@cloudflare/vite-plugin 1.53.1 → 1.54.1

package/dist/index.mjs

@@ -43,8 +43,8 @@ import { basename as basename$1, dirname as dirname$1, isAbsolute as isAbsolute$
 import { fileURLToPath as fileURLToPath$1 } from "url";
 import { createRequire as createRequire$1 } from "module";
 
-//#region ../workers-utils/dist/chunk-QKX75RGI.mjs
-var DEFAULT_COMPAT_DATE = "2026-08-20";
+//#region ../workers-utils/dist/chunk-RB2KBB2C.mjs
+var DEFAULT_COMPAT_DATE = "2026-08-26";
 function assertNever(_value) {}
 __name$5(assertNever, "assertNever");
 function mapWorkerMetadataBindings(bindings$1) {
@@ -41745,6 +41745,14 @@ var validateDurableObjectBinding$1 = /* @__PURE__ */ __name$5((diagnostics, fiel
 	return isValid;
 }, "validateDurableObjectBinding");
 var workflowNameFormatMessage$1 = `Workflow names must be 1-64 characters long, start with a letter, number, or underscore, and may only contain letters, numbers, underscores, or hyphens.`;
+function validateWorkflowRetentionValue$1(diagnostics, field, key, value) {
+	const isValidNumber = typeof value === "number" && Number.isInteger(value) && value > 0;
+	const isValidString = typeof value === "string" && value.length > 0;
+	if (isValidNumber || isValidString) return true;
+	diagnostics.errors.push(`"${field}" bindings "default_retention.${key}" field must be a positive integer of milliseconds or a duration string such as "3 days", but got ${JSON.stringify(value)}.`);
+	return false;
+}
+__name$5(validateWorkflowRetentionValue$1, "validateWorkflowRetentionValue");
 var validateWorkflowBinding$1 = /* @__PURE__ */ __name$5((diagnostics, field, value) => {
 	if (typeof value !== "object" || value === null) {
 		diagnostics.errors.push(`"workflows" bindings should be objects, but got ${JSON.stringify(value)}`);
@@ -41803,13 +41811,34 @@ var validateWorkflowBinding$1 = /* @__PURE__ */ __name$5((diagnostics, field, va
 		}
 		validateAdditionalProperties$1(diagnostics, `${field}.limits`, Object.keys(limits), ["steps"]);
 	}
+	if (hasProperty$1(value, "default_retention") && value.default_retention !== void 0) if (typeof value.default_retention !== "object" || value.default_retention === null || Array.isArray(value.default_retention)) {
+		diagnostics.errors.push(`"${field}" bindings should, optionally, have an object "default_retention" field but got ${JSON.stringify(value)}.`);
+		isValid = false;
+	} else {
+		const defaultRetention = value.default_retention;
+		for (const key of ["success_retention", "error_retention"]) if (defaultRetention[key] !== void 0 && !validateWorkflowRetentionValue$1(diagnostics, field, key, defaultRetention[key])) isValid = false;
+		validateAdditionalProperties$1(diagnostics, `${field}.default_retention`, Object.keys(defaultRetention), ["success_retention", "error_retention"]);
+	}
+	if (hasProperty$1(value, "concurrency") && value.concurrency !== void 0) if (typeof value.concurrency !== "object" || value.concurrency === null || Array.isArray(value.concurrency)) {
+		diagnostics.errors.push(`"${field}" bindings should, optionally, have an object "concurrency" field but got ${JSON.stringify(value)}.`);
+		isValid = false;
+	} else {
+		const concurrency = value.concurrency;
+		if (concurrency.limit !== void 0 && (typeof concurrency.limit !== "number" || !Number.isInteger(concurrency.limit) || concurrency.limit < 1)) {
+			diagnostics.errors.push(`"${field}" bindings "concurrency.limit" field must be a positive integer but got ${JSON.stringify(concurrency.limit)}.`);
+			isValid = false;
+		}
+		validateAdditionalProperties$1(diagnostics, `${field}.concurrency`, Object.keys(concurrency), ["limit"]);
+	}
 	validateAdditionalProperties$1(diagnostics, field, Object.keys(value), [
 		"binding",
 		"name",
 		"class_name",
 		"script_name",
 		"limits",
-		"schedules"
+		"concurrency",
+		"schedules",
+		"default_retention"
 	]);
 	return isValid;
 }, "validateWorkflowBinding");
@@ -53906,6 +53935,7 @@ var __getOwnPropNames = Object.getOwnPropertyNames;
 var __commonJS$2 = (cb, mod$1) => function() {
 	return mod$1 || (0, cb[__getOwnPropNames(cb)[0]])((mod$1 = { exports: {} }).exports, mod$1), mod$1.exports;
 };
+const RemoteBindingDevSchema = strictObject$1({ remote: boolean$1().optional() });
 const AssetsSchema = strictObject$1({
 	htmlHandling: _enum$1([
 		"auto-trailing-slash",
@@ -53922,38 +53952,37 @@ const AssetsSchema = strictObject$1({
 });
 const BrowserBindingSchema = strictObject$1({
 	type: literal$2("browser"),
-	remote: boolean$1().optional()
+	dev: RemoteBindingDevSchema.optional()
 });
 const WorkerBindingSchema = strictObject$1({
 	type: literal$2("worker"),
 	workerName: string$1(),
 	exportName: string$1().optional(),
 	props: record$1(string$1(), unknown$1()).optional(),
-	remote: boolean$1().optional()
+	dev: RemoteBindingDevSchema.optional()
 });
 const D1BindingSchema = strictObject$1({
 	type: literal$2("d1"),
 	name: string$1().optional(),
 	id: string$1().optional(),
-	remote: boolean$1().optional()
+	dev: RemoteBindingDevSchema.optional()
 });
 const KVBindingSchema = strictObject$1({
 	type: literal$2("kv"),
 	id: string$1().optional(),
-	remote: boolean$1().optional()
+	dev: RemoteBindingDevSchema.optional()
 });
 const QueueBindingSchema = strictObject$1({
 	type: literal$2("queue"),
 	name: string$1().optional(),
 	deliveryDelay: number$1().optional(),
-	remote: boolean$1().optional()
+	dev: RemoteBindingDevSchema.optional()
 });
 const R2BindingSchema = strictObject$1({
 	type: literal$2("r2"),
 	name: string$1().optional(),
 	jurisdiction: string$1().optional(),
-	remote: boolean$1().optional(),
-	localDev: strictObject$1({ experimentalS3Credentials: object$1({
+	dev: RemoteBindingDevSchema.extend({ experimentalS3Credentials: object$1({
 		accessKeyId: string$1(),
 		secretAccessKey: string$1()
 	}).optional() }).optional()
@@ -53965,38 +53994,38 @@ const AnalyticsEngineDatasetBindingSchema = strictObject$1({
 const FlagshipBindingSchema = strictObject$1({
 	type: literal$2("flagship"),
 	id: string$1().optional(),
-	remote: boolean$1().optional()
+	dev: RemoteBindingDevSchema.optional()
 });
 const HyperdriveBindingSchema = strictObject$1({
 	type: literal$2("hyperdrive"),
 	id: string$1(),
-	localConnectionString: string$1().optional()
+	dev: strictObject$1({ connectionString: string$1().optional() }).optional()
 });
 const KnownBindingSchema = discriminatedUnion$1("type", [
 	strictObject$1({
 		type: literal$2("agent-memory"),
 		namespace: string$1(),
-		remote: boolean$1().optional()
+		dev: RemoteBindingDevSchema.optional()
 	}),
 	strictObject$1({
 		type: literal$2("ai"),
-		remote: boolean$1().optional()
+		dev: RemoteBindingDevSchema.optional()
 	}),
 	strictObject$1({
 		type: literal$2("ai-search"),
 		name: string$1(),
-		remote: boolean$1().optional()
+		dev: RemoteBindingDevSchema.optional()
 	}),
 	strictObject$1({
 		type: literal$2("ai-search-namespace"),
 		namespace: string$1(),
-		remote: boolean$1().optional()
+		dev: RemoteBindingDevSchema.optional()
 	}),
 	AnalyticsEngineDatasetBindingSchema,
 	strictObject$1({
 		type: literal$2("artifacts"),
 		namespace: string$1(),
-		remote: boolean$1().optional()
+		dev: RemoteBindingDevSchema.optional()
 	}),
 	strictObject$1({ type: literal$2("assets") }),
 	BrowserBindingSchema,
@@ -54008,7 +54037,7 @@ const KnownBindingSchema = discriminatedUnion$1("type", [
 			workerName: string$1(),
 			parameters: array$1(string$1()).optional()
 		}).optional(),
-		remote: boolean$1().optional()
+		dev: RemoteBindingDevSchema.optional()
 	}),
 	strictObject$1({
 		type: literal$2("durable-object"),
@@ -54019,7 +54048,7 @@ const KnownBindingSchema = discriminatedUnion$1("type", [
 	HyperdriveBindingSchema,
 	strictObject$1({
 		type: literal$2("images"),
-		remote: boolean$1().optional()
+		dev: RemoteBindingDevSchema.optional()
 	}),
 	strictObject$1({
 		type: literal$2("json"),
@@ -54032,17 +54061,17 @@ const KnownBindingSchema = discriminatedUnion$1("type", [
 	}),
 	strictObject$1({
 		type: literal$2("media"),
-		remote: boolean$1().optional()
+		dev: RemoteBindingDevSchema.optional()
 	}),
 	strictObject$1({
 		type: literal$2("mtls-certificate"),
 		id: string$1(),
-		remote: boolean$1().optional()
+		dev: RemoteBindingDevSchema.optional()
 	}),
 	strictObject$1({
 		type: literal$2("pipeline"),
 		name: string$1(),
-		remote: boolean$1().optional()
+		dev: RemoteBindingDevSchema.optional()
 	}),
 	QueueBindingSchema,
 	strictObject$1({
@@ -54065,11 +54094,11 @@ const KnownBindingSchema = discriminatedUnion$1("type", [
 		destinationAddress: string$1().optional(),
 		allowedDestinationAddresses: array$1(string$1()).optional(),
 		allowedSenderAddresses: array$1(string$1()).optional(),
-		remote: boolean$1().optional()
-	}),
+		dev: RemoteBindingDevSchema.optional()
+	}).refine((value) => value.destinationAddress === void 0 || value.allowedDestinationAddresses === void 0, { message: "\"send-email\" bindings cannot specify both \"destinationAddress\" and \"allowedDestinationAddresses\"" }),
 	strictObject$1({
 		type: literal$2("stream"),
-		remote: boolean$1().optional()
+		dev: RemoteBindingDevSchema.optional()
 	}),
 	strictObject$1({
 		type: literal$2("text"),
@@ -54078,29 +54107,26 @@ const KnownBindingSchema = discriminatedUnion$1("type", [
 	strictObject$1({
 		type: literal$2("vectorize"),
 		name: string$1(),
-		remote: boolean$1().optional()
+		dev: RemoteBindingDevSchema.optional()
 	}),
 	strictObject$1({ type: literal$2("version-metadata") }),
 	strictObject$1({
 		type: literal$2("vpc-service"),
 		id: string$1(),
-		remote: boolean$1().optional()
+		dev: RemoteBindingDevSchema.optional()
 	}),
 	strictObject$1({
 		type: literal$2("vpc-network"),
 		tunnelId: string$1().optional(),
 		networkId: string$1().optional(),
-		remote: boolean$1().optional()
-	}).superRefine((value, ctx) => {
-		const hasTunnel = value.tunnelId !== void 0;
-		if (hasTunnel === (value.networkId !== void 0)) ctx.addIssue({
-			code: "custom",
-			message: hasTunnel ? `"vpc-network" bindings must specify exactly one of "tunnelId" or "networkId", not both` : `"vpc-network" bindings must specify either "tunnelId" or "networkId"`
-		});
-	}),
+		dev: RemoteBindingDevSchema.optional()
+	}).refine((value) => value.tunnelId !== void 0 !== (value.networkId !== void 0), { error: ({ input }) => {
+		const value = input;
+		return value.tunnelId !== void 0 && value.networkId !== void 0 ? `"vpc-network" bindings must specify exactly one of "tunnelId" or "networkId", not both` : `"vpc-network" bindings must specify either "tunnelId" or "networkId"`;
+	} }),
 	strictObject$1({
 		type: literal$2("web-search"),
-		remote: boolean$1().optional()
+		dev: RemoteBindingDevSchema.optional()
 	}),
 	WorkerBindingSchema,
 	strictObject$1({ type: literal$2("worker-loader") })
@@ -54324,30 +54350,39 @@ const BaseWorkerSchema = strictObject$1({
 */
 const InputWorkerSchema = BaseWorkerSchema.extend({ entrypoint: union$1([string$1(), strictObject$1({ default: string$1() })]).transform((value) => typeof value === "string" ? value : value.default).optional() });
 /**
-* Settings schema — validates the named `settings` export of a
+* Input settings schema — validates the named `settings` export of a
 * `cloudflare.config.ts`. Holds account/deployment settings shared by the other exports.
 */
-const SettingsSchema = strictObject$1({
+const InputSettingsSchema = strictObject$1({
 	type: literal$2("settings"),
 	accountId: string$1().optional(),
 	complianceRegion: _enum$1(["public", "fedramp-high"]).optional()
 });
 /**
-* Discriminated union of the config kinds a single export may resolve to.
+* Output settings schema — the shape of the top-level `config.json` in the
+* Build Output Specification. Adds the `mode` the build was produced in.
 */
-const ConfigExportSchema = discriminatedUnion$1("type", [InputWorkerSchema, SettingsSchema]);
+const OutputSettingsSchema = InputSettingsSchema.extend({ mode: string$1().optional() });
 const SETTINGS_EXPORT_NAME = "settings";
-/**
-* Schema for the resolved config exports, keyed by export
-* name. Each value is discriminated on its `type` field. Reserves the
-* `settings` export name exclusively for settings configs: a `settings`
-* config must live on the `settings` export, and the `settings` export
-* may only hold a `settings` config.
-*/
-const ConfigExportsSchema = record$1(string$1(), ConfigExportSchema).check((ctx) => {
+const SUPPORTED_EXPORT_TYPES = new Set(["worker", "settings"]);
+function invalidConfigExportMessage(exportName) {
+	return `The \`${exportName}\` export is not a supported export type. Move constants, helper functions, and other unsupported exports to a separate module.`;
+}
+const ConfigExportsTypeSchema = record$1(string$1(), unknown$1()).check((ctx) => {
 	for (const [key, value] of Object.entries(ctx.value)) {
+		const isObject$5 = typeof value === "object" && value !== null;
+		const type = isObject$5 && "type" in value ? value.type : void 0;
+		if (typeof type !== "string" || !SUPPORTED_EXPORT_TYPES.has(type)) {
+			ctx.issues.push({
+				code: "custom",
+				input: value,
+				path: isObject$5 ? [key, "type"] : [key],
+				message: invalidConfigExportMessage(key)
+			});
+			continue;
+		}
 		const isSettingsName = key === SETTINGS_EXPORT_NAME;
-		const isSettingsType = value.type === "settings";
+		const isSettingsType = type === "settings";
 		if (isSettingsType && !isSettingsName) ctx.issues.push({
 			code: "custom",
 			input: value,
@@ -54358,10 +54393,19 @@ const ConfigExportsSchema = record$1(string$1(), ConfigExportSchema).check((ctx)
 			code: "custom",
 			input: value,
 			path: [key],
-			message: `The \`${SETTINGS_EXPORT_NAME}\` export is reserved for a \`settings\` config; found a \`${value.type}\` config.`
+			message: `The \`${SETTINGS_EXPORT_NAME}\` export is reserved for a \`settings\` config; found a \`${type}\` config.`
 		});
 	}
 });
+const ConfigExportsObjectSchema = object$1({ settings: InputSettingsSchema.optional() }).catchall(InputWorkerSchema);
+/**
+* Schema for the resolved config exports, keyed by export
+* name. Each value is discriminated on its `type` field. Reserves the
+* `settings` export name exclusively for settings configs: a `settings`
+* config must live on the `settings` export, and the `settings` export
+* may only hold a `settings` config.
+*/
+const ConfigExportsSchema = ConfigExportsTypeSchema.pipe(ConfigExportsObjectSchema);
 const ModuleTypeSchema = _enum$1([
 	"esm",
 	"cjs",
@@ -57090,27 +57134,27 @@ function convertBindingsAndAssets(config$3, result) {
 				agentMemory.push(omitUndefined({
 					binding: name,
 					namespace: binding.namespace,
-					remote: binding.remote
+					remote: binding.dev?.remote
 				}));
 				break;
 			case "ai":
 				result.ai = omitUndefined({
 					binding: name,
-					remote: binding.remote
+					remote: binding.dev?.remote
 				});
 				break;
 			case "ai-search":
 				aiSearch.push(omitUndefined({
 					binding: name,
 					instance_name: binding.name,
-					remote: binding.remote
+					remote: binding.dev?.remote
 				}));
 				break;
 			case "ai-search-namespace":
 				aiSearchNamespaces.push(omitUndefined({
 					binding: name,
 					namespace: binding.namespace,
-					remote: binding.remote
+					remote: binding.dev?.remote
 				}));
 				break;
 			case "analytics-engine-dataset":
@@ -57123,7 +57167,7 @@ function convertBindingsAndAssets(config$3, result) {
 				artifacts.push(omitUndefined({
 					binding: name,
 					namespace: binding.namespace,
-					remote: binding.remote
+					remote: binding.dev?.remote
 				}));
 				break;
 			case "assets":
@@ -57132,7 +57176,7 @@ function convertBindingsAndAssets(config$3, result) {
 			case "browser":
 				result.browser = omitUndefined({
 					binding: name,
-					remote: binding.remote
+					remote: binding.dev?.remote
 				});
 				break;
 			case "d1":
@@ -57140,7 +57184,7 @@ function convertBindingsAndAssets(config$3, result) {
 					binding: name,
 					database_id: binding.id,
 					database_name: binding.name,
-					remote: binding.remote
+					remote: binding.dev?.remote
 				}));
 				break;
 			case "dispatch-namespace": {
@@ -57152,7 +57196,7 @@ function convertBindingsAndAssets(config$3, result) {
 					service: binding.outbound.workerName,
 					parameters: binding.outbound.parameters
 				});
-				if (binding.remote !== void 0) entry.remote = binding.remote;
+				if (binding.dev?.remote !== void 0) entry.remote = binding.dev.remote;
 				dispatchNamespaces.push(entry);
 				break;
 			}
@@ -57167,20 +57211,20 @@ function convertBindingsAndAssets(config$3, result) {
 				flagship.push(omitUndefined({
 					binding: name,
 					app_id: binding.id,
-					remote: binding.remote
+					remote: binding.dev?.remote
 				}));
 				break;
 			case "hyperdrive":
 				hyperdrive.push(omitUndefined({
 					binding: name,
 					id: binding.id,
-					localConnectionString: binding.localConnectionString
+					localConnectionString: binding.dev?.connectionString
 				}));
 				break;
 			case "images":
 				result.images = omitUndefined({
 					binding: name,
-					remote: binding.remote
+					remote: binding.dev?.remote
 				});
 				break;
 			case "json":
@@ -57190,7 +57234,7 @@ function convertBindingsAndAssets(config$3, result) {
 				kvNamespaces.push(omitUndefined({
 					binding: name,
 					id: binding.id,
-					remote: binding.remote
+					remote: binding.dev?.remote
 				}));
 				break;
 			case "logfwdr":
@@ -57202,21 +57246,21 @@ function convertBindingsAndAssets(config$3, result) {
 			case "media":
 				result.media = omitUndefined({
 					binding: name,
-					remote: binding.remote
+					remote: binding.dev?.remote
 				});
 				break;
 			case "mtls-certificate":
 				mtlsCertificates.push(omitUndefined({
 					binding: name,
 					certificate_id: binding.id,
-					remote: binding.remote
+					remote: binding.dev?.remote
 				}));
 				break;
 			case "pipeline":
 				pipelines.push(omitUndefined({
 					binding: name,
 					stream: binding.name,
-					remote: binding.remote
+					remote: binding.dev?.remote
 				}));
 				break;
 			case "queue":
@@ -57224,7 +57268,7 @@ function convertBindingsAndAssets(config$3, result) {
 					binding: name,
 					queue: binding.name,
 					delivery_delay: binding.deliveryDelay,
-					remote: binding.remote
+					remote: binding.dev?.remote
 				}));
 				break;
 			case "rate-limit":
@@ -57235,12 +57279,12 @@ function convertBindingsAndAssets(config$3, result) {
 				});
 				break;
 			case "r2": {
-				const experimentalS3Credentials = binding.localDev?.experimentalS3Credentials;
+				const experimentalS3Credentials = binding.dev?.experimentalS3Credentials;
 				r2Buckets.push(omitUndefined({
 					binding: name,
 					bucket_name: binding.name,
 					jurisdiction: binding.jurisdiction,
-					remote: binding.remote,
+					remote: binding.dev?.remote,
 					local_dev: experimentalS3Credentials === void 0 ? void 0 : { experimental_s3_credentials: experimentalS3Credentials }
 				}));
 				break;
@@ -57261,13 +57305,13 @@ function convertBindingsAndAssets(config$3, result) {
 					destination_address: binding.destinationAddress,
 					allowed_destination_addresses: binding.allowedDestinationAddresses,
 					allowed_sender_addresses: binding.allowedSenderAddresses,
-					remote: binding.remote
+					remote: binding.dev?.remote
 				}));
 				break;
 			case "stream":
 				result.stream = omitUndefined({
 					binding: name,
-					remote: binding.remote
+					remote: binding.dev?.remote
 				});
 				break;
 			case "text":
@@ -57277,7 +57321,7 @@ function convertBindingsAndAssets(config$3, result) {
 				vectorize.push(omitUndefined({
 					binding: name,
 					index_name: binding.name,
-					remote: binding.remote
+					remote: binding.dev?.remote
 				}));
 				break;
 			case "version-metadata":
@@ -57287,25 +57331,25 @@ function convertBindingsAndAssets(config$3, result) {
 				vpcServices.push(omitUndefined({
 					binding: name,
 					service_id: binding.id,
-					remote: binding.remote
+					remote: binding.dev?.remote
 				}));
 				break;
 			case "vpc-network":
 				if (binding.tunnelId !== void 0) vpcNetworks.push(omitUndefined({
 					binding: name,
 					tunnel_id: binding.tunnelId,
-					remote: binding.remote
+					remote: binding.dev?.remote
 				}));
 				else if (binding.networkId !== void 0) vpcNetworks.push(omitUndefined({
 					binding: name,
 					network_id: binding.networkId,
-					remote: binding.remote
+					remote: binding.dev?.remote
 				}));
 				break;
 			case "web-search":
 				result.websearch = omitUndefined({
 					binding: name,
-					remote: binding.remote
+					remote: binding.dev?.remote
 				});
 				break;
 			case "worker":
@@ -57314,7 +57358,7 @@ function convertBindingsAndAssets(config$3, result) {
 					service: binding.workerName,
 					entrypoint: binding.exportName,
 					props: binding.props,
-					remote: binding.remote
+					remote: binding.dev?.remote
 				}));
 				break;
 			case "worker-loader":
@@ -98638,6 +98682,14 @@ var validateDurableObjectBinding = /* @__PURE__ */ __name$3((diagnostics, field,
 	return isValid;
 }, "validateDurableObjectBinding");
 var workflowNameFormatMessage = `Workflow names must be 1-64 characters long, start with a letter, number, or underscore, and may only contain letters, numbers, underscores, or hyphens.`;
+function validateWorkflowRetentionValue(diagnostics, field, key, value) {
+	const isValidNumber = typeof value === "number" && Number.isInteger(value) && value > 0;
+	const isValidString = typeof value === "string" && value.length > 0;
+	if (isValidNumber || isValidString) return true;
+	diagnostics.errors.push(`"${field}" bindings "default_retention.${key}" field must be a positive integer of milliseconds or a duration string such as "3 days", but got ${JSON.stringify(value)}.`);
+	return false;
+}
+__name$3(validateWorkflowRetentionValue, "validateWorkflowRetentionValue");
 var validateWorkflowBinding = /* @__PURE__ */ __name$3((diagnostics, field, value) => {
 	if (typeof value !== "object" || value === null) {
 		diagnostics.errors.push(`"workflows" bindings should be objects, but got ${JSON.stringify(value)}`);
@@ -98696,13 +98748,34 @@ var validateWorkflowBinding = /* @__PURE__ */ __name$3((diagnostics, field, valu
 		}
 		validateAdditionalProperties(diagnostics, `${field}.limits`, Object.keys(limits), ["steps"]);
 	}
+	if (hasProperty(value, "default_retention") && value.default_retention !== void 0) if (typeof value.default_retention !== "object" || value.default_retention === null || Array.isArray(value.default_retention)) {
+		diagnostics.errors.push(`"${field}" bindings should, optionally, have an object "default_retention" field but got ${JSON.stringify(value)}.`);
+		isValid = false;
+	} else {
+		const defaultRetention = value.default_retention;
+		for (const key of ["success_retention", "error_retention"]) if (defaultRetention[key] !== void 0 && !validateWorkflowRetentionValue(diagnostics, field, key, defaultRetention[key])) isValid = false;
+		validateAdditionalProperties(diagnostics, `${field}.default_retention`, Object.keys(defaultRetention), ["success_retention", "error_retention"]);
+	}
+	if (hasProperty(value, "concurrency") && value.concurrency !== void 0) if (typeof value.concurrency !== "object" || value.concurrency === null || Array.isArray(value.concurrency)) {
+		diagnostics.errors.push(`"${field}" bindings should, optionally, have an object "concurrency" field but got ${JSON.stringify(value)}.`);
+		isValid = false;
+	} else {
+		const concurrency = value.concurrency;
+		if (concurrency.limit !== void 0 && (typeof concurrency.limit !== "number" || !Number.isInteger(concurrency.limit) || concurrency.limit < 1)) {
+			diagnostics.errors.push(`"${field}" bindings "concurrency.limit" field must be a positive integer but got ${JSON.stringify(concurrency.limit)}.`);
+			isValid = false;
+		}
+		validateAdditionalProperties(diagnostics, `${field}.concurrency`, Object.keys(concurrency), ["limit"]);
+	}
 	validateAdditionalProperties(diagnostics, field, Object.keys(value), [
 		"binding",
 		"name",
 		"class_name",
 		"script_name",
 		"limits",
-		"schedules"
+		"concurrency",
+		"schedules",
+		"default_retention"
 	]);
 	return isValid;
 }, "validateWorkflowBinding");
@@ -102417,11 +102490,9 @@ const BUILD_OUTPUT_ROOT = ".cloudflare/output";
 */
 const CONFIG_FILENAME = "config.json";
 /**
-* Name of the sub-directory under `workers/` holding the Worker.
-*
-* This corresponds with the export name in the input `cloudflare.config.ts`.
+* Name of the sub-directory under `workers/` holding the default Worker.
 */
-const DEFAULT_WORKER_EXPORT = "default";
+const DEFAULT_WORKER_DIRECTORY_NAME = "default";
 /**
 * Absolute path to the Build Output Specification root for the current project.
 */
@@ -102431,9 +102502,11 @@ function getBuildOutputDir(root) {
 /**
 * Absolute path to the top-level `config.json` for the current project.
 *
-* This corresponds with the `settings` export in the input `cloudflare.config.ts`.
+* Holds the project-level settings shared by every Worker: those declared by
+* the `settings` export of the input `cloudflare.config.ts`, including the
+* mode the build was produced in.
 */
-function getRootConfigPath(root) {
+function getSettingsConfigPath(root) {
 	return path2.join(getBuildOutputDir(root), BUILD_OUTPUT_VERSION, CONFIG_FILENAME);
 }
 /**
@@ -102443,28 +102516,29 @@ function getWorkersDir(root) {
 	return path2.join(getBuildOutputDir(root), BUILD_OUTPUT_VERSION, "workers");
 }
 /**
-* Absolute path to the Worker's directory (`workers/default`).
+* Absolute path to a Worker's directory (`workers/<worker-directory-name>`).
 */
-function getWorkerDir(root) {
-	return path2.join(getWorkersDir(root), DEFAULT_WORKER_EXPORT);
+function getWorkerDir(root, workerDirectoryName = DEFAULT_WORKER_DIRECTORY_NAME) {
+	if (workerDirectoryName.length === 0 || workerDirectoryName === "." || workerDirectoryName === ".." || workerDirectoryName.includes("/") || workerDirectoryName.includes("\\") || workerDirectoryName.includes("\0")) throw new Error("Worker directory names must be non-empty, single path segments.");
+	return path2.join(getWorkersDir(root), workerDirectoryName);
 }
 /**
 * Absolute path to the Worker's config file.
 */
-function getWorkerConfigPath(root) {
-	return path2.join(getWorkerDir(root), CONFIG_FILENAME);
+function getWorkerConfigPath(root, workerDirectoryName = DEFAULT_WORKER_DIRECTORY_NAME) {
+	return path2.join(getWorkerDir(root, workerDirectoryName), CONFIG_FILENAME);
 }
 /**
 * Absolute path to the Worker's bundle directory.
 */
-function getWorkerBundleDir(root) {
-	return path2.join(getWorkerDir(root), "bundle");
+function getWorkerBundleDir(root, workerDirectoryName = DEFAULT_WORKER_DIRECTORY_NAME) {
+	return path2.join(getWorkerDir(root, workerDirectoryName), "bundle");
 }
 /**
 * Absolute path to the Worker's assets directory.
 */
-function getWorkerAssetsDir(root) {
-	return path2.join(getWorkerDir(root), "assets");
+function getWorkerAssetsDir(root, workerDirectoryName = DEFAULT_WORKER_DIRECTORY_NAME) {
+	return path2.join(getWorkerDir(root, workerDirectoryName), "assets");
 }
 var __defProp$2 = Object.defineProperty;
 var __name$2 = (target$1, value) => __defProp$2(target$1, "name", {
@@ -102502,29 +102576,40 @@ async function cleanBuildOutputDir(root) {
 	await removeDir(getBuildOutputDir(root));
 }
 /**
-* Write the output Worker `config.json` to the Build Output Specification
-* tree (`workers/default/`).
+* Write an output Worker `config.json` to the Build Output Specification tree.
 *
 * - Workers mode: `manifest` is provided (bundle/ present on disk).
 * - Assets-only mode: `manifest` is omitted (no bundle/ directory).
 */
-async function writeWorkerConfig(root, parsedConfig, manifest) {
-	const { entrypoint: _entrypoint,...rest } = parsedConfig;
+async function writeWorkerConfig({ root, config: config$3, manifest, workerDirectoryName = DEFAULT_WORKER_DIRECTORY_NAME }) {
+	const { entrypoint: _entrypoint,...rest } = config$3;
 	const outputConfig = {
 		...rest,
 		manifest
 	};
-	await fsp.mkdir(getWorkerDir(root), { recursive: true });
-	await fsp.writeFile(getWorkerConfigPath(root), JSON.stringify(outputConfig));
+	await fsp.mkdir(getWorkerDir(root, workerDirectoryName), { recursive: true });
+	await fsp.writeFile(getWorkerConfigPath(root, workerDirectoryName), JSON.stringify(outputConfig));
 }
 /**
-* Write the top-level `config.json` holding shared settings to the Build
-* Output Specification tree.
+* Write the top-level `config.json` to the Build Output Specification tree.
+*
+* Holds the project-level settings shared by every Worker: those declared by
+* the `settings` export, including the `mode`, which is supplied at build time
+* rather than declared. Always written, even when there are no declared
+* settings and no mode: the result then degrades to `{ "type": "settings" }`.
+*
+* `mode` is omitted when undefined, which is the case for Wrangler builds that
+* selected no mode (Vite always resolves one).
 */
-async function writeRootConfig(root, settings) {
-	const configPath = getRootConfigPath(root);
+async function writeSettingsConfig(root, settings, mode) {
+	const outputConfig = {
+		...settings,
+		type: "settings",
+		...mode !== void 0 ? { mode } : {}
+	};
+	const configPath = getSettingsConfigPath(root);
 	await fsp.mkdir(path2.dirname(configPath), { recursive: true });
-	await fsp.writeFile(configPath, JSON.stringify(settings));
+	await fsp.writeFile(configPath, JSON.stringify(outputConfig));
 }
 const BUILD_OUTPUT_ERROR_PREFIX = "Build Output Specification: ";
 /**
@@ -102541,7 +102626,7 @@ var BuildOutputError = class extends Error {
 * Read and validate the Build Output Specification tree at
 * `<root>/.cloudflare/output/v0/`.
 *
-* Reads the optional top-level `config.json` settings, then reads and
+* Reads the optional top-level settings `config.json`, then reads and
 * schema-validates the Worker's `config.json` and resolves its
 * `bundle/` / `assets/` directories.
 *
@@ -102549,28 +102634,36 @@ var BuildOutputError = class extends Error {
 * the Worker config is missing, is not valid JSON, or fails schema validation.
 */
 async function readBuildOutput(root) {
+	const settings = await readSettings(root);
+	const defaultWorker = await readWorker(root, DEFAULT_WORKER_DIRECTORY_NAME);
+	const additionalWorkerDirectoryNames = (await fsp.readdir(getWorkersDir(root), { withFileTypes: true })).filter((entry) => entry.isDirectory() && entry.name !== DEFAULT_WORKER_DIRECTORY_NAME).map((entry) => entry.name).sort();
+	const additionalWorkers = await Promise.all(additionalWorkerDirectoryNames.map(async (workerDirectoryName) => [workerDirectoryName, await readWorker(root, workerDirectoryName)]));
 	return {
 		root,
 		version: BUILD_OUTPUT_VERSION,
-		settings: await readSettings(root),
-		workers: [await readWorker(root)]
+		settings,
+		workers: {
+			default: defaultWorker,
+			...Object.fromEntries(additionalWorkers)
+		}
 	};
 }
 /**
 * Read and schema-validate the Worker's `config.json` and resolve its
 * `bundle/` / `assets/` directories.
 *
+* @returns the Worker, with whichever of its directories exist resolved.
 * @throws {BuildOutputError} if the config is missing, is not valid JSON, or
 * fails schema validation.
 */
-async function readWorker(root) {
-	const configPath = getWorkerConfigPath(root);
-	if (!fs$1.existsSync(configPath)) throw new BuildOutputError(`No Worker config found at ${configPath}.`);
+async function readWorker(root, workerDirectoryName) {
+	const configPath = getWorkerConfigPath(root, workerDirectoryName);
+	if (!fs$1.existsSync(configPath)) throw new BuildOutputError(`no Worker config found at ${configPath}.`);
 	const contents = await fsp.readFile(configPath, "utf-8");
 	const result = OutputWorkerSchema.safeParse(parseJson(contents, configPath));
 	if (!result.success) throw new BuildOutputError(`invalid Worker config at ${configPath}.\n${result.error.message}`);
-	const bundleDir = getWorkerBundleDir(root);
-	const assetsDir = getWorkerAssetsDir(root);
+	const bundleDir = getWorkerBundleDir(root, workerDirectoryName);
+	const assetsDir = getWorkerAssetsDir(root, workerDirectoryName);
 	const hasBundleDir = fs$1.existsSync(bundleDir);
 	const hasAssetsDir = fs$1.existsSync(assetsDir);
 	if (result.data.manifest && !hasBundleDir) throw new BuildOutputError(`Worker config at ${configPath} contains a manifest, but no bundle directory exists at ${bundleDir}.`);
@@ -102590,18 +102683,22 @@ async function readWorker(root) {
 }
 /**
 * Read and schema-validate the optional top-level `config.json` holding the
-* project-level settings shared by every Worker.
+* project-level settings shared by every Worker, including the mode the build
+* was produced in.
+*
+* Returned whole: consumers that need only the settings the user declared
+* narrow it themselves.
 *
 * @returns the parsed settings, or `undefined` when the file is absent.
 * @throws {BuildOutputError} if the file is not valid JSON or fails schema
 * validation.
 */
 async function readSettings(root) {
-	const configPath = getRootConfigPath(root);
+	const configPath = getSettingsConfigPath(root);
 	if (!fs$1.existsSync(configPath)) return;
 	const contents = await fsp.readFile(configPath, "utf-8");
-	const result = SettingsSchema.safeParse(parseJson(contents, configPath));
-	if (!result.success) throw new BuildOutputError(`invalid root config at ${configPath}.\n${result.error.message}`);
+	const result = OutputSettingsSchema.safeParse(parseJson(contents, configPath));
+	if (!result.success) throw new BuildOutputError(`invalid settings config at ${configPath}.\n${result.error.message}`);
 	return result.data;
 }
 function parseJson(contents, configPath) {
@@ -102619,12 +102716,12 @@ function parseJson(contents, configPath) {
 * `<root>/.cloudflare/output/v0/workers/default/` and reconstruct a
 * `BuildOutputPreviewWorker`.
 *
-* The spec currently holds a single Worker, so this returns a single-element
-* array.
+* Preview currently uses only the `default` Worker, so this returns a
+* single-element array.
 */
 async function readBuildOutputWorkers(root) {
 	const { workers, settings } = await readBuildOutput(root);
-	const [worker] = workers;
+	const worker = workers[DEFAULT_WORKER_DIRECTORY_NAME];
 	const { manifest,...inputShape } = worker.config;
 	const { config: config$3, diagnostics } = normalizeAndValidateConfig(convertToWranglerConfig(inputShape, settings), void 0, void 0, {}, true);
 	if (diagnostics.hasWarnings()) console.warn(diagnostics.renderWarnings());
@@ -111664,8 +111761,11 @@ const buildOutputPlugin = createPlugin("build-output", (ctx) => {
 			const defaultExport = ctx.resolvedPluginConfig.parsedNewConfig?.default;
 			const workerNewConfig$1 = defaultExport?.type === "worker" ? defaultExport : void 0;
 			assert2(workerNewConfig$1, "Expected a default worker export on assets-only resolved config");
-			await writeWorkerConfig(ctx.resolvedViteConfig.root, workerNewConfig$1);
-			await writeSettingsConfig();
+			await writeWorkerConfig({
+				root: ctx.resolvedViteConfig.root,
+				config: workerNewConfig$1
+			});
+			await writeSettings();
 			return;
 		}
 		if (ctx.resolvedPluginConfig.type === "workers" && this.environment.name !== ctx.resolvedPluginConfig.entryWorkerEnvironmentName) return;
@@ -111681,18 +111781,28 @@ const buildOutputPlugin = createPlugin("build-output", (ctx) => {
 			if (importedAssetPaths.has(fileName)) continue;
 			modules[fileName] = { type: detectModuleType(fileName) };
 		}
-		await writeWorkerConfig(ctx.resolvedViteConfig.root, workerNewConfig, {
-			mainModule: entryChunk.fileName,
-			modules
+		await writeWorkerConfig({
+			root: ctx.resolvedViteConfig.root,
+			config: workerNewConfig,
+			manifest: {
+				mainModule: entryChunk.fileName,
+				modules
+			}
 		});
-		await writeSettingsConfig();
+		await writeSettings();
 	} };
-	async function writeSettingsConfig() {
+	/**
+	* Write the top-level `config.json`, recording the settings shared by every
+	* Worker, including the Vite mode the build ran in.
+	*
+	* Written even when there is no `settings` export, so the mode is always
+	* captured.
+	*/
+	async function writeSettings() {
 		if (ctx.resolvedPluginConfig.type === "preview") return;
 		const settingsExport = ctx.resolvedPluginConfig.parsedNewConfig?.settings;
 		const settings = settingsExport?.type === "settings" ? settingsExport : void 0;
-		if (!settings) return;
-		await writeRootConfig(ctx.resolvedViteConfig.root, settings);
+		await writeSettingsConfig(ctx.resolvedViteConfig.root, settings, ctx.resolvedViteConfig.mode);
 	}
 });
 /**
@@ -114050,7 +114160,10 @@ const configPlugin = createPlugin("config", (ctx) => {
 					if (cfBuildOutput) {
 						const entryWorkerNewConfig = ctx.getWorkerNewConfig(entryWorkerEnvironmentName);
 						assert2(entryWorkerNewConfig, `No config found for "${entryWorkerEnvironmentName}" environment`);
-						await writeWorkerConfig(builder.config.root, entryWorkerNewConfig);
+						await writeWorkerConfig({
+							root: builder.config.root,
+							config: entryWorkerNewConfig
+						});
 					} else {
 						const entryWorkerConfig = ctx.getWorkerConfig(entryWorkerEnvironmentName);
 						assert2(entryWorkerConfig, `No config found for "${entryWorkerEnvironmentName}" environment`);
@@ -118387,7 +118500,7 @@ var __name$1 = (target$1, value) => __defProp$1(target$1, "name", {
 });
 
 //#endregion
-//#region ../workers-auth/dist/chunk-EGLFJKUK.mjs
+//#region ../workers-auth/dist/chunk-LQW53VED.mjs
 var import_undici$2 = require_undici();
 var hasWarnedAboutDeprecatedV1ApiToken = false;
 function readStoredAuthState(options) {
@@ -121008,7 +121121,7 @@ function probeSecretTool() {
 	if (cachedProbeResult !== void 0) return cachedProbeResult;
 	let result;
 	try {
-		result = runner(["--version"]).status === 0;
+		result = runner(["--version"]).error === void 0;
 	} catch {
 		result = false;
 	}
@@ -121343,7 +121456,7 @@ function scrubEncryptedCredentials(options) {
 __name$1(scrubEncryptedCredentials, "scrubEncryptedCredentials");
 
 //#endregion
-//#region ../workers-auth/dist/chunk-X7ZLU22G.mjs
+//#region ../workers-auth/dist/chunk-YCVYA5LL.mjs
 function createPreferences(getConfigPath) {
 	function getUserPreferencesPath() {
 		return path2__default.resolve(getConfigPath(), "preferences.json");
@@ -122906,7 +123019,7 @@ var require_command_exists = /* @__PURE__ */ __commonJS$4({ "../../node_modules/
 }) });
 
 //#endregion
-//#region ../deploy-helpers/dist/chunk-LRKPOFWK.mjs
+//#region ../deploy-helpers/dist/chunk-ZV7SJ2MZ.mjs
 var import_undici$1 = require_undici();
 var import_command_exists = require_command_exists();
 function assertNever$1(_value) {}
@@ -122937,10 +123050,22 @@ function convertConfigToBindings(config$3, options) {
 				break;
 			case "send_email":
 				if (pages) break;
-				for (const { name,...x } of info$1) output[name] = {
-					type: "send_email",
-					...x
-				};
+				for (const { name, destination_address, allowed_destination_addresses, allowed_sender_addresses, remote } of info$1) {
+					const shared = {
+						type: "send_email",
+						allowed_sender_addresses,
+						remote
+					};
+					if (destination_address !== void 0) output[name] = {
+						...shared,
+						destination_address
+					};
+					else if (allowed_destination_addresses !== void 0) output[name] = {
+						...shared,
+						allowed_destination_addresses
+					};
+					else output[name] = shared;
+				}
 				break;
 			case "wasm_modules":
 				if (pages) break;
@@ -123368,16 +123493,20 @@ function createWorkerUploadForm(worker, bindings$1, options) {
 		});
 	});
 	send_email.forEach((emailBinding) => {
-		const destination_address = "destination_address" in emailBinding ? emailBinding.destination_address : void 0;
-		const allowed_destination_addresses = "allowed_destination_addresses" in emailBinding ? emailBinding.allowed_destination_addresses : void 0;
-		const allowed_sender_addresses = "allowed_sender_addresses" in emailBinding ? emailBinding.allowed_sender_addresses : void 0;
-		metadataBindings.push({
+		const shared = {
 			name: emailBinding.name,
 			type: "send_email",
-			destination_address,
-			allowed_destination_addresses,
-			allowed_sender_addresses
+			allowed_sender_addresses: emailBinding.allowed_sender_addresses
+		};
+		if (emailBinding.destination_address !== void 0) metadataBindings.push({
+			...shared,
+			destination_address: emailBinding.destination_address
+		});
+		else if (emailBinding.allowed_destination_addresses !== void 0) metadataBindings.push({
+			...shared,
+			allowed_destination_addresses: emailBinding.allowed_destination_addresses
 		});
+		else metadataBindings.push(shared);
 	});
 	durable_objects.forEach(({ name, class_name, script_name, environment }) => {
 		metadataBindings.push({
@@ -123777,7 +123906,7 @@ __name(createWorkerUploadForm, "createWorkerUploadForm");
 //#endregion
 //#region ../remote-bindings/dist/index.mjs
 var import_undici = require_undici();
-var version$2 = "0.0.14";
+var version$2 = "0.0.16";
 var NoDefaultValueProvided = class extends UserError {
 	constructor() {
 		super("This command cannot be run in a non-interactive context", { telemetryMessage: "remote bindings prompt default missing" });