@cloudflare/vite-plugin 1.63.1 → 1.64.0

package/dist/index.mjs

@@ -23,7 +23,7 @@ import fs, { constants as constants$1, mkdir, readFile, writeFile } from "node:f
 import childProcess, { execFile, execFileSync, spawn, spawnSync } from "node:child_process";
 import * as timersPromises from "node:timers/promises";
 import { setTimeout as setTimeout$1 } from "node:timers/promises";
-import { CoreHeaders, CorePaths, DeferredPromise, Log, LogLevel, Miniflare, MiniflareCoreError, Mutex, Request as Request$1, Response as Response$1, buildPublicUrl, convertV4MiniflareOptions, coupleWebSocket, getDefaultDevRegistryPath, getNodeCompat, getWorkerRegistry, kUnsafeEphemeralUniqueKey, parseModuleFallbackRequest } from "miniflare";
+import { CoreHeaders, CorePaths, DeferredPromise, Log, LogLevel, Miniflare, MiniflareCoreError, Mutex, Request as Request$1, Response as Response$1, buildPublicUrl, convertV4MiniflareOptions, coupleWebSocket, getDefaultDevRegistryPath, getNodeCompat, getWorkerRegistry, kUnsafeEphemeralUniqueKey, parseForwardedProto, parseModuleFallbackRequest } from "miniflare";
 import * as wrangler from "wrangler";
 import * as vite from "vite";
 import { normalizePath, version } from "vite";
@@ -19169,7 +19169,7 @@ function createFatalError$1(message, isJson, options) {
 __name$6(createFatalError$1, "createFatalError");
 
 //#endregion
-//#region ../workers-utils/dist/chunk-TAK63GWY.mjs
+//#region ../workers-utils/dist/chunk-2HLTAS5V.mjs
 createRequire(import.meta.url || (typeof __filename === "string" ? __filename : "/"));
 function hasKnownExportType(entry) {
 	const type = entry?.type;
@@ -19274,12 +19274,12 @@ function getDurableObjectClassNameToUseSQLiteMap(migrations, exports$1) {
 	return durableObjectClassNameToUseSQLiteMap;
 }
 __name$6(getDurableObjectClassNameToUseSQLiteMap, "getDurableObjectClassNameToUseSQLiteMap");
-function validateDurableObjectContainerApplications(config$2, containers = getDurableObjectContainerApps(config$2.containers)) {
+function validateDurableObjectContainerApplications(config$2, containers = getDurableObjectContainerApps(config$2.containers), configFileName2 = "Wrangler config file") {
 	const allDOs = getDurableObjectClassNameToUseSQLiteMap(config$2.migrations, config$2.exports);
 	for (const container of getResolvedDurableObjectContainerApps(containers, config$2.exports)) {
 		const maybeBoundDO = config$2.durable_objects.bindings.find((durableObject) => durableObject.class_name === container.class_name);
 		const useSQLite = allDOs.get(container.class_name);
-		if (useSQLite === void 0 && maybeBoundDO === void 0) throw new UserError(`The container class_name ${container.class_name} does not match any durable object class_name defined in your Wrangler config file. Note that the durable object must be defined in the same script as the container.`, { telemetryMessage: "no DO defined that matches container class_name" });
+		if (useSQLite === void 0 && maybeBoundDO === void 0) throw new UserError(`The container class_name ${container.class_name} does not match any durable object class_name defined in your ${configFileName2}. Note that the durable object must be defined in the same script as the container.`, { telemetryMessage: "no DO defined that matches container class_name" });
 		if (maybeBoundDO?.script_name !== void 0) throw new UserError(`The container ${container.name} is referencing the durable object ${container.class_name}, which appears to be defined on the ${maybeBoundDO.script_name} Worker instead (via the 'script_name' field). You cannot configure a container on a Durable Object that is defined in another Worker.`, { telemetryMessage: "container class_name refers to an external durable object" });
 		if (useSQLite === false) throw new UserError(`The container ${container.name} references Durable Object class ${container.class_name}, which uses the legacy KV storage backend. Durable Object-managed Containers require SQLite-backed Durable Objects.`, { telemetryMessage: "durable object container class uses legacy storage" });
 	}
@@ -19982,10 +19982,10 @@ function parseTree(text, errors$1 = [], options = ParseOptions.DEFAULT) {
 	return result;
 }
 __name$6(parseTree, "parseTree");
-function findNodeAtLocation(root, path2) {
+function findNodeAtLocation(root, path3) {
 	if (!root) return;
 	let node$2 = root;
-	for (let segment of path2) if (typeof segment === "string") {
+	for (let segment of path3) if (typeof segment === "string") {
 		if (node$2.type !== "object" || !Array.isArray(node$2.children)) return;
 		let found = false;
 		for (const propertyNode of node$2.children) if (Array.isArray(propertyNode.children) && propertyNode.children[0].value === segment && propertyNode.children.length === 2) {
@@ -20212,13 +20212,13 @@ function getNodeType(value) {
 }
 __name$6(getNodeType, "getNodeType");
 function setProperty(text, originalPath, value, options) {
-	const path2 = originalPath.slice();
+	const path3 = originalPath.slice();
 	const root = parseTree(text, []);
 	let parent = void 0;
 	let lastSegment = void 0;
-	while (path2.length > 0) {
-		lastSegment = path2.pop();
-		parent = findNodeAtLocation(root, path2);
+	while (path3.length > 0) {
+		lastSegment = path3.pop();
+		parent = findNodeAtLocation(root, path3);
 		if (parent === void 0 && value !== void 0) if (typeof lastSegment === "string") value = { [lastSegment]: value };
 		else value = [value];
 		else break;
@@ -20460,8 +20460,8 @@ function format2(documentText, range, options) {
 	return format$2(documentText, range, options);
 }
 __name$6(format2, "format");
-function modify(text, path2, value, options) {
-	return setProperty(text, path2, value, options);
+function modify(text, path3, value, options) {
+	return setProperty(text, path3, value, options);
 }
 __name$6(modify, "modify");
 function applyEdits(text, edits) {
@@ -21667,7 +21667,8 @@ function configFormat(configPath) {
 	return "none";
 }
 __name$6(configFormat, "configFormat");
-function configFileName(configPath) {
+function configFileName(configPath, userConfigPath) {
+	if (userConfigPath !== void 0) return path__default.basename(userConfigPath);
 	switch (configFormat(configPath)) {
 		case "toml": return "wrangler.toml";
 		case "json": return "wrangler.json";
@@ -50148,7 +50149,7 @@ function mapWorkerMetadataBindings(bindings) {
 	}, {});
 }
 __name$6(mapWorkerMetadataBindings, "mapWorkerMetadataBindings");
-var DEFAULT_COMPAT_DATE = "2026-10-06";
+var DEFAULT_COMPAT_DATE = "2026-10-12";
 function constructWranglerConfig(config$2) {
 	const mappedBindings = mapWorkerMetadataBindings(config$2.bindings);
 	const durableObjectClassNames = config$2.bindings.filter((binding) => binding.type === "durable_object_namespace" && binding.script_name === config$2.name).map((durableObject) => durableObject.class_name);
@@ -52253,6 +52254,50 @@ The local dev server started at ${origin.href}
 	return new Error(errorMessage);
 }
 __name$6(createTunnelStartupError, "createTunnelStartupError");
+var WRANGLER_COMMANDS = {
+	deploy: "wrangler deploy",
+	preview: "wrangler preview",
+	versionsUpload: "wrangler versions upload",
+	versionsDeploy: "wrangler versions deploy",
+	versionsDeployAt: /* @__PURE__ */ __name$6((n2) => `wrangler versions deploy <new-version-id>@${n2}%`, "versionsDeployAt"),
+	triggersDeploy: "wrangler triggers deploy",
+	d1List: "wrangler d1 list",
+	d1Delete: "wrangler d1 delete",
+	queuesCreate: "wrangler queues create",
+	secretPut: "wrangler secret put",
+	versionsSecretPut: "wrangler versions secret put",
+	containerRegistryConfigure: "wrangler containers registries configure"
+};
+var WRANGLER_CONFIG_FIELDS = {
+	workersDev: "workers_dev",
+	containerObservabilityTargetPercentage: "target_instance_percentage",
+	containerObservabilityTargetCount: "target_instance_count"
+};
+var WRANGLER_CLI_PRESENTATION = {
+	cliName: "wrangler",
+	displayName: "Wrangler",
+	displayConfigFileName: "Wrangler config file",
+	configFieldAssignmentSeparator: " = ",
+	commands: WRANGLER_COMMANDS,
+	configFields: WRANGLER_CONFIG_FIELDS
+};
+function resolveCliPresentation(overrides) {
+	return {
+		cliName: overrides?.cliName ?? WRANGLER_CLI_PRESENTATION.cliName,
+		displayName: overrides?.displayName ?? WRANGLER_CLI_PRESENTATION.displayName,
+		displayConfigFileName: overrides?.displayConfigFileName ?? WRANGLER_CLI_PRESENTATION.displayConfigFileName,
+		configFieldAssignmentSeparator: overrides?.configFieldAssignmentSeparator ?? WRANGLER_CLI_PRESENTATION.configFieldAssignmentSeparator,
+		commands: {
+			...WRANGLER_COMMANDS,
+			...overrides?.commands
+		},
+		configFields: {
+			...WRANGLER_CONFIG_FIELDS,
+			...overrides?.configFields
+		}
+	};
+}
+__name$6(resolveCliPresentation, "resolveCliPresentation");
 var UPDATE_CHECK_TIMEOUT_MS = 3e3;
 var CACHE_TTL_MS = 3600 * 1e3;
 var NPM_REGISTRY_URL = "https://registry.npmjs.org/";
@@ -56427,10 +56472,7 @@ const isRolldown = "rolldownVersion" in vite;
 */
 function getForwardedProto(req) {
 	const raw = req.headers["x-forwarded-proto"];
-	const value = Array.isArray(raw) ? raw[0] : raw;
-	if (!value) return;
-	const first = value.split(",")[0]?.trim().toLowerCase();
-	if (first === "http" || first === "https") return `${first}:`;
+	return parseForwardedProto(Array.isArray(raw) ? raw[0] : raw);
 }
 /**
 * Extracts the authority (host and port) from an incoming Node.js request.
@@ -62984,6 +63026,10 @@ const ObservabilitySchema = strictObject({
 		destinations: array(string()).optional()
 	}).optional()
 });
+const AccessSchema = strictObject({ dev: strictObject({
+	aud: string(),
+	identity: record(string(), unknown()).optional()
+}).optional() });
 const PlacementSchema = union([
 	strictObject({
 		mode: _enum(["off", "smart"]),
@@ -63074,6 +63120,7 @@ const BaseWorkerSchema = strictObject({
 	limits: LimitsSchema.optional(),
 	logpush: boolean().optional(),
 	observability: ObservabilitySchema.optional(),
+	access: AccessSchema.optional(),
 	workersDev: boolean().optional(),
 	previewUrls: boolean().optional(),
 	firstPartyWorker: boolean().optional(),
@@ -63388,6 +63435,7 @@ function convertTopLevel(config$2, result) {
 		result.limits = limits;
 	}
 	if (config$2.observability !== void 0) result.observability = convertObservability(config$2.observability);
+	if (config$2.access !== void 0) result.access = config$2.access;
 	if (config$2.cache !== void 0) {
 		const cache$2 = { enabled: config$2.cache.enabled };
 		if (config$2.cache.crossVersionCache !== void 0) cache$2.cross_version_cache = config$2.cache.crossVersionCache;
@@ -64067,10 +64115,14 @@ function createDefinitionResolver(ctx) {
 		return resolved;
 	};
 }
-async function normalizeWorkerReferences(resolved, resolveDefinition) {
+async function normalizeWorkerEnv(resolved, resolveDefinition) {
 	if (!isRecord(resolved) || !isRecord(resolved.env)) return resolved;
 	const env$3 = { ...resolved.env };
 	for (const [bindingName, binding] of Object.entries(env$3)) {
+		if (binding === false || binding === null || binding === void 0) {
+			delete env$3[bindingName];
+			continue;
+		}
 		if (!isRecord(binding) || typeof binding.type !== "string" || !CROSS_WORKER_BINDING_TYPES.has(binding.type) || typeof binding.worker === "string") continue;
 		const target$1 = await resolveDefinition(binding.worker);
 		env$3[bindingName] = {
@@ -64149,7 +64201,7 @@ async function normalizeContainerReferences(resolved, resolveDefinition, contain
 	};
 }
 async function normalizeWorkerConfig(resolved, resolveDefinition, containers) {
-	return normalizeContainerReferences(await normalizeWorkerReferences(normalizeWorkerEntrypoint(resolved), resolveDefinition), resolveDefinition, containers);
+	return normalizeContainerReferences(await normalizeWorkerEnv(normalizeWorkerEntrypoint(resolved), resolveDefinition), resolveDefinition, containers);
 }
 function prefixIssues(issues, prefix) {
 	return issues.map((issue$2) => ({
@@ -71901,6 +71953,7 @@ async function resolvePluginConfig(pluginConfig, userConfig, viteEnv) {
 	}
 	const resolvedNewConfig = normalizeNewConfig(pluginConfig.experimental?.newConfig);
 	const shared = {
+		cliDisplayName: isForcedBuildOutput() ? "cf" : "Wrangler",
 		persistState: pluginConfig.persistState ?? true,
 		inspectorPort: pluginConfig.inspectorPort,
 		tunnel: typeof pluginConfig.tunnel === "boolean" ? { autoStart: pluginConfig.tunnel } : {
@@ -73848,6 +73901,14 @@ const resolveExtensions = [
 	".cts",
 	".ctx"
 ];
+/**
+* Worker source maps are written to the Worker's build output rather than its
+* public assets, so emit them by default for readable stack traces. Users can
+* opt out with Vite's `build.sourcemap` or the Worker's `upload_source_maps`.
+*/
+function getWorkerSourcemap(userConfig, environmentName, workerConfig) {
+	return userConfig.environments?.[environmentName]?.build?.sourcemap ?? userConfig.build?.sourcemap ?? workerConfig.upload_source_maps ?? true;
+}
 function createCloudflareEnvironmentOptions({ workerConfig, userConfig, mode, environmentName, isEntryWorker, isParentEnvironment, hasNodeJsCompat: hasNodeJsCompat$1 }) {
 	const rollupOptions = isParentEnvironment ? {
 		input: { [MAIN_ENTRY_NAME]: VIRTUAL_WORKER_ENTRY },
@@ -73874,6 +73935,7 @@ function createCloudflareEnvironmentOptions({ workerConfig, userConfig, mode, en
 			emitAssets: true,
 			manifest: isEntryWorker,
 			outDir: getOutputDirectory(userConfig, environmentName),
+			sourcemap: getWorkerSourcemap(userConfig, environmentName, workerConfig),
 			copyPublicDir: false,
 			ssr: true,
 			...isRolldown ? { rolldownOptions: {
@@ -83894,7 +83956,9 @@ var fetchResult$1 = /* @__PURE__ */ __name$2(() => {
 var fetchPagedListResult = /* @__PURE__ */ __name$2(() => {
 	throw new Error("initContainersSharedContext() must be called first");
 }, "fetchPagedListResult");
+var cliPresentation = resolveCliPresentation();
 function initContainersSharedContext(ctx) {
+	cliPresentation = resolveCliPresentation(ctx.cliPresentation);
 	logger$1 = ctx.logger;
 	fetchResult$1 = ctx.fetchResult;
 	if (ctx.fetchPagedListResult !== void 0) fetchPagedListResult = ctx.fetchPagedListResult;
@@ -83989,7 +84053,10 @@ var runDockerCmd = /* @__PURE__ */ __name$2((dockerPath, args, stdio) => {
 }, "runDockerCmd");
 var runDockerCmdWithOutput = /* @__PURE__ */ __name$2((dockerPath, args) => {
 	try {
-		return execFileSync(dockerPath, args, { encoding: "utf8" }).trim();
+		return execFileSync(dockerPath, args, {
+			encoding: "utf8",
+			stdio: "pipe"
+		}).trim();
 	} catch (error$3) {
 		throw new UserError(`Failed running docker command: ${error$3.message}. Command: ${dockerPath} ${args.join(" ")}`, { telemetryMessage: false });
 	}
@@ -84155,7 +84222,9 @@ async function pullImage(dockerPath, options, logger2, complianceConfig) {
 		await dockerLoginImageRegistry(dockerPath, domain$1);
 	} catch (e) {
 		if (!isExternalRegistry) throw e;
-		logger2?.warn("Unable to retrieve configured registry credentials from Cloudflare.\nUnless this is a public image, you will need to run `wrangler containers registries configure` before deploying.\nAttempting to pull image anyway...");
+		logger2?.warn(`Unable to retrieve configured registry credentials from Cloudflare.
+Unless this is a public image, you will need to run \`${cliPresentation.commands.containerRegistryConfigure}\` before deploying.
+Attempting to pull image anyway...`);
 	}
 	const pull = runDockerCmd(dockerPath, [
 		"pull",
@@ -84187,7 +84256,7 @@ async function prepareContainerImagesForDev(args) {
 		dockerPath,
 		operation: "running dev",
 		imageNoun: containerOptions.length !== 1 ? "the configured images" : "the configured image",
-		hint: "To suppress this error if you do not intend on triggering any container instances, set dev.enable_containers to false in your Wrangler config or pass --enable-containers=false."
+		hint: `To suppress this error if you do not intend on triggering any container instances, set dev.enable_containers to false in your ${cliPresentation.displayConfigFileName} or pass --enable-containers=false.`
 	});
 	for (const options of containerOptions) {
 		if ("dockerfile" in options) {
@@ -85473,7 +85542,7 @@ __name$2(buildApplicationObservabilityPatch, "buildApplicationObservabilityPatch
 function assertCanUseApplicationObservabilityTargeting(prevApp, containerConfig) {
 	if (!hasTopLevelOnlyObservabilityFields(containerConfig.observability)) return;
 	if (!hasLegacyRolloutObservabilityEnabled(prevApp)) return;
-	throw new UserError(`Application-level observability targeting cannot be enabled for container ${containerConfig.name} while it still uses legacy rollout-based observability. Set containers[].observability.enabled = false in your Wrangler config and deploy once, then deploy again with target_instance_percentage or target_instance_count.`, { telemetryMessage: "containers deploy observability migration blocked" });
+	throw new UserError(`Application-level observability targeting cannot be enabled for container ${containerConfig.name} while it still uses legacy rollout-based observability. Set containers[].observability.enabled = false in your ${cliPresentation.displayConfigFileName} and deploy once, then deploy again with ${cliPresentation.configFields.containerObservabilityTargetPercentage} or ${cliPresentation.configFields.containerObservabilityTargetCount}.`, { telemetryMessage: "containers deploy observability migration blocked" });
 }
 __name$2(assertCanUseApplicationObservabilityTargeting, "assertCanUseApplicationObservabilityTargeting");
 function hasRolloutDiff(prevApp, nextApp) {
@@ -85818,7 +85887,7 @@ async function sshCommand(sshArgs) {
 	}
 	const ws = new import_websocket.default(sshResponse.url, { headers: {
 		authorization: `Bearer ${sshResponse.token}`,
-		"user-agent": "wrangler"
+		"user-agent": cliPresentation.cliName
 	} });
 	ws.binaryType = "arraybuffer";
 	if (useStdio) {
@@ -86710,7 +86779,7 @@ var __name$1 = (target$1, value) => __defProp$1(target$1, "name", {
 });
 
 //#endregion
-//#region ../workers-auth/dist/chunk-NDZDTP46.mjs
+//#region ../workers-auth/dist/chunk-2K52M2W5.mjs
 var import_undici$2 = require_undici();
 createRequire(import.meta.url || (typeof __filename === "string" ? __filename : "/"));
 var hasWarnedAboutDeprecatedV1ApiToken = false;
@@ -86887,7 +86956,7 @@ Set the CLOUDFLARE_ACCESS_CLIENT_ID and CLOUDFLARE_ACCESS_CLIENT_SECRET environm
 See https://developers.cloudflare.com/cloudflare-one/access-controls/service-credentials/service-tokens/`, { telemetryMessage: "user access missing service token non interactive" });
 	logger$2.debug("Spawning cloudflared to get Access token for domain:");
 	const output$1 = await spawnCloudflaredAccessLogin(buildProbeUrl(domain$1, options.previewToken), options.signal);
-	if (output$1.error) throw new UserError("To use Wrangler with Cloudflare Access, please install `cloudflared` from https://developers.cloudflare.com/cloudflare-one/connections/connect-apps/install-and-setup/installation", { telemetryMessage: "user access missing cloudflared" });
+	if (output$1.error) throw new UserError(`To use ${options.cliDisplayName} with Cloudflare Access, please install \`cloudflared\` from https://developers.cloudflare.com/cloudflare-one/connections/connect-apps/install-and-setup/installation`, { telemetryMessage: "user access missing cloudflared" });
 	const stringOutput = output$1.stdout;
 	logger$2.debug("cloudflared output:", stringOutput);
 	const matches = stringOutput.match(/fetched your token:\n\n(.*)/m);
@@ -87105,7 +87174,7 @@ function getCachedTemporaryPreviewAccount(storage) {
 	return temporaryPreviewAccount;
 }
 __name$1(getCachedTemporaryPreviewAccount, "getCachedTemporaryPreviewAccount");
-async function requestPowSolution(temporaryAccountLogger) {
+async function requestPowSolution(temporaryAccountLogger, cliDisplayName) {
 	const response = await (0, import_undici$2.fetch)(getTemporaryPreviewChallengeUrl(), {
 		method: "POST",
 		headers: { "Content-Type": "application/json" },
@@ -87120,7 +87189,7 @@ async function requestPowSolution(temporaryAccountLogger) {
 	}
 	const { challengeToken, seed, k, g } = body.result ?? {};
 	if (challengeToken === void 0 || seed === void 0 || k === void 0 || g === void 0) throw new FatalError("Failed to request a proof-of-work challenge because the response was missing required fields.", { telemetryMessage: "deploy temporary account challenge incomplete" });
-	if (!Number.isInteger(k) || !Number.isInteger(g) || k <= 0 || g <= 0 || k * g > POW_MAX_ITERATIONS || Buffer.from(seed, "base64url").length !== 32) throw new FatalError("The proof-of-work challenge is not supported by this version of Wrangler.", { telemetryMessage: "deploy temporary account challenge difficulty unsupported" });
+	if (!Number.isInteger(k) || !Number.isInteger(g) || k <= 0 || g <= 0 || k * g > POW_MAX_ITERATIONS || Buffer.from(seed, "base64url").length !== 32) throw new FatalError(`The proof-of-work challenge is not supported by this version of ${cliDisplayName}.`, { telemetryMessage: "deploy temporary account challenge difficulty unsupported" });
 	temporaryAccountLogger.log("Solving proof-of-work challenge…");
 	return solveChallenge({
 		challengeToken,
@@ -87130,8 +87199,8 @@ async function requestPowSolution(temporaryAccountLogger) {
 	});
 }
 __name$1(requestPowSolution, "requestPowSolution");
-async function createTemporaryPreviewAccount(temporaryAccountLogger, request$2) {
-	const pow = await requestPowSolution(temporaryAccountLogger);
+async function createTemporaryPreviewAccount(temporaryAccountLogger, request$2, cliDisplayName = "Wrangler") {
+	const pow = await requestPowSolution(temporaryAccountLogger, cliDisplayName);
 	const response = await (0, import_undici$2.fetch)(getTemporaryPreviewUrl(), {
 		method: "POST",
 		headers: { "Content-Type": "application/json" },
@@ -87184,14 +87253,14 @@ __name$1(createTemporaryPreviewAccount, "createTemporaryPreviewAccount");
 async function getOrCreateTemporaryPreviewAccount(options) {
 	const cachedPreviewAccount = getCachedTemporaryPreviewAccount(options.storage);
 	if (cachedPreviewAccount) {
-		if (options.request?.eventCode) throw new UserError("A temporary account is already cached. Rerun without --event-code to reuse it, or run `wrangler logout` and retry to create an account for this event.", { telemetryMessage: "deploy temporary event cache conflict" });
+		if (options.request?.eventCode) throw new UserError(`A temporary account is already cached. Rerun without --event-code to reuse it, or run \`${options.logoutCommand ?? "wrangler logout"}\` and retry to create an account for this event.`, { telemetryMessage: "deploy temporary event cache conflict" });
 		return {
 			account: cachedPreviewAccount,
 			cached: true
 		};
 	}
 	if (!await options.prompt(TEMPORARY_TERMS_PROMPT, TEMPORARY_TERMS_NOTICE)) throw new UserError(TEMPORARY_TERMS_ERROR, { telemetryMessage: "user temporary terms not accepted" });
-	const temporaryPreviewAccount = await createTemporaryPreviewAccount(options.temporaryAccountLogger, options.request);
+	const temporaryPreviewAccount = await createTemporaryPreviewAccount(options.temporaryAccountLogger, options.request, options.cliDisplayName);
 	options.storage.write(temporaryPreviewAccount);
 	return {
 		account: temporaryPreviewAccount,
@@ -87450,6 +87519,7 @@ function toErrorClass(rawError, description, uri) {
 	return error$3;
 }
 __name$1(toErrorClass, "toErrorClass");
+var TOKEN_REQUEST_TIMEOUT_MS = 3e4;
 function isReturningFromAuthServer(query, state, logger$2) {
 	if (query.error) throw toErrorClass(Array.isArray(query.error) ? query.error[0] : query.error, Array.isArray(query.error_description) ? query.error_description[0] : query.error_description, Array.isArray(query.error_uri) ? query.error_uri[0] : query.error_uri);
 	const code = query.code;
@@ -87482,7 +87552,7 @@ async function getAuthURL(scopes, clientId, redirectUri, state, generators) {
 	});
 }
 __name$1(getAuthURL, "getAuthURL");
-async function exchangeRefreshTokenForAccessToken(logger$2, isNonInteractiveOrCI2, clientId, storage) {
+async function exchangeRefreshTokenForAccessToken(logger$2, isNonInteractiveOrCI2, clientId, storage, cliDisplayName) {
 	const storedRefreshToken = readStoredAuthState({
 		warningLogger: logger$2,
 		storage
@@ -87492,7 +87562,7 @@ async function exchangeRefreshTokenForAccessToken(logger$2, isNonInteractiveOrCI
 		grant_type: "refresh_token",
 		refresh_token: storedRefreshToken?.value ?? "",
 		client_id: clientId
-	}), logger$2, isNonInteractiveOrCI2);
+	}), logger$2, isNonInteractiveOrCI2, cliDisplayName);
 	if (response.status >= 400) {
 		let tokenExchangeResErr = void 0;
 		try {
@@ -87520,7 +87590,7 @@ async function exchangeRefreshTokenForAccessToken(logger$2, isNonInteractiveOrCI
 	}
 }
 __name$1(exchangeRefreshTokenForAccessToken, "exchangeRefreshTokenForAccessToken");
-async function exchangeAuthCodeForAccessToken(state, logger$2, isNonInteractiveOrCI2, clientId, redirectUri) {
+async function exchangeAuthCodeForAccessToken(state, logger$2, isNonInteractiveOrCI2, clientId, redirectUri, cliDisplayName) {
 	const { authorizationCode, codeVerifier = "" } = state;
 	if (!codeVerifier) logger$2.warn("No code verifier is being sent.");
 	else if (!authorizationCode) logger$2.warn("No authorization grant code is being passed.");
@@ -87530,7 +87600,7 @@ async function exchangeAuthCodeForAccessToken(state, logger$2, isNonInteractiveO
 		redirect_uri: redirectUri,
 		client_id: clientId,
 		code_verifier: codeVerifier
-	}), logger$2, isNonInteractiveOrCI2);
+	}), logger$2, isNonInteractiveOrCI2, cliDisplayName);
 	if (!response.ok) {
 		const { error: error$3 } = await getJSONFromResponse(response, logger$2);
 		if (error$3 === "invalid_grant") logger$2.log("Expired! Auth code or refresh token needs to be renewed.");
@@ -87550,14 +87620,15 @@ async function exchangeAuthCodeForAccessToken(state, logger$2, isNonInteractiveO
 	};
 }
 __name$1(exchangeAuthCodeForAccessToken, "exchangeAuthCodeForAccessToken");
-async function fetchAuthToken(body, logger$2, isNonInteractiveOrCI2) {
+async function fetchAuthToken(body, logger$2, isNonInteractiveOrCI2, cliDisplayName) {
 	const headers = { "Content-Type": "application/x-www-form-urlencoded" };
 	logger$2.debug("fetching auth token", `grant_type=${body.get("grant_type") ?? "<unknown>"}`);
 	if (await domainUsesAccess(getAuthDomainFromEnv(), logger$2)) {
 		logger$2.debug("Using Cloudflare Access to get an access token for the auth request");
 		const accessHeaders = await getCloudflareAccessHeaders({
 			logger: logger$2,
-			isNonInteractiveOrCI: isNonInteractiveOrCI2
+			isNonInteractiveOrCI: isNonInteractiveOrCI2,
+			cliDisplayName
 		});
 		Object.assign(headers, accessHeaders);
 	}
@@ -87566,14 +87637,15 @@ async function fetchAuthToken(body, logger$2, isNonInteractiveOrCI2) {
 		const response = await (0, import_undici$2.fetch)(getTokenUrlFromEnv(), {
 			method: "POST",
 			body: body.toString(),
-			headers
+			headers,
+			signal: AbortSignal.timeout(TOKEN_REQUEST_TIMEOUT_MS)
 		});
 		if (!response.ok) logger$2.debug("Failed to fetch auth token:", response.status, response.statusText);
 		return response;
 	} catch (e) {
 		logger$2.debug("Failed to fetch auth token:", e);
 		const cause = e?.cause;
-		const code = typeof cause?.code === "string" ? ` (${cause.code})` : "";
+		const code = e?.name === "TimeoutError" ? ` (timed out after ${TOKEN_REQUEST_TIMEOUT_MS / 1e3} seconds)` : typeof cause?.code === "string" ? ` (${cause.code})` : "";
 		throw new ErrorAuthServerUnreachable(`Could not reach the Cloudflare auth server at ${getTokenUrlFromEnv()}${code}.`, {
 			cause: e,
 			telemetryMessage: "user oauth token endpoint unreachable"
@@ -87595,6 +87667,41 @@ async function getJSONFromResponse(response, logger$2) {
 	}
 }
 __name$1(getJSONFromResponse, "getJSONFromResponse");
+function renderOauthErrorPage(cliDisplayName, detail) {
+	const escape = /* @__PURE__ */ __name$1((value) => value.replace(/[&<>"']/g, (character) => ({
+		"&": "&amp;",
+		"<": "&lt;",
+		">": "&gt;",
+		"\"": "&quot;",
+		"'": "&#39;"
+	})[character]), "escape");
+	const codeRow = detail.code ? `<p>Code: <code>${escape(detail.code)}</code></p>` : "";
+	const descriptionRow = detail.description ? `<p class="detail">${escape(detail.description)}</p>` : "";
+	const escapedDisplayName = escape(cliDisplayName);
+	return esm_default`
+		<!doctype html>
+		<html lang="en">
+		<head>
+		  <meta charset="utf-8" />
+		  <title>${escapedDisplayName} login failed</title>
+		  <style>
+		    body { font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif; max-width: 720px; margin: 4rem auto; padding: 0 1rem; color: #1f2933; line-height: 1.5; }
+		    h1 { color: #c12d3f; }
+		    code { background: #f5f7fa; padding: 0.15em 0.3em; border-radius: 3px; }
+		    p.detail { background: #f5f7fa; padding: 1rem; border-radius: 4px; white-space: pre-wrap; }
+		  </style>
+		</head>
+		<body>
+		  <h1>${escapedDisplayName} login failed</h1>
+		  <p>The Cloudflare OAuth provider returned an error.</p>
+		  ${codeRow}
+		  ${descriptionRow}
+		  <p>You can close this tab and return to your terminal for more details.</p>
+		</body>
+		</html>
+	`;
+}
+__name$1(renderOauthErrorPage, "renderOauthErrorPage");
 async function getOauthToken(options, state, ctx, generators) {
 	const urlToOpen = await getAuthURL(options.scopes, options.clientId, options.redirectUri, state, generators);
 	const callbackPath = new URL(options.redirectUri).pathname;
@@ -87622,35 +87729,8 @@ async function getOauthToken(options, state, ctx, generators) {
 			}
 			__name$1(finish, "finish");
 			function renderErrorPage(detail) {
-				const escape = /* @__PURE__ */ __name$1((s) => s.replace(/[&<>"']/g, (c$1) => ({
-					"&": "&amp;",
-					"<": "&lt;",
-					">": "&gt;",
-					"\"": "&quot;",
-					"'": "&#39;"
-				})[c$1]), "escape");
-				const body = `<!doctype html>
-<html lang="en">
-<head>
-  <meta charset="utf-8" />
-  <title>Wrangler login failed</title>
-  <style>
-    body { font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif; max-width: 720px; margin: 4rem auto; padding: 0 1rem; color: #1f2933; line-height: 1.5; }
-    h1 { color: #c12d3f; }
-    code { background: #f5f7fa; padding: 0.15em 0.3em; border-radius: 3px; }
-    p.detail { background: #f5f7fa; padding: 1rem; border-radius: 4px; white-space: pre-wrap; }
-  </style>
-</head>
-<body>
-  <h1>Wrangler login failed</h1>
-  <p>The Cloudflare OAuth provider returned an error.</p>
-  ${detail.code ? `<p>Code: <code>${escape(detail.code)}</code></p>` : ""}
-  ${detail.description ? `<p class="detail">${escape(detail.description)}</p>` : ""}
-  <p>You can close this tab and return to your terminal for more details.</p>
-</body>
-</html>`;
 				res.writeHead(400, { "Content-Type": "text/html; charset=utf-8" });
-				res.end(body);
+				res.end(renderOauthErrorPage(ctx.cliDisplayName, detail));
 			}
 			__name$1(renderErrorPage, "renderErrorPage");
 			assert(req.url, "This request doesn't have a URL");
@@ -87684,7 +87764,7 @@ async function getOauthToken(options, state, ctx, generators) {
 						return;
 					}
 					try {
-						const exchange = await exchangeAuthCodeForAccessToken(state, ctx.logger, ctx.isNonInteractiveOrCI, options.clientId, options.redirectUri);
+						const exchange = await exchangeAuthCodeForAccessToken(state, ctx.logger, ctx.isNonInteractiveOrCI, options.clientId, options.redirectUri, ctx.cliDisplayName);
 						res.writeHead(307, { Location: options.granted.url });
 						res.end(() => {
 							finish(exchange);
@@ -87777,24 +87857,25 @@ async function readJson(response, logger$2) {
 	}
 }
 __name$1(readJson, "readJson");
-async function buildDeviceAuthHeaders(logger$2, isNonInteractiveOrCI2) {
+async function buildDeviceAuthHeaders(logger$2, isNonInteractiveOrCI2, cliDisplayName) {
 	const headers = { "Content-Type": "application/x-www-form-urlencoded" };
 	if (await domainUsesAccess(getAuthDomainFromEnv(), logger$2)) {
 		logger$2.debug("Using Cloudflare Access to get an access token for the device authorization request");
 		Object.assign(headers, await getCloudflareAccessHeaders({
 			logger: logger$2,
-			isNonInteractiveOrCI: isNonInteractiveOrCI2
+			isNonInteractiveOrCI: isNonInteractiveOrCI2,
+			cliDisplayName
 		}));
 	}
 	return headers;
 }
 __name$1(buildDeviceAuthHeaders, "buildDeviceAuthHeaders");
-async function requestDeviceAuthorization(scopes, clientId, logger$2, isNonInteractiveOrCI2) {
+async function requestDeviceAuthorization(scopes, clientId, logger$2, isNonInteractiveOrCI2, cliDisplayName) {
 	const params = new URLSearchParams({
 		client_id: clientId,
 		scope: [...scopes, "offline_access"].join(" ")
 	});
-	const headers = await buildDeviceAuthHeaders(logger$2, isNonInteractiveOrCI2);
+	const headers = await buildDeviceAuthHeaders(logger$2, isNonInteractiveOrCI2, cliDisplayName);
 	const deviceAuthUrl = getDeviceAuthUrl();
 	logger$2.debug("Fetching device authorization from", deviceAuthUrl);
 	const response = await (0, import_undici$2.fetch)(deviceAuthUrl, {
@@ -87816,12 +87897,12 @@ Enable debug logging to see the full response.`, { telemetryMessage: "user devic
 	return deviceAuth;
 }
 __name$1(requestDeviceAuthorization, "requestDeviceAuthorization");
-async function pollDeviceToken(deviceCode, clientId, logger$2, isNonInteractiveOrCI2) {
+async function pollDeviceToken(deviceCode, clientId, logger$2, isNonInteractiveOrCI2, cliDisplayName) {
 	const response = await fetchAuthToken(new URLSearchParams({
 		grant_type: "urn:ietf:params:oauth:grant-type:device_code",
 		device_code: deviceCode,
 		client_id: clientId
-	}), logger$2, isNonInteractiveOrCI2);
+	}), logger$2, isNonInteractiveOrCI2, cliDisplayName);
 	const body = await readJson(response, logger$2);
 	const error$3 = getStringMember(body, "error");
 	if (error$3 !== void 0) return {
@@ -87855,7 +87936,7 @@ function sleep(seconds) {
 __name$1(sleep, "sleep");
 async function getOauthTokenViaDeviceFlow(options, ctx) {
 	const { logger: logger$2, openInBrowser: openInBrowser$1, isNonInteractiveOrCI: isNonInteractiveOrCI2 } = ctx;
-	const deviceAuth = await requestDeviceAuthorization(options.scopes, options.clientId, logger$2, isNonInteractiveOrCI2);
+	const deviceAuth = await requestDeviceAuthorization(options.scopes, options.clientId, logger$2, isNonInteractiveOrCI2, ctx.cliDisplayName);
 	const authDomain = getAuthDomainFromEnv();
 	assertTrustedVerificationUrl(deviceAuth.verification_uri, {
 		field: "verification_uri",
@@ -87871,7 +87952,7 @@ async function getOauthTokenViaDeviceFlow(options, ctx) {
 	});
 	const maxDurationSeconds = Math.min(deviceAuth.expires_in, DEVICE_FLOW_MAX_DURATION_SECONDS);
 	logger$2.log(esm_default`
-		To authorize ${ctx.displayName}, please visit:
+		To authorize ${ctx.cliDisplayName}, please visit:
 
 		  ${deviceAuth.verification_uri}
 
@@ -87895,7 +87976,7 @@ Opening a link in your default browser: ${verificationUrl}`);
 		firstPoll = false;
 		let result;
 		try {
-			result = await pollDeviceToken(deviceAuth.device_code, options.clientId, logger$2, isNonInteractiveOrCI2);
+			result = await pollDeviceToken(deviceAuth.device_code, options.clientId, logger$2, isNonInteractiveOrCI2, ctx.cliDisplayName);
 		} catch (e) {
 			logger$2.debug("Ignoring transient error while polling for token:", e);
 			lastPollFailure = e instanceof Error ? e.message : String(e);
@@ -87914,7 +87995,7 @@ Enable debug logging to see the full response.`, { telemetryMessage: "user devic
 			case "slow_down":
 				intervalSeconds += 5;
 				continue;
-			case "access_denied": throw new UserError(`Consent denied. You must grant consent to ${ctx.displayName} in order to login.
+			case "access_denied": throw new UserError(`Consent denied. You must grant consent to ${ctx.cliDisplayName} in order to login.
 If you don't want to do this consider passing an API token via the \`CLOUDFLARE_API_TOKEN\` environment variable.`, { telemetryMessage: "user device-flow consent denied" });
 			case "expired_token": throw new UserError(`Device code expired before the request was approved. Please run \`${ctx.deviceLoginCommand}\` again to obtain a new code.`, { telemetryMessage: "user device-flow code expired" });
 			default: throw toErrorClass(result.error);
@@ -88021,7 +88102,7 @@ function createOAuthFlow(ctx) {
 			const { token: { value: oauth_token, expiry: expiration_time } = {
 				value: "",
 				expiry: ""
-			}, refreshToken: { value: refresh_token } = {}, scopes } = await exchangeRefreshTokenForAccessToken(ctx.logger, ctx.isNonInteractiveOrCI, getClientId(), storage);
+			}, refreshToken: { value: refresh_token } = {}, scopes } = await exchangeRefreshTokenForAccessToken(ctx.logger, ctx.isNonInteractiveOrCI, getClientId(), storage, ctx.cliDisplayName);
 			storage.write({
 				oauth_token,
 				expiration_time,
@@ -88031,7 +88112,7 @@ function createOAuthFlow(ctx) {
 			return "refreshed";
 		} catch (e) {
 			ctx.logger.debug(`Token refresh failed: ${e instanceof Error ? e.message : String(e)}`);
-			return e instanceof ErrorAuthServerUnreachable ? "unreachable" : "rejected";
+			return e instanceof ErrorAuthServerUnreachable || e instanceof Error && e.name === "TimeoutError" ? "unreachable" : "rejected";
 		}
 	}
 	__name$1(refreshToken, "refreshToken");
@@ -88143,7 +88224,7 @@ function createOAuthFlow(ctx) {
 	}
 	__name$1(getActiveTemporaryAccount, "getActiveTemporaryAccount");
 	async function activateTemporaryAccount() {
-		if (!ctx.temporary) throw new UserError("Temporary preview accounts are not supported by this CLI.", { telemetryMessage: "user temporary account unsupported" });
+		if (!ctx.temporary) throw new UserError(`Temporary preview accounts are not supported by ${ctx.cliDisplayName}.`, { telemetryMessage: "user temporary account unsupported" });
 		const result = await getOrCreateTemporaryPreviewAccount({
 			...ctx.temporary,
 			...temporaryRequest ? { request: temporaryRequest } : {}
@@ -89183,7 +89264,7 @@ function scrubEncryptedCredentials(options) {
 __name$1(scrubEncryptedCredentials, "scrubEncryptedCredentials");
 
 //#endregion
-//#region ../workers-auth/dist/chunk-PGZZHNWG.mjs
+//#region ../workers-auth/dist/chunk-F2REEYJC.mjs
 createRequire(import.meta.url || (typeof __filename === "string" ? __filename : "/"));
 function createPreferences(getConfigPath) {
 	function getUserPreferencesPath() {
@@ -89928,13 +90009,15 @@ Run \`${descriptor.commands.whoami}\` to check your current authentication statu
 		purgeOnLoginOrLogout: configCache.purgeConfigCaches,
 		clientId: descriptor.clientId,
 		consent: descriptor.consent,
-		displayName: descriptor.displayName,
+		cliDisplayName: descriptor.displayName,
 		deviceLoginCommand: descriptor.commands.deviceLogin,
 		redirectUri: descriptor.redirectUri,
 		storageFactory: credentialStorage.storageFactory,
 		allowGlobalAuthKey,
 		temporary: {
 			storage: createFileStorage(descriptor.fileFormat, descriptor.getTemporaryAccountConfigPath),
+			cliDisplayName: descriptor.displayName,
+			logoutCommand: descriptor.commands.logout,
 			prompt: createTemporaryTermsPrompt({
 				temporaryAccountLogger,
 				prompt: ctx.prompt
@@ -90385,6 +90468,7 @@ var CF_CLIENT_REGISTERED_SCOPES = [
 	"email_sending:read",
 	"email_sending:write",
 	"firstpartytags:write",
+	"hyperdrive-planetscale:setup",
 	"images:read",
 	"images:write",
 	"lb:edit",
@@ -90826,16 +90910,19 @@ var CF_CLIENT_REGISTERED_SCOPES = [
 	"zone.read",
 	"zone.write"
 ];
-var CF_UNGRANTABLE_SCOPE_SET = new Set([
+var CF_REGISTERED_BUT_UNGRANTABLE_SCOPES = [
 	"billing:read",
 	"billing:write",
 	"email_routing:read",
 	"email_sending:read",
 	"notebook-managed:read",
 	"oauth_account_ssl_and_certificates_write"
-]);
+];
+var CF_EXPLICIT_ONLY_SCOPES = ["hyperdrive-planetscale:setup"];
+var CF_UNGRANTABLE_SCOPE_SET = new Set(CF_REGISTERED_BUT_UNGRANTABLE_SCOPES);
 var CF_REQUESTABLE_SCOPES = CF_CLIENT_REGISTERED_SCOPES.filter((scope) => !CF_UNGRANTABLE_SCOPE_SET.has(scope));
-var DefaultScopeKeys$1 = [...CF_REQUESTABLE_SCOPES];
+var CF_EXPLICIT_ONLY_SCOPE_SET = new Set(CF_EXPLICIT_ONLY_SCOPES);
+var DefaultScopeKeys$1 = CF_REQUESTABLE_SCOPES.filter((scope) => !CF_EXPLICIT_ONLY_SCOPE_SET.has(scope));
 function setLoginScopeKeys$1(scopes) {
 	DefaultScopeKeys$1 = scopes;
 }
@@ -90867,6 +90954,7 @@ var CF_CLI = {
 	displayName: CF_DISPLAY_NAME,
 	commands: {
 		login: "cf auth login",
+		logout: "cf auth logout",
 		whoami: "cf auth whoami",
 		createProfile: "cf auth create",
 		deviceLogin: "cf auth login"
@@ -90993,6 +91081,7 @@ var WRANGLER_CLI = {
 	displayName: WRANGLER_DISPLAY_NAME,
 	commands: {
 		login: "wrangler login",
+		logout: "wrangler logout",
 		whoami: "wrangler whoami",
 		createProfile: "wrangler auth create",
 		deviceLogin: "wrangler login --device"
@@ -91731,7 +91820,7 @@ __name(createWorkerUploadForm, "createWorkerUploadForm");
 //#endregion
 //#region ../remote-bindings/dist/index.mjs
 var import_undici = require_undici();
-var version$2 = "0.0.45";
+var version$2 = "0.0.47";
 var NoDefaultValueProvided = class extends UserError {
 	constructor() {
 		super("This command cannot be run in a non-interactive context", { telemetryMessage: "remote bindings prompt default missing" });
@@ -92026,10 +92115,13 @@ async function getOrRegisterWorkersDevSubdomain(complianceConfig, account, abort
 * fails for any reason (expected with particular zone settings).
 * Rethrows AbortError so callers can handle cancellation.
 */
-async function tryExpandToken(exchangeUrl, abortSignal) {
+async function tryExpandToken(exchangeUrl, cliDisplayName, abortSignal) {
 	try {
 		const switchedExchangeUrl = new URL$1(exchangeUrl);
-		const headers = { ...await getAccessHeaders(switchedExchangeUrl.hostname, { logger }) };
+		const headers = { ...await getAccessHeaders(switchedExchangeUrl.hostname, {
+			logger,
+			cliDisplayName
+		}) };
 		logger.debug("-- START EXCHANGE API REQUEST:");
 		logger.debug("-- END EXCHANGE API REQUEST");
 		const exchangeResponse = await (0, import_undici.fetch)(switchedExchangeUrl, {
@@ -92052,10 +92144,10 @@ async function tryExpandToken(exchangeUrl, abortSignal) {
 /**
 * Generates a preview session token.
 */
-async function createPreviewSession(complianceConfig, account, abortSignal, name) {
+async function createPreviewSession(complianceConfig, account, abortSignal, name, cliDisplayName) {
 	const { accountId } = account;
 	const { token, exchange_url } = await fetchResult(complianceConfig, account, `/accounts/${accountId}/workers/subdomain/edge-preview`, void 0, withTimeout(abortSignal));
-	const previewSessionToken = exchange_url ? await tryExpandToken(exchange_url, withTimeout(abortSignal)) ?? token : token;
+	const previewSessionToken = exchange_url ? await tryExpandToken(exchange_url, cliDisplayName, withTimeout(abortSignal)) ?? token : token;
 	try {
 		return {
 			value: previewSessionToken,
@@ -92238,7 +92330,7 @@ var RemoteRuntimeController = class {
 	}
 	async #previewSession(props) {
 		try {
-			return await retryOnAPIFailure(() => createPreviewSession(props.complianceConfig, props, this.#abortController.signal, props.name), logger, void 0, void 0, this.#abortController.signal);
+			return await retryOnAPIFailure(() => createPreviewSession(props.complianceConfig, props, this.#abortController.signal, props.name, props.cliDisplayName), logger, void 0, void 0, this.#abortController.signal);
 		} catch (err) {
 			if (err instanceof Error && err.name == "AbortError") return;
 			handlePreviewSessionCreationError(err, props.accountId);
@@ -92295,7 +92387,8 @@ var RemoteRuntimeController = class {
 			complianceConfig: { compliance_region: config$2.complianceRegion },
 			accountId: auth.accountId,
 			apiToken: auth.apiToken,
-			name: config$2.name
+			name: config$2.name,
+			cliDisplayName: config$2.cliDisplayName
 		});
 	}
 	async #updatePreviewToken(config$2, bundle, auth, bundleId) {
@@ -92309,11 +92402,13 @@ var RemoteRuntimeController = class {
 			bindings: config$2.bindings,
 			compatibilityDate: config$2.compatibilityDate,
 			compatibilityFlags: config$2.compatibilityFlags,
+			cliDisplayName: config$2.cliDisplayName,
 			bundleId
 		});
 		if (bundleId !== this.#currentBundleId || !token) return false;
 		const accessHeaders = await getAccessHeaders(token.host, {
 			logger,
+			cliDisplayName: config$2.cliDisplayName,
 			previewToken: token.value
 		});
 		const proxyData = {
@@ -92515,6 +92610,7 @@ async function startRemoteProxySession(bindings, options) {
 	const rawBindings = toRawBindings(bindings);
 	const workerConfig = {
 		name: options.workerName ?? randomUUID(),
+		cliDisplayName: options.cliDisplayName,
 		entrypointSource: ProxyServerWorker_default,
 		compatibilityDate: "2025-04-28",
 		compatibilityFlags: [],
@@ -92616,6 +92712,7 @@ async function maybeStartOrUpdateRemoteProxySession(workerConfigObject, preExist
 		remoteProxySession = await startSession(remoteBindings, {
 			workerName: workerConfigObject.name,
 			complianceRegion: workerConfigObject.complianceRegion,
+			cliDisplayName: context.cliDisplayName,
 			auth: getRemoteBindingsAuthHook(auth, workerConfigObject.account_id, workerConfigObject.profileDir, context.logger),
 			logger: context.logger
 		});
@@ -92623,6 +92720,7 @@ async function maybeStartOrUpdateRemoteProxySession(workerConfigObject, preExist
 		if (Object.keys(remoteBindings).length > 0) remoteProxySession = await startSession(remoteBindings, {
 			workerName: workerConfigObject.name,
 			complianceRegion: workerConfigObject.complianceRegion,
+			cliDisplayName: context.cliDisplayName,
 			auth: getRemoteBindingsAuthHook(auth, workerConfigObject.account_id, workerConfigObject.profileDir, context.logger),
 			logger: context.logger
 		});
@@ -95507,7 +95605,10 @@ async function getDevMiniflareOptions(ctx, viteDevServer) {
 			complianceRegion: worker.config.compliance_region,
 			account_id: worker.config.account_id,
 			profileDir: resolvedViteConfig.root
-		}, preExistingRemoteProxySession ?? null, void 0, { logger: createRemoteBindingsLogger(viteDevServer.config.logger) });
+		}, preExistingRemoteProxySession ?? null, void 0, {
+			cliDisplayName: resolvedPluginConfig.cliDisplayName,
+			logger: createRemoteBindingsLogger(viteDevServer.config.logger)
+		});
 		if (worker.config.configPath && remoteProxySessionData) remoteProxySessionsDataMap.set(worker.config.configPath, remoteProxySessionData);
 		let containerBuildId;
 		if (worker.config.containers?.length && worker.config.dev.enable_containers) {
@@ -95725,7 +95826,10 @@ async function getPreviewMiniflareOptions(ctx, vitePreviewServer) {
 			complianceRegion: workerConfig.compliance_region,
 			account_id: workerConfig.account_id,
 			profileDir: resolvedViteConfig.root
-		}, preExistingRemoteProxySessionData ?? null, void 0, { logger: createRemoteBindingsLogger(vitePreviewServer.config.logger) });
+		}, preExistingRemoteProxySessionData ?? null, void 0, {
+			cliDisplayName: resolvedPluginConfig.cliDisplayName,
+			logger: createRemoteBindingsLogger(vitePreviewServer.config.logger)
+		});
 		if (workerConfig.configPath && remoteProxySessionData) remoteProxySessionsDataMap.set(workerConfig.configPath, remoteProxySessionData);
 		let containerBuildId;
 		if (workerConfig.containers?.length && workerConfig.dev.enable_containers) {

package/dist/{package-BJVbY14M.mjs → package-Dggcwsyy.mjs}

@@ -1,7 +1,7 @@
 //#region package.json
 var package_default = {
 	name: "@cloudflare/vite-plugin",
-	version: "1.63.1",
+	version: "1.64.0",
 	description: "Cloudflare plugin for Vite",
 	keywords: [
 		"cloudflare",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cloudflare/vite-plugin",
-  "version": "1.63.1",
+  "version": "1.64.0",
   "description": "Cloudflare plugin for Vite",
   "keywords": [
     "cloudflare",
@@ -41,11 +41,11 @@
   },
   "dependencies": {
     "unenv": "2.0.0-rc.24",
-    "workerd": "1.20261006.1",
+    "workerd": "1.20261012.1",
     "ws": "8.21.0",
     "@cloudflare/unenv-preset": "2.16.2",
-    "miniflare": "5.20261006.1-alpha",
-    "wrangler": "4.149.0"
+    "wrangler": "4.151.0",
+    "miniflare": "5.20261012.0-beta"
   },
   "devDependencies": {
     "@cloudflare/workers-types": "^5.20261006.1",
@@ -69,19 +69,19 @@
     "vite": "8.1.5",
     "vite-legacy": "npm:vite@7.1.12",
     "vitest": "4.1.0",
-    "@cloudflare/config": "0.24.1",
-    "@cloudflare/build-output-utils": "0.9.0",
-    "@cloudflare/containers-shared": "0.21.5",
+    "@cloudflare/config": "0.26.0",
+    "@cloudflare/build-output-utils": "0.9.2",
+    "@cloudflare/containers-shared": "0.21.7",
     "@cloudflare/mock-npm-registry": "0.0.0",
-    "@cloudflare/remote-bindings": "0.0.45",
+    "@cloudflare/remote-bindings": "0.0.47",
+    "@cloudflare/runtime-types": "0.1.11",
     "@cloudflare/workers-shared": "0.20.1",
-    "@cloudflare/runtime-types": "0.1.9",
     "@cloudflare/workers-tsconfig": "0.0.0",
-    "@cloudflare/workers-utils": "0.47.1"
+    "@cloudflare/workers-utils": "0.47.2"
   },
   "peerDependencies": {
     "vite": "^6.1.0 || ^7.0.0 || ^8.0.0",
-    "wrangler": "^4.149.0"
+    "wrangler": "^4.151.0"
   },
   "workers-sdk": {
     "prerelease": true