyringBinding(installDir);
-	if (bindingPath === null) throw new Error("`@napi-rs/keyring` binding not found. Call `installKeyringBindingSync()` first.");
+	if (bindingPath === null) throw new UserError(`The \`@napi-rs/keyring\` native binding is not available.
+
+Retry the command, or install the binding globally:
+  npm install -g @napi-rs/keyring@${PINNED_KEYRING_VERSION}`, { telemetryMessage: "workers-auth keyring binding not loadable" });
 	const mod$1 = createRequire(bindingPath)(bindingPath);
 	return (service, account) => new mod$1.Entry(service, account);
 }
@@ -120739,7 +121082,7 @@ function probeSecretTool() {
 	if (cachedProbeResult !== void 0) return cachedProbeResult;
 	let result;
 	try {
-		result = runner(["--version"]).status === 0;
+		result = runner(["--version"]).error === void 0;
 	} catch {
 		result = false;
 	}
@@ -121074,7 +121417,7 @@ function scrubEncryptedCredentials(options) {
 __name$1(scrubEncryptedCredentials, "scrubEncryptedCredentials");
 
 //#endregion
-//#region ../workers-auth/dist/chunk-5EWNHNLD.mjs
+//#region ../workers-auth/dist/chunk-YCVYA5LL.mjs
 function createPreferences(getConfigPath) {
 	function getUserPreferencesPath() {
 		return path2__default.resolve(getConfigPath(), "preferences.json");
@@ -121997,6 +122340,8 @@ ${accounts.map((account) => `  \`${redactAccountName ? "(redacted)" : account.na
 	async function requireAuth(config$3) {
 		if (oauthFlow.isTemporaryAllowed()) {
 			if (getCloudflareComplianceRegion(config$3) !== "public") throw new UserError("Temporary accounts aren't available when the compliance region is not set to public.", { telemetryMessage: "user temporary account unavailable in compliance region" });
+			const latchedTemporaryAccount = oauthFlow.getActiveTemporaryAccount();
+			if (latchedTemporaryAccount) return latchedTemporaryAccount.account.id;
 			if (getAPIToken$1()) throw new UserError("You're already authenticated with Cloudflare, so `--temporary` can't be used. Temporary preview accounts are only for unauthenticated use. Either remove `--temporary` to use your existing account, or log out (and unset CLOUDFLARE_API_TOKEN) first.", { telemetryMessage: "user temporary account already authenticated" });
 			const { account: temporaryPreviewAccount, cached: cached$3 } = await oauthFlow.activateTemporaryAccount();
 			logTemporaryPreviewAccount(logger$1, temporaryPreviewAccount, cached$3);
@@ -122635,7 +122980,7 @@ var require_command_exists = /* @__PURE__ */ __commonJS$4({ "../../node_modules/
 }) });
 
 //#endregion
-//#region ../deploy-helpers/dist/chunk-LRKPOFWK.mjs
+//#region ../deploy-helpers/dist/chunk-ZV7SJ2MZ.mjs
 var import_undici$1 = require_undici();
 var import_command_exists = require_command_exists();
 function assertNever$1(_value) {}
@@ -122666,10 +123011,22 @@ function convertConfigToBindings(config$3, options) {
 				break;
 			case "send_email":
 				if (pages) break;
-				for (const { name,...x } of info$1) output[name] = {
-					type: "send_email",
-					...x
-				};
+				for (const { name, destination_address, allowed_destination_addresses, allowed_sender_addresses, remote } of info$1) {
+					const shared = {
+						type: "send_email",
+						allowed_sender_addresses,
+						remote
+					};
+					if (destination_address !== void 0) output[name] = {
+						...shared,
+						destination_address
+					};
+					else if (allowed_destination_addresses !== void 0) output[name] = {
+						...shared,
+						allowed_destination_addresses
+					};
+					else output[name] = shared;
+				}
 				break;
 			case "wasm_modules":
 				if (pages) break;
@@ -123097,16 +123454,20 @@ function createWorkerUploadForm(worker, bindings$1, options) {
 		});
 	});
 	send_email.forEach((emailBinding) => {
-		const destination_address = "destination_address" in emailBinding ? emailBinding.destination_address : void 0;
-		const allowed_destination_addresses = "allowed_destination_addresses" in emailBinding ? emailBinding.allowed_destination_addresses : void 0;
-		const allowed_sender_addresses = "allowed_sender_addresses" in emailBinding ? emailBinding.allowed_sender_addresses : void 0;
-		metadataBindings.push({
+		const shared = {
 			name: emailBinding.name,
 			type: "send_email",
-			destination_address,
-			allowed_destination_addresses,
-			allowed_sender_addresses
+			allowed_sender_addresses: emailBinding.allowed_sender_addresses
+		};
+		if (emailBinding.destination_address !== void 0) metadataBindings.push({
+			...shared,
+			destination_address: emailBinding.destination_address
+		});
+		else if (emailBinding.allowed_destination_addresses !== void 0) metadataBindings.push({
+			...shared,
+			allowed_destination_addresses: emailBinding.allowed_destination_addresses
 		});
+		else metadataBindings.push(shared);
 	});
 	durable_objects.forEach(({ name, class_name, script_name, environment }) => {
 		metadataBindings.push({
@@ -123506,7 +123867,7 @@ __name(createWorkerUploadForm, "createWorkerUploadForm");
 //#endregion
 //#region ../remote-bindings/dist/index.mjs
 var import_undici = require_undici();
-var version$2 = "0.0.13";
+var version$2 = "0.0.15";
 var NoDefaultValueProvided = class extends UserError {
 	constructor() {
 		super("This command cannot be run in a non-interactive context", { telemetryMessage: "remote bindings prompt default missing" });