@cloudflare/vitest-plugin 1.1.5 → 1.1.7

package/dist/pool/index.mjs

@@ -11,13 +11,13 @@ import util, { TextEncoder as TextEncoder$1, inspect, stripVTControlCharacters,
 import os, { arch } from "node:os";
 import process5, { exit, stdin, stdout } from "node:process";
 import tty from "node:tty";
-import { execFileSync, spawn, spawnSync } from "node:child_process";
 import net from "node:net";
 import http from "node:http";
 import events, { EventEmitter } from "node:events";
 import { AsyncLocalStorage } from "node:async_hooks";
 import { assert as assert$1 } from "node:console";
 import fs$1 from "node:fs/promises";
+import { execFileSync, spawn, spawnSync } from "node:child_process";
 import * as timersPromises from "node:timers/promises";
 import { setTimeout as setTimeout$1 } from "node:timers/promises";
 import { DeferredPromise, Log, LogLevel, Miniflare, MiniflareCoreError, Mutex, Response, V4WorkerOptionsSchema, compileModuleRules, convertV4MiniflareOptions, getNodeCompat, kCurrentWorker, kUnsafeEphemeralUniqueKey, maybeApply, mergeWorkerOptions, parseModuleFallbackRequest, structuredSerializableReducers, structuredSerializableRevivers, testRegExps } from "miniflare";
@@ -75,10 +75,10 @@ function isAnnotation(value) {
 	return typeof value === "object" && value !== null && kMessages in value && kActual in value;
 }
 __name$3(isAnnotation, "isAnnotation");
-function isRecord$1(value) {
+function isRecord$2(value) {
 	return typeof value === "object" && value !== null;
 }
-__name$3(isRecord$1, "isRecord");
+__name$3(isRecord$2, "isRecord");
 function arrayShallowEqual(a, b) {
 	if (a.length !== b.length) return false;
 	for (let i = 0; i < a.length; i++) if (a[i] !== b[i]) return false;
@@ -107,7 +107,7 @@ function annotate(groupCounts, annotated, input, issue$1, path$3, groupId) {
 			if (unionIssues.length > 0) {
 				const multipleDistinct = hasMultipleDistinctMessages(unionIssues, 1);
 				let newGroupId;
-				if (isRecord$1(input) && multipleDistinct) {
+				if (isRecord$2(input) && multipleDistinct) {
 					newGroupId = groupCounts.size;
 					groupCounts.set(newGroupId, 0);
 				}
@@ -136,13 +136,13 @@ function annotate(groupCounts, annotated, input, issue$1, path$3, groupId) {
 		};
 	}
 	const [head, ...tail$1] = path$3;
-	assert(isRecord$1(input), "Expected object/array input for nested issue");
+	assert(isRecord$2(input), "Expected object/array input for nested issue");
 	if (annotated === void 0) if (Array.isArray(input)) annotated = new Array(input.length);
 	else {
 		const entries = Object.keys(input).map((key) => [key, void 0]);
 		annotated = Object.fromEntries(entries);
 	}
-	assert(isRecord$1(annotated), "Expected object/array for nested issue");
+	assert(isRecord$2(annotated), "Expected object/array for nested issue");
 	annotated[head] = annotate(groupCounts, annotated[head], input[head], issue$1, tail$1, groupId);
 	return annotated;
 }
@@ -188,7 +188,7 @@ ${error$2}`;
 		}
 		result += `${indent}${dim$2(`]${suffix}`)}`;
 		return result;
-	} else if (isRecord$1(annotated)) {
+	} else if (isRecord$2(annotated)) {
 		let result = `${indent}${dim$2(`${prefix}{`)}
 `;
 		const objectIndent = indent + "  ";
@@ -325,49 +325,58 @@ function createFatalError$1(message, isJson, options) {
 __name$3(createFatalError$1, "createFatalError");
 
 //#endregion
-//#region ../workers-utils/dist/chunk-V6JSHOVJ.mjs
+//#region ../workers-utils/dist/chunk-IQDQ5WRD.mjs
 function hasKnownExportType(entry) {
 	const type = entry?.type;
 	return type === "durable-object" || type === "worker";
 }
 __name$3(hasKnownExportType, "hasKnownExportType");
-function partitionExports(exports$1$1) {
+function partitionExports(exports$1) {
 	const partitioned = {
 		"durable-object": {},
 		worker: {}
 	};
-	if (exports$1$1 === void 0) return partitioned;
-	for (const [name, entry] of Object.entries(exports$1$1)) {
+	if (exports$1 === void 0) return partitioned;
+	for (const [name, entry] of Object.entries(exports$1)) {
 		if (!hasKnownExportType(entry)) continue;
 		partitioned[entry.type][name] = entry;
 	}
 	return partitioned;
 }
 __name$3(partitionExports, "partitionExports");
-function getDurableObjectExports(exports$1$1) {
-	return partitionExports(exports$1$1)["durable-object"];
+function getDurableObjectExports(exports$1) {
+	return partitionExports(exports$1)["durable-object"];
 }
 __name$3(getDurableObjectExports, "getDurableObjectExports");
-function hasDurableObjectExports(exports$1$1) {
-	return Object.keys(getDurableObjectExports(exports$1$1)).length > 0;
+function hasDurableObjectExports(exports$1) {
+	return Object.keys(getDurableObjectExports(exports$1)).length > 0;
 }
 __name$3(hasDurableObjectExports, "hasDurableObjectExports");
-function getContainerNameToClassNameMap(exports$1$1) {
+var CONTAINER_IMAGES_BINDING = "EXPERIMENTAL_CLOUDFLARE_CONTAINER_IMAGES";
+function isDurableObjectContainerApp(container) {
+	return container.scheduling_policy === "durable_object";
+}
+__name$3(isDurableObjectContainerApp, "isDurableObjectContainerApp");
+function getDurableObjectContainerApps(containers) {
+	return Array.isArray(containers) ? containers.filter(isDurableObjectContainerApp) : [];
+}
+__name$3(getDurableObjectContainerApps, "getDurableObjectContainerApps");
+function getContainerNameToClassNameMap(exports$1) {
 	const containerNameToClassName = /* @__PURE__ */ new Map();
-	for (const [className, entry] of Object.entries(getDurableObjectExports(exports$1$1))) if ("container" in entry && typeof entry.container === "string" && !containerNameToClassName.has(entry.container)) containerNameToClassName.set(entry.container, className);
+	for (const [className, entry] of Object.entries(getDurableObjectExports(exports$1))) if ("container" in entry && typeof entry.container === "string" && !containerNameToClassName.has(entry.container)) containerNameToClassName.set(entry.container, className);
 	return containerNameToClassName;
 }
 __name$3(getContainerNameToClassNameMap, "getContainerNameToClassNameMap");
-function resolveContainerClassName(container, exports$1$1) {
+function resolveContainerClassName(container, exports$1) {
 	if (container.class_name !== void 0) return container.class_name;
 	if (container.name === void 0) return;
-	return getContainerNameToClassNameMap(exports$1$1).get(container.name);
+	return getContainerNameToClassNameMap(exports$1).get(container.name);
 }
 __name$3(resolveContainerClassName, "resolveContainerClassName");
-function getContainerDurableObjectClassNames(containers, exports$1$1) {
+function getContainerDurableObjectClassNames(containers, exports$1) {
 	const classNames = /* @__PURE__ */ new Set();
 	for (const container of containers ?? []) {
-		const className = resolveContainerClassName(container, exports$1$1);
+		const className = resolveContainerClassName(container, exports$1);
 		if (className !== void 0) classNames.add(className);
 	}
 	return classNames;
@@ -2736,12 +2745,12 @@ function formatConfigSnippet(snippet, configPath, formatted = true) {
 __name$3(formatConfigSnippet, "formatConfigSnippet");
 
 //#endregion
-//#region ../workers-utils/dist/chunk-XADL62NU.mjs
-var DEFAULT_COMPAT_DATE = "2026-09-07";
+//#region ../workers-utils/dist/chunk-S3ANQ67D.mjs
+var DEFAULT_COMPAT_DATE = "2026-09-10";
 function assertNever(_value) {}
 __name$3(assertNever, "assertNever");
-function mapWorkerMetadataBindings(bindings$1) {
-	return bindings$1.filter((binding) => binding.type !== "secret_text").reduce((configObj, binding) => {
+function mapWorkerMetadataBindings(bindings) {
+	return bindings.filter((binding) => binding.type !== "secret_text").reduce((configObj, binding) => {
 		switch (binding.type) {
 			case "plain_text":
 				configObj.vars = {
@@ -3268,7 +3277,7 @@ function getGlobalWranglerCachePath() {
 __name$3(getGlobalWranglerCachePath, "getGlobalWranglerCachePath");
 
 //#endregion
-//#region ../workers-utils/dist/chunk-XUGGRRBO.mjs
+//#region ../workers-utils/dist/chunk-IYSONYTF.mjs
 var getC3CommandFromEnv = getEnvironmentVariableFactory({
 	variableName: "WRANGLER_C3_COMMAND",
 	defaultValue: /* @__PURE__ */ __name$3(() => "create cloudflare", "defaultValue")
@@ -3296,6 +3305,7 @@ var getCloudflareApiEnvironmentFromEnv = getEnvironmentVariableFactory({
 	choices: ["production", "staging"]
 });
 var COMPLIANCE_REGION_CONFIG_PUBLIC = { compliance_region: "public" };
+var COMPLIANCE_REGION_CONFIG_UNKNOWN = { compliance_region: void 0 };
 var getCloudflareComplianceRegionFromEnv = getEnvironmentVariableFactory({
 	variableName: "CLOUDFLARE_COMPLIANCE_REGION",
 	choices: ["public", "fedramp_high"]
@@ -3318,6 +3328,11 @@ function getComplianceRegionSubdomain(complianceConfig) {
 	return getCloudflareComplianceRegion(complianceConfig) === "fedramp_high" ? ".fed" : "";
 }
 __name$3(getComplianceRegionSubdomain, "getComplianceRegionSubdomain");
+function getCloudflareContainerRegistry(complianceConfig = COMPLIANCE_REGION_CONFIG_UNKNOWN) {
+	if (process.env.CLOUDFLARE_CONTAINER_REGISTRY) return process.env.CLOUDFLARE_CONTAINER_REGISTRY;
+	return `${process.env.WRANGLER_API_ENVIRONMENT === "staging" ? "staging." : ""}registry${getComplianceRegionSubdomain(complianceConfig)}.cloudflare.com`;
+}
+__name$3(getCloudflareContainerRegistry, "getCloudflareContainerRegistry");
 function getStagingSubdomain() {
 	return getCloudflareApiEnvironmentFromEnv() === "staging" ? ".staging" : "";
 }
@@ -9991,8 +10006,8 @@ var require_client_h1 = /* @__PURE__ */ __commonJS$2({ "../../node_modules/.pnpm
 		* @param {import('net').Socket} socket
 		* @param {*} llhttp
 		*/
-		constructor(client, socket, { exports: exports$2 }) {
-			this.llhttp = exports$2;
+		constructor(client, socket, { exports: exports$1 }) {
+			this.llhttp = exports$1;
 			this.ptr = this.llhttp.llhttp_alloc(constants$3.TYPE.RESPONSE);
 			this.client = client;
 			/**
@@ -26109,7 +26124,7 @@ var require_undici = /* @__PURE__ */ __commonJS$2({ "../../node_modules/.pnpm/un
 //#endregion
 //#region ../workers-utils/dist/index.mjs
 var import_undici$3 = require_undici();
-var require_vendors$1 = __commonJS$1({ "../../node_modules/.pnpm/ci-info@4.4.0/node_modules/ci-info/vendors.json"(exports$1$1, module$1) {
+var require_vendors$1 = __commonJS$1({ "../../node_modules/.pnpm/ci-info@4.4.0/node_modules/ci-info/vendors.json"(exports$1, module$1) {
 	module$1.exports = [
 		{
 			name: "Agola CI",
@@ -26435,26 +26450,26 @@ var require_vendors$1 = __commonJS$1({ "../../node_modules/.pnpm/ci-info@4.4.0/n
 		}
 	];
 } });
-var require_ci_info$1 = __commonJS$1({ "../../node_modules/.pnpm/ci-info@4.4.0/node_modules/ci-info/index.js"(exports$1$1) {
+var require_ci_info$1 = __commonJS$1({ "../../node_modules/.pnpm/ci-info@4.4.0/node_modules/ci-info/index.js"(exports$1) {
 	var vendors$1 = require_vendors$1();
 	var env$2 = process.env;
-	Object.defineProperty(exports$1$1, "_vendors", { value: vendors$1.map(function(v) {
+	Object.defineProperty(exports$1, "_vendors", { value: vendors$1.map(function(v) {
 		return v.constant;
 	}) });
-	exports$1$1.name = null;
-	exports$1$1.isPR = null;
-	exports$1$1.id = null;
+	exports$1.name = null;
+	exports$1.isPR = null;
+	exports$1.id = null;
 	if (env$2.CI !== "false") vendors$1.forEach(function(vendor) {
 		const isCI2 = (Array.isArray(vendor.env) ? vendor.env : [vendor.env]).every(function(obj) {
 			return checkEnv$1(obj);
 		});
-		exports$1$1[vendor.constant] = isCI2;
+		exports$1[vendor.constant] = isCI2;
 		if (!isCI2) return;
-		exports$1$1.name = vendor.name;
-		exports$1$1.isPR = checkPR$1(vendor);
-		exports$1$1.id = vendor.constant;
+		exports$1.name = vendor.name;
+		exports$1.isPR = checkPR$1(vendor);
+		exports$1.id = vendor.constant;
 	});
-	exports$1$1.isCI = !!(env$2.CI !== "false" && (env$2.BUILD_ID || env$2.BUILD_NUMBER || env$2.CI || env$2.CI_APP_ID || env$2.CI_BUILD_ID || env$2.CI_BUILD_NUMBER || env$2.CI_NAME || env$2.CONTINUOUS_INTEGRATION || env$2.RUN_ID || exports$1$1.name || false));
+	exports$1.isCI = !!(env$2.CI !== "false" && (env$2.BUILD_ID || env$2.BUILD_NUMBER || env$2.CI || env$2.CI_APP_ID || env$2.CI_BUILD_ID || env$2.CI_BUILD_NUMBER || env$2.CI_NAME || env$2.CONTINUOUS_INTEGRATION || env$2.RUN_ID || exports$1.name || false));
 	function checkEnv$1(obj) {
 		if (typeof obj === "string") return !!env$2[obj];
 		if ("env" in obj) return env$2[obj.env] && env$2[obj.env].includes(obj.includes);
@@ -26482,7 +26497,7 @@ var require_ci_info$1 = __commonJS$1({ "../../node_modules/.pnpm/ci-info@4.4.0/n
 	}
 	__name$3(checkPR$1, "checkPR");
 } });
-var require_command_exists$2 = __commonJS$1({ "../../node_modules/.pnpm/command-exists@1.2.9/node_modules/command-exists/lib/command-exists.js"(exports$1$1, module$1) {
+var require_command_exists$2 = __commonJS$1({ "../../node_modules/.pnpm/command-exists@1.2.9/node_modules/command-exists/lib/command-exists.js"(exports$1, module$1) {
 	var exec$3 = __require("child_process").exec;
 	var execSync$1 = __require("child_process").execSync;
 	var fs3 = __require("fs");
@@ -26586,14 +26601,14 @@ var require_command_exists$2 = __commonJS$1({ "../../node_modules/.pnpm/command-
 		else return commandExistsUnixSync$1(commandName, cleanedCommandName);
 	};
 } });
-var require_command_exists2 = __commonJS$1({ "../../node_modules/.pnpm/command-exists@1.2.9/node_modules/command-exists/index.js"(exports$1$1, module$1) {
+var require_command_exists2 = __commonJS$1({ "../../node_modules/.pnpm/command-exists@1.2.9/node_modules/command-exists/index.js"(exports$1, module$1) {
 	module$1.exports = require_command_exists$2();
 } });
-var require_ini = __commonJS$1({ "../../node_modules/.pnpm/ini@1.3.8/node_modules/ini/ini.js"(exports$1$1) {
-	exports$1$1.parse = exports$1$1.decode = decode3;
-	exports$1$1.stringify = exports$1$1.encode = encode3;
-	exports$1$1.safe = safe;
-	exports$1$1.unsafe = unsafe;
+var require_ini = __commonJS$1({ "../../node_modules/.pnpm/ini@1.3.8/node_modules/ini/ini.js"(exports$1) {
+	exports$1.parse = exports$1.decode = decode3;
+	exports$1.stringify = exports$1.encode = encode3;
+	exports$1.safe = safe;
+	exports$1.unsafe = unsafe;
 	var eol = typeof process !== "undefined" && process.platform === "win32" ? "\r\n" : "\n";
 	function encode3(obj, opt) {
 		var children = [];
@@ -26725,7 +26740,7 @@ var require_ini = __commonJS$1({ "../../node_modules/.pnpm/ini@1.3.8/node_module
 	}
 	__name$3(unsafe, "unsafe");
 } });
-var require_strip_json_comments = __commonJS$1({ "../../node_modules/.pnpm/strip-json-comments@2.0.1/node_modules/strip-json-comments/index.js"(exports$1$1, module$1) {
+var require_strip_json_comments = __commonJS$1({ "../../node_modules/.pnpm/strip-json-comments@2.0.1/node_modules/strip-json-comments/index.js"(exports$1, module$1) {
 	var singleComment = 1;
 	var multiComment = 2;
 	function stripWithoutWhitespace() {
@@ -26784,16 +26799,16 @@ var require_strip_json_comments = __commonJS$1({ "../../node_modules/.pnpm/strip
 		return ret + (insideComment ? strip(str.substr(offset)) : str.substr(offset));
 	};
 } });
-var require_utils = __commonJS$1({ "../../node_modules/.pnpm/rc@1.2.8/node_modules/rc/lib/utils.js"(exports$1$1) {
+var require_utils = __commonJS$1({ "../../node_modules/.pnpm/rc@1.2.8/node_modules/rc/lib/utils.js"(exports$1) {
 	var fs3 = __require("fs");
 	var ini = require_ini();
 	var path5 = __require("path");
 	var stripJsonComments = require_strip_json_comments();
-	var parse3$1 = exports$1$1.parse = function(content) {
+	var parse3$1 = exports$1.parse = function(content) {
 		if (/^\s*{/.test(content)) return JSON.parse(stripJsonComments(content));
 		return ini.parse(content);
 	};
-	var file2 = exports$1$1.file = function() {
+	var file2 = exports$1.file = function() {
 		var args = [].slice.call(arguments).filter(function(arg) {
 			return arg != null;
 		});
@@ -26805,11 +26820,11 @@ var require_utils = __commonJS$1({ "../../node_modules/.pnpm/rc@1.2.8/node_modul
 			return;
 		}
 	};
-	exports$1$1.json = function() {
+	exports$1.json = function() {
 		var content = file2.apply(null, arguments);
 		return content ? parse3$1(content) : null;
 	};
-	exports$1$1.env = function(prefix, env2) {
+	exports$1.env = function(prefix, env2) {
 		env2 = env2 || process.env;
 		var obj = {};
 		var l = prefix.length;
@@ -26827,7 +26842,7 @@ var require_utils = __commonJS$1({ "../../node_modules/.pnpm/rc@1.2.8/node_modul
 		}
 		return obj;
 	};
-	exports$1$1.find = function() {
+	exports$1.find = function() {
 		var rel = path5.join.apply(null, [].slice.call(arguments));
 		function find2(start, rel2) {
 			var file3 = path5.join(start, rel2);
@@ -26842,7 +26857,7 @@ var require_utils = __commonJS$1({ "../../node_modules/.pnpm/rc@1.2.8/node_modul
 		return find2(process.cwd(), rel);
 	};
 } });
-var require_deep_extend = __commonJS$1({ "../../node_modules/.pnpm/deep-extend@0.6.0/node_modules/deep-extend/lib/deep-extend.js"(exports$1$1, module$1) {
+var require_deep_extend = __commonJS$1({ "../../node_modules/.pnpm/deep-extend@0.6.0/node_modules/deep-extend/lib/deep-extend.js"(exports$1, module$1) {
 	function isSpecificValue(val) {
 		return val instanceof Buffer || val instanceof Date || val instanceof RegExp ? true : false;
 	}
@@ -26905,7 +26920,7 @@ var require_deep_extend = __commonJS$1({ "../../node_modules/.pnpm/deep-extend@0
 		return target;
 	};
 } });
-var require_minimist = __commonJS$1({ "../../node_modules/.pnpm/minimist@1.2.6/node_modules/minimist/index.js"(exports$1$1, module$1) {
+var require_minimist = __commonJS$1({ "../../node_modules/.pnpm/minimist@1.2.6/node_modules/minimist/index.js"(exports$1, module$1) {
 	module$1.exports = function(args, opts) {
 		if (!opts) opts = {};
 		var flags = {
@@ -27080,7 +27095,7 @@ var require_minimist = __commonJS$1({ "../../node_modules/.pnpm/minimist@1.2.6/n
 	}
 	__name$3(isConstructorOrProto, "isConstructorOrProto");
 } });
-var require_rc = __commonJS$1({ "../../node_modules/.pnpm/rc@1.2.8/node_modules/rc/index.js"(exports$1$1, module$1) {
+var require_rc = __commonJS$1({ "../../node_modules/.pnpm/rc@1.2.8/node_modules/rc/index.js"(exports$1, module$1) {
 	var cc = require_utils();
 	var join3 = __require("path").join;
 	var deepExtend = require_deep_extend();
@@ -27124,14 +27139,14 @@ var require_rc = __commonJS$1({ "../../node_modules/.pnpm/rc@1.2.8/node_modules/
 		]));
 	};
 } });
-var require_registry_url = __commonJS$1({ "../../node_modules/.pnpm/registry-url@3.1.0/node_modules/registry-url/index.js"(exports$1$1, module$1) {
+var require_registry_url = __commonJS$1({ "../../node_modules/.pnpm/registry-url@3.1.0/node_modules/registry-url/index.js"(exports$1, module$1) {
 	module$1.exports = function(scope) {
 		var rc = require_rc()("npm", { registry: "https://registry.npmjs.org/" });
 		var url2 = rc[scope + ":registry"] || rc.registry;
 		return url2.slice(-1) === "/" ? url2 : url2 + "/";
 	};
 } });
-var require_safe_buffer = __commonJS$1({ "../../node_modules/.pnpm/safe-buffer@5.2.1/node_modules/safe-buffer/index.js"(exports$1$1, module$1) {
+var require_safe_buffer = __commonJS$1({ "../../node_modules/.pnpm/safe-buffer@5.2.1/node_modules/safe-buffer/index.js"(exports$1, module$1) {
 	var buffer$1 = __require("buffer");
 	var Buffer2 = buffer$1.Buffer;
 	function copyProps(src$2, dst) {
@@ -27140,8 +27155,8 @@ var require_safe_buffer = __commonJS$1({ "../../node_modules/.pnpm/safe-buffer@5
 	__name$3(copyProps, "copyProps");
 	if (Buffer2.from && Buffer2.alloc && Buffer2.allocUnsafe && Buffer2.allocUnsafeSlow) module$1.exports = buffer$1;
 	else {
-		copyProps(buffer$1, exports$1$1);
-		exports$1$1.Buffer = SafeBuffer;
+		copyProps(buffer$1, exports$1);
+		exports$1.Buffer = SafeBuffer;
 	}
 	function SafeBuffer(arg, encodingOrOffset, length) {
 		return Buffer2(arg, encodingOrOffset, length);
@@ -27170,7 +27185,7 @@ var require_safe_buffer = __commonJS$1({ "../../node_modules/.pnpm/safe-buffer@5
 		return buffer$1.SlowBuffer(size);
 	};
 } });
-var require_base64 = __commonJS$1({ "../../node_modules/.pnpm/registry-auth-token@3.3.2/node_modules/registry-auth-token/base64.js"(exports$1$1, module$1) {
+var require_base64 = __commonJS$1({ "../../node_modules/.pnpm/registry-auth-token@3.3.2/node_modules/registry-auth-token/base64.js"(exports$1, module$1) {
 	var safeBuffer = require_safe_buffer().Buffer;
 	function decodeBase64(base643) {
 		return safeBuffer.from(base643, "base64").toString("utf8");
@@ -27185,7 +27200,7 @@ var require_base64 = __commonJS$1({ "../../node_modules/.pnpm/registry-auth-toke
 		encodeBase64
 	};
 } });
-var require_registry_auth_token = __commonJS$1({ "../../node_modules/.pnpm/registry-auth-token@3.3.2/node_modules/registry-auth-token/index.js"(exports$1$1, module$1) {
+var require_registry_auth_token = __commonJS$1({ "../../node_modules/.pnpm/registry-auth-token@3.3.2/node_modules/registry-auth-token/index.js"(exports$1, module$1) {
 	var url2 = __require("url");
 	var base643 = require_base64();
 	var decodeBase64 = base643.decodeBase64;
@@ -27260,7 +27275,7 @@ var require_registry_auth_token = __commonJS$1({ "../../node_modules/.pnpm/regis
 	}
 	__name$3(getTokenForUsernameAndPassword, "getTokenForUsernameAndPassword");
 } });
-var require_update_check = __commonJS$1({ "../../node_modules/.pnpm/update-check@1.5.4/node_modules/update-check/index.js"(exports$1$1, module$1) {
+var require_update_check = __commonJS$1({ "../../node_modules/.pnpm/update-check@1.5.4/node_modules/update-check/index.js"(exports$1, module$1) {
 	var { URL: URL2 } = __require("url");
 	var { join: join3 } = __require("path");
 	var fs3 = __require("fs");
@@ -28153,7 +28168,7 @@ __export(util_exports, {
 	parsedType: () => parsedType,
 	partial: () => partial,
 	pick: () => pick,
-	prefixIssues: () => prefixIssues,
+	prefixIssues: () => prefixIssues$1,
 	primitiveTypes: () => primitiveTypes,
 	promiseAllObject: () => promiseAllObject,
 	propertyKeyTypes: () => propertyKeyTypes,
@@ -28603,7 +28618,7 @@ function explicitlyAborted(x, startIndex = 0) {
 	return false;
 }
 __name$3(explicitlyAborted, "explicitlyAborted");
-function prefixIssues(path5, issues) {
+function prefixIssues$1(path5, issues) {
 	return issues.map((iss) => {
 		var _a3;
 		(_a3 = iss).path ?? (_a3.path = []);
@@ -28611,7 +28626,7 @@ function prefixIssues(path5, issues) {
 		return iss;
 	});
 }
-__name$3(prefixIssues, "prefixIssues");
+__name$3(prefixIssues$1, "prefixIssues");
 function unwrapMessage(message) {
 	return typeof message === "string" ? message : message?.message;
 }
@@ -29576,7 +29591,7 @@ var $ZodCheckEndsWith = /* @__PURE__ */ $constructor("$ZodCheckEndsWith", (inst,
 	};
 });
 function handleCheckPropertyResult(result, payload, property) {
-	if (result.issues.length) payload.issues.push(...prefixIssues(property, result.issues));
+	if (result.issues.length) payload.issues.push(...prefixIssues$1(property, result.issues));
 }
 __name$3(handleCheckPropertyResult, "handleCheckPropertyResult");
 var $ZodCheckProperty = /* @__PURE__ */ $constructor("$ZodCheckProperty", (inst, def) => {
@@ -30199,7 +30214,7 @@ var $ZodDate = /* @__PURE__ */ $constructor("$ZodDate", (inst, def) => {
 	};
 });
 function handleArrayResult(result, final, index) {
-	if (result.issues.length) final.issues.push(...prefixIssues(index, result.issues));
+	if (result.issues.length) final.issues.push(...prefixIssues$1(index, result.issues));
 	final.value[index] = result.value;
 }
 __name$3(handleArrayResult, "handleArrayResult");
@@ -30235,7 +30250,7 @@ function handlePropertyResult(result, final, key, input, isOptionalIn, isOptiona
 	const isPresent = key in input;
 	if (result.issues.length) {
 		if (isOptionalIn && isOptionalOut && !isPresent) return;
-		final.issues.push(...prefixIssues(key, result.issues));
+		final.issues.push(...prefixIssues$1(key, result.issues));
 	}
 	if (!isPresent && !isOptionalIn) {
 		if (!result.issues.length) final.issues.push({
@@ -30807,7 +30822,7 @@ function getTupleOptStart(items, key) {
 }
 __name$3(getTupleOptStart, "getTupleOptStart");
 function handleTupleResult(result, final, index) {
-	if (result.issues.length) final.issues.push(...prefixIssues(index, result.issues));
+	if (result.issues.length) final.issues.push(...prefixIssues$1(index, result.issues));
 	final.value[index] = result.value;
 }
 __name$3(handleTupleResult, "handleTupleResult");
@@ -30820,7 +30835,7 @@ function handleTupleResults(itemResults, final, items, input, optoutStart) {
 				final.value.length = i;
 				break;
 			}
-			final.issues.push(...prefixIssues(i, r2.issues));
+			final.issues.push(...prefixIssues$1(i, r2.issues));
 		}
 		final.value[i] = r2.value;
 	}
@@ -30871,11 +30886,11 @@ var $ZodRecord = /* @__PURE__ */ $constructor("$ZodRecord", (inst, def) => {
 					issues: []
 				}, ctx);
 				if (result instanceof Promise) proms.push(result.then((result2) => {
-					if (result2.issues.length) payload.issues.push(...prefixIssues(key, result2.issues));
+					if (result2.issues.length) payload.issues.push(...prefixIssues$1(key, result2.issues));
 					payload.value[outKey] = result2.value;
 				}));
 				else {
-					if (result.issues.length) payload.issues.push(...prefixIssues(key, result.issues));
+					if (result.issues.length) payload.issues.push(...prefixIssues$1(key, result.issues));
 					payload.value[outKey] = result.value;
 				}
 			}
@@ -30925,11 +30940,11 @@ var $ZodRecord = /* @__PURE__ */ $constructor("$ZodRecord", (inst, def) => {
 					issues: []
 				}, ctx);
 				if (result instanceof Promise) proms.push(result.then((result2) => {
-					if (result2.issues.length) payload.issues.push(...prefixIssues(key, result2.issues));
+					if (result2.issues.length) payload.issues.push(...prefixIssues$1(key, result2.issues));
 					payload.value[keyResult.value] = result2.value;
 				}));
 				else {
-					if (result.issues.length) payload.issues.push(...prefixIssues(key, result.issues));
+					if (result.issues.length) payload.issues.push(...prefixIssues$1(key, result.issues));
 					payload.value[keyResult.value] = result.value;
 				}
 			}
@@ -30972,7 +30987,7 @@ var $ZodMap = /* @__PURE__ */ $constructor("$ZodMap", (inst, def) => {
 	};
 });
 function handleMapResult(keyResult, valueResult, final, key, input, inst, ctx) {
-	if (keyResult.issues.length) if (propertyKeyTypes.has(typeof key)) final.issues.push(...prefixIssues(key, keyResult.issues));
+	if (keyResult.issues.length) if (propertyKeyTypes.has(typeof key)) final.issues.push(...prefixIssues$1(key, keyResult.issues));
 	else final.issues.push({
 		code: "invalid_key",
 		origin: "map",
@@ -30980,7 +30995,7 @@ function handleMapResult(keyResult, valueResult, final, key, input, inst, ctx) {
 		inst,
 		issues: keyResult.issues.map((iss) => finalizeIssue(iss, ctx, config()))
 	});
-	if (valueResult.issues.length) if (propertyKeyTypes.has(typeof key)) final.issues.push(...prefixIssues(key, valueResult.issues));
+	if (valueResult.issues.length) if (propertyKeyTypes.has(typeof key)) final.issues.push(...prefixIssues$1(key, valueResult.issues));
 	else final.issues.push({
 		origin: "map",
 		code: "invalid_element",
@@ -41472,14 +41487,14 @@ var getBindingNames = /* @__PURE__ */ __name$3((value) => {
 	if (typeof value !== "object" || value === null) return [];
 	if (isBindingList(value)) return value.bindings.map(({ name }) => name);
 	else if (isNamespaceList(value)) return value.map(({ binding }) => binding);
-	else if (isRecord(value)) {
+	else if (isRecord$1(value)) {
 		if (value["binding"] !== void 0) return [value["binding"]];
 		return Object.keys(value).filter((k) => value[k] !== void 0);
 	} else return [];
 }, "getBindingNames");
-var isBindingList = /* @__PURE__ */ __name$3((value) => isRecord(value) && "bindings" in value && Array.isArray(value.bindings) && value.bindings.every((binding) => isRecord(binding) && "name" in binding && typeof binding.name === "string"), "isBindingList");
-var isNamespaceList = /* @__PURE__ */ __name$3((value) => Array.isArray(value) && value.every((entry) => isRecord(entry) && "binding" in entry && typeof entry.binding === "string"), "isNamespaceList");
-var isRecord = /* @__PURE__ */ __name$3((value) => typeof value === "object" && value !== null && !Array.isArray(value), "isRecord");
+var isBindingList = /* @__PURE__ */ __name$3((value) => isRecord$1(value) && "bindings" in value && Array.isArray(value.bindings) && value.bindings.every((binding) => isRecord$1(binding) && "name" in binding && typeof binding.name === "string"), "isBindingList");
+var isNamespaceList = /* @__PURE__ */ __name$3((value) => Array.isArray(value) && value.every((entry) => isRecord$1(entry) && "binding" in entry && typeof entry.binding === "string"), "isNamespaceList");
+var isRecord$1 = /* @__PURE__ */ __name$3((value) => typeof value === "object" && value !== null && !Array.isArray(value), "isRecord");
 var validateUniqueNameProperty = /* @__PURE__ */ __name$3((diagnostics, field, value) => {
 	if (Array.isArray(value)) {
 		const nameCount = /* @__PURE__ */ new Map();
@@ -42054,7 +42069,7 @@ function normalizeAndValidateEnvironment(diagnostics, configPath, rawEnv, isDisp
 		exports: inheritable(diagnostics, topLevelEnv, rawEnv, "exports", validateExports, {}),
 		kv_namespaces: notInheritable(diagnostics, topLevelEnv, rawConfig, rawEnv, envName, "kv_namespaces", validateBindingArray(envName, validateKVBinding), []),
 		cloudchamber: notInheritable(diagnostics, topLevelEnv, rawConfig, rawEnv, envName, "cloudchamber", validateCloudchamberConfig, {}),
-		containers: notInheritable(diagnostics, topLevelEnv, rawConfig, rawEnv, envName, "containers", validateContainerApp(envName, rawEnv.name ?? rawConfig?.name, configPath), void 0),
+		containers: notInheritable(diagnostics, topLevelEnv, rawConfig, rawEnv, envName, "containers", validateContainerApp(envName, rawEnv.name ?? rawConfig?.name, configPath, { complianceConfig: { compliance_region: rawEnv.compliance_region ?? topLevelEnv?.compliance_region } }), void 0),
 		send_email: notInheritable(diagnostics, topLevelEnv, rawConfig, rawEnv, envName, "send_email", validateBindingArray(envName, validateSendEmailBinding), []),
 		queues: notInheritable(diagnostics, topLevelEnv, rawConfig, rawEnv, envName, "queues", validateQueues(envName), {
 			producers: [],
@@ -42675,6 +42690,11 @@ function validatePreviewsContainers(envName, configPath) {
 	const innerValidator = validateContainerApp(envName, void 0, configPath, { generateDefaultName: false });
 	return (diagnostics, field, value, config2) => {
 		if (Array.isArray(value)) {
+			const durableObjectPolicyFields = [...value.entries()].filter(([, entry]) => entry && typeof entry === "object" && entry.scheduling_policy === "durable_object").map(([index]) => `"${field}[${index}].scheduling_policy"`);
+			if (durableObjectPolicyFields.length > 0) {
+				diagnostics.errors.push(`${durableObjectPolicyFields.join(", ")} cannot be "durable_object". Durable Object-managed Containers are configured only in the top-level "containers" array.`);
+				return false;
+			}
 			const nameFields = [...value.entries()].filter(([, entry]) => entry && typeof entry === "object" && "name" in entry).map(([index]) => `"${field}[${index}].name"`);
 			if (nameFields.length > 0) {
 				diagnostics.errors.push(`${nameFields.join(", ")} cannot be set. A preview container's application name is generated from the worker name, preview slug, and Durable Object class name, so that separate previews of the same Worker do not collide. Remove it and identify the container with "class_name".`);
@@ -42699,6 +42719,63 @@ function validatePreviewsContainers(envName, configPath) {
 	};
 }
 __name$3(validatePreviewsContainers, "validatePreviewsContainers");
+function validateDurableObjectContainerImages(diagnostics, field, images, complianceConfig) {
+	if (images === void 0) return true;
+	if (typeof images !== "object" || images === null || Array.isArray(images) || Object.keys(images).length === 0) {
+		diagnostics.errors.push(`"${field}" must be a non-empty object when present.`);
+		return false;
+	}
+	let valid = true;
+	const entries = Object.entries(images);
+	if (entries.length > 100) {
+		diagnostics.errors.push(`"${field}" must contain at most 100 images.`);
+		valid = false;
+	}
+	for (const [imageName, imageValue] of entries) {
+		const imageField = `${field}.${imageName}`;
+		if (imageName.length === 0 || imageName.length > 128) {
+			diagnostics.errors.push(`"${field}" image names must be between 1 and 128 characters.`);
+			valid = false;
+		}
+		if (typeof imageValue !== "object" || imageValue === null || Array.isArray(imageValue)) {
+			diagnostics.errors.push(`"${imageField}" must be an object with either a "dockerfile" or "image" field.`);
+			valid = false;
+			continue;
+		}
+		const image = imageValue;
+		const hasDockerfile = image.dockerfile !== void 0;
+		const hasImage = image.image !== void 0;
+		if (hasDockerfile === hasImage) {
+			diagnostics.errors.push(`"${imageField}" must specify exactly one of "dockerfile" or "image".`);
+			valid = false;
+		}
+		if (hasDockerfile && (typeof image.dockerfile !== "string" || image.dockerfile.length === 0)) {
+			diagnostics.errors.push(`"${imageField}.dockerfile" must be a non-empty string.`);
+			valid = false;
+		}
+		if (hasImage && (typeof image.image !== "string" || image.image.length === 0)) {
+			diagnostics.errors.push(`"${imageField}.image" must be a non-empty string.`);
+			valid = false;
+		}
+		if (typeof image.image === "string" && image.image.length > 0) {
+			const registry2 = getCloudflareContainerRegistry(complianceConfig);
+			const prefix = `${registry2}/`;
+			const reference = image.image.slice(prefix.length);
+			const digestReference = reference.match(/^[a-z0-9]+(?:(?:[._]|__|-+)[a-z0-9]+)*(?:\/[a-z0-9]+(?:(?:[._]|__|-+)[a-z0-9]+)*)+@sha256:[a-f0-9]{64}$/);
+			if (!image.image.startsWith(prefix) || digestReference?.[0] !== reference) {
+				diagnostics.errors.push(`"${imageField}.image" must be a digest-pinned image in the managed registry, in the form "${registry2}/<account-id>/<repository>@sha256:<64 lowercase hex characters>".`);
+				valid = false;
+			}
+		}
+		const unsupportedFields = Object.keys(image).filter((property) => property !== "dockerfile" && property !== "image");
+		if (unsupportedFields.length > 0) {
+			diagnostics.errors.push(`Unexpected fields found in ${imageField} field: ${unsupportedFields.map((property) => `"${property}"`).join(", ")}`);
+			valid = false;
+		}
+	}
+	return valid;
+}
+__name$3(validateDurableObjectContainerImages, "validateDurableObjectContainerImages");
 function validateContainerApp(envName, topLevelName, configPath, options = {}) {
 	const { generateDefaultName = true } = options;
 	return (diagnostics, field, value, config2) => {
@@ -42708,15 +42785,30 @@ function validateContainerApp(envName, topLevelName, configPath, options = {}) {
 			return false;
 		}
 		for (const containerAppOptional of value) {
-			validateOptionalProperty(diagnostics, field, "class_name", containerAppOptional.class_name, "string");
+			const isDurableObjectManaged = containerAppOptional.scheduling_policy === "durable_object";
+			const hasValidDurableObjectClassName = typeof containerAppOptional.class_name === "string" && containerAppOptional.class_name.length > 0;
+			if (isDurableObjectManaged) {
+				if (!hasValidDurableObjectClassName) diagnostics.errors.push(`"containers.class_name" must be a non-empty string when "containers.scheduling_policy" is "durable_object".`);
+			} else validateOptionalProperty(diagnostics, field, "class_name", containerAppOptional.class_name, "string");
 			validateOptionalProperty(diagnostics, field, "name", containerAppOptional.name, "string");
-			if (generateDefaultName && !containerAppOptional.name) if (containerAppOptional.class_name === void 0) diagnostics.errors.push(`"containers.name" is required when "containers.class_name" is not defined, because there is no class name to derive a default name from. Either name this container and reference it from a Durable Object's \`exports\` entry, or set "containers.class_name".`);
+			if (generateDefaultName && !containerAppOptional.name && (!isDurableObjectManaged || hasValidDurableObjectClassName)) if (containerAppOptional.class_name === void 0) diagnostics.errors.push(`"containers.name" is required when "containers.class_name" is not defined, because there is no class name to derive a default name from. Either name this container and reference it from a Durable Object's \`exports\` entry, or set "containers.class_name".`);
 			else if (!topLevelName) diagnostics.errors.push(`Must have either a top level "name" and "containers.class_name" field defined, or have field "containers.name" defined.`);
 			else {
 				let name = `${topLevelName}-${containerAppOptional.class_name}`;
 				name += config2 === void 0 ? "" : `-${envName}`;
 				containerAppOptional.name = name.toLowerCase().replace(/ /g, "-");
 			}
+			if (isDurableObjectManaged) {
+				validateDurableObjectContainerImages(diagnostics, `${field}.images`, containerAppOptional.images, options.complianceConfig);
+				const unsupportedFields = Object.keys(containerAppOptional).filter((key) => ![
+					"name",
+					"class_name",
+					"scheduling_policy",
+					"images"
+				].includes(key));
+				if (unsupportedFields.length > 0) diagnostics.errors.push(`Unsupported fields for Durable Object-managed Containers in ${field}: ${unsupportedFields.map((key) => `"${key}"`).join(",")}. Only "name", "class_name", "scheduling_policy", and "images" are supported.`);
+				continue;
+			}
 			if (!containerAppOptional.configuration?.image && !containerAppOptional.image) diagnostics.errors.push(`"containers.image" field must be defined for each container app. This should be the path to your Dockerfile or an image URI pointing to the Cloudflare registry.`);
 			if ("configuration" in containerAppOptional) {
 				diagnostics.warnings.push(`"containers.configuration" is deprecated. Use top level "containers" fields instead. "configuration.image" should be "image", limits should be set via "instance_type".`);
@@ -42781,6 +42873,7 @@ function validateContainerApp(envName, topLevelName, configPath, options = {}) {
 				if (rolloutStepsCount > containerAppOptional.max_instances) diagnostics.errors.push(`"containers.rollout_step_percentage" cannot have more steps (${rolloutStepsCount}) than "max_instances" (${containerAppOptional.max_instances})`);
 			}
 			validateOptionalProperty(diagnostics, field, "image_vars", containerAppOptional.image_vars, "object");
+			validateContainerObservability(diagnostics, `${field}.observability`, containerAppOptional.observability, config2);
 			validateOptionalProperty(diagnostics, field, "scheduling_policy", containerAppOptional.scheduling_policy, "string", [
 				"regional",
 				"moon",
@@ -42799,6 +42892,7 @@ function validateContainerApp(envName, topLevelName, configPath, options = {}) {
 				"image",
 				"image_build_context",
 				"image_vars",
+				"observability",
 				"class_name",
 				"scheduling_policy",
 				"instance_type",
@@ -43289,6 +43383,7 @@ var validateBindingsHaveUniqueNames = /* @__PURE__ */ __name$3((diagnostics, con
 	const bindingNamesArray = Object.entries(friendlyBindingNames);
 	const bindingsGroupedByType = Object.fromEntries(bindingNamesArray.map(([bindingType, binding]) => [binding, getBindingNames(bindingType === "queues" ? config2[bindingType]?.producers : config2[bindingType])]));
 	bindingsGroupedByType["Secret"] = config2.secrets?.required ?? [];
+	bindingsGroupedByType["Container images"] = [CONTAINER_IMAGES_BINDING];
 	const bindingsGroupedByName = {};
 	for (const bindingType in bindingsGroupedByType) {
 		const bindingNames = bindingsGroupedByType[bindingType];
@@ -44036,6 +44131,77 @@ var validateExports = /* @__PURE__ */ __name$3((diagnostics, field, value) => {
 	}
 	return valid;
 }, "validateExports");
+var CONTAINER_OBSERVABILITY_TARGET_INSTANCE_PERCENTAGE_MIN = 1;
+var CONTAINER_OBSERVABILITY_TARGET_INSTANCE_PERCENTAGE_MAX = 99;
+var CONTAINER_OBSERVABILITY_TARGET_INSTANCE_COUNT_MIN = 1;
+function isContainerObservabilityEnabled(observability) {
+	return observability?.logs?.enabled === true || observability?.enabled === true;
+}
+__name$3(isContainerObservabilityEnabled, "isContainerObservabilityEnabled");
+function hasConflictingContainerObservabilityEnabledValues(observability) {
+	return typeof observability.enabled === "boolean" && typeof observability.logs?.enabled === "boolean" && observability.enabled !== observability.logs.enabled;
+}
+__name$3(hasConflictingContainerObservabilityEnabledValues, "hasConflictingContainerObservabilityEnabledValues");
+var validateContainerObservability = /* @__PURE__ */ __name$3((diagnostics, field, value) => {
+	if (value === void 0) return true;
+	if (typeof value !== "object" || value === null || Array.isArray(value)) {
+		diagnostics.errors.push(`"${field}" should be an object but got ${JSON.stringify(value)}.`);
+		return false;
+	}
+	const val = value;
+	let isValid = true;
+	isValid = validateOptionalProperty(diagnostics, field, "enabled", val.enabled, "boolean") && isValid;
+	if (val.logs !== void 0) if (typeof val.logs !== "object" || val.logs === null || Array.isArray(val.logs)) {
+		diagnostics.errors.push(`Expected "${field}.logs" to be of type object but got ${JSON.stringify(val.logs)}.`);
+		isValid = false;
+	} else {
+		isValid = validateOptionalProperty(diagnostics, field, "logs.enabled", val.logs.enabled, "boolean") && isValid;
+		isValid = validateAdditionalProperties(diagnostics, `${field}.logs`, Object.keys(val.logs), ["enabled"]) && isValid;
+	}
+	if (val.enabled === void 0 && val.target_instance_percentage === void 0 && val.target_instance_count === void 0 && (val.logs === void 0 || typeof val.logs === "object" && val.logs !== null && !Array.isArray(val.logs) && val.logs.enabled === void 0)) isValid = validateAtLeastOnePropertyRequired(diagnostics, field, [{
+		key: "enabled",
+		value: val.enabled,
+		type: "boolean"
+	}, {
+		key: "logs.enabled",
+		value: val.logs?.enabled,
+		type: "boolean"
+	}]) && isValid;
+	isValid = validateOptionalProperty(diagnostics, field, "target_instance_percentage", val.target_instance_percentage, "number") && isValid;
+	isValid = validateOptionalProperty(diagnostics, field, "target_instance_count", val.target_instance_count, "number") && isValid;
+	isValid = validateAdditionalProperties(diagnostics, field, Object.keys(val), [
+		"enabled",
+		"logs",
+		"target_instance_percentage",
+		"target_instance_count"
+	]) && isValid;
+	if (hasConflictingContainerObservabilityEnabledValues(val)) {
+		diagnostics.errors.push(`"${field}.enabled" and "${field}.logs.enabled" cannot be set to different values.`);
+		isValid = false;
+	}
+	if (val.target_instance_percentage !== void 0 && val.target_instance_count !== void 0) {
+		diagnostics.errors.push(`"${field}.target_instance_percentage" and "${field}.target_instance_count" cannot both be set.`);
+		isValid = false;
+	}
+	if (typeof val.target_instance_percentage === "number" && (!Number.isInteger(val.target_instance_percentage) || val.target_instance_percentage < CONTAINER_OBSERVABILITY_TARGET_INSTANCE_PERCENTAGE_MIN || val.target_instance_percentage > CONTAINER_OBSERVABILITY_TARGET_INSTANCE_PERCENTAGE_MAX)) {
+		diagnostics.errors.push(`"${field}.target_instance_percentage" must be an integer between ${CONTAINER_OBSERVABILITY_TARGET_INSTANCE_PERCENTAGE_MIN} and ${CONTAINER_OBSERVABILITY_TARGET_INSTANCE_PERCENTAGE_MAX} inclusive.`);
+		isValid = false;
+	}
+	if (typeof val.target_instance_count === "number" && (!Number.isInteger(val.target_instance_count) || val.target_instance_count < CONTAINER_OBSERVABILITY_TARGET_INSTANCE_COUNT_MIN)) {
+		diagnostics.errors.push(`"${field}.target_instance_count" must be a positive integer.`);
+		isValid = false;
+	}
+	const observabilityEnabled = isContainerObservabilityEnabled(val);
+	if (val.target_instance_percentage !== void 0 && !observabilityEnabled) {
+		diagnostics.errors.push(`"${field}.target_instance_percentage" requires "${field}.enabled" or "${field}.logs.enabled" to be true because container observability overrides root observability.`);
+		isValid = false;
+	}
+	if (val.target_instance_count !== void 0 && !observabilityEnabled) {
+		diagnostics.errors.push(`"${field}.target_instance_count" requires "${field}.enabled" or "${field}.logs.enabled" to be true because container observability overrides root observability.`);
+		isValid = false;
+	}
+	return isValid;
+}, "validateContainerObservability");
 var validateObservability = /* @__PURE__ */ __name$3((diagnostics, field, value) => {
 	if (value === void 0) return true;
 	if (typeof value !== "object" || value === null) {
@@ -44137,11 +44303,11 @@ var validateCache = /* @__PURE__ */ __name$3((diagnostics, field, value) => {
 	isValid = validateAdditionalProperties(diagnostics, field, Object.keys(val), ["enabled", "cross_version_cache"]) && isValid;
 	return isValid;
 }, "validateCache");
-function warnIfDurableObjectsHaveNoLifecycleConfig(diagnostics, durableObjects, migrations, exports$1$1, configPath) {
+function warnIfDurableObjectsHaveNoLifecycleConfig(diagnostics, durableObjects, migrations, exports$1, configPath) {
 	if (!Array.isArray(durableObjects.bindings) || durableObjects.bindings.length === 0) return;
 	const exportedDurableObjects = durableObjects.bindings.filter((binding) => !binding.script_name);
 	const exportsCovers = /* @__PURE__ */ __name$3((className) => {
-		const entry = exports$1$1?.[className];
+		const entry = exports$1?.[className];
 		if (entry === void 0 || entry.type !== "durable-object") return false;
 		const state = entry.state ?? "created";
 		return state === "created" || state === "expecting-transfer";
@@ -44163,11 +44329,11 @@ function warnIfDurableObjectsHaveNoLifecycleConfig(diagnostics, durableObjects,
 	\`\`\``);
 }
 __name$3(warnIfDurableObjectsHaveNoLifecycleConfig, "warnIfDurableObjectsHaveNoLifecycleConfig");
-function errorIfMigrationsAndExportsBothSet(diagnostics, migrations, exports$1$1) {
-	if (migrations.length > 0 && exports$1$1 !== void 0 && Object.values(exports$1$1).some((entry) => entry.type === "durable-object")) diagnostics.errors.push(`\`migrations\` and \`exports\` are mutually exclusive. Choose one or the other to declare your Durable Object lifecycle, but not both.`);
+function errorIfMigrationsAndExportsBothSet(diagnostics, migrations, exports$1) {
+	if (migrations.length > 0 && exports$1 !== void 0 && Object.values(exports$1).some((entry) => entry.type === "durable-object")) diagnostics.errors.push(`\`migrations\` and \`exports\` are mutually exclusive. Choose one or the other to declare your Durable Object lifecycle, but not both.`);
 }
 __name$3(errorIfMigrationsAndExportsBothSet, "errorIfMigrationsAndExportsBothSet");
-function validateContainerExportLinks(diagnostics, containers, exports$1$1, containersDeclaredElsewhere) {
+function validateContainerExportLinks(diagnostics, containers, exports$1, containersDeclaredElsewhere) {
 	if (containers !== void 0 && !Array.isArray(containers)) return;
 	if (containers === void 0 && containersDeclaredElsewhere) return;
 	const containersByName = /* @__PURE__ */ new Map();
@@ -44185,7 +44351,7 @@ function validateContainerExportLinks(diagnostics, containers, exports$1$1, cont
 	}
 	const overSubscribedClassNames = new Set([...containerCountByClassName].filter(([, count]) => count > 1).map(([className]) => className));
 	for (const className of [...overSubscribedClassNames].sort()) diagnostics.errors.push(`More than one container is attached to the Durable Object "${className}". A Durable Object can only have one container attached to it.`);
-	const durableObjectExports = getDurableObjectExports(exports$1$1);
+	const durableObjectExports = getDurableObjectExports(exports$1);
 	const liveExportClassNames = /* @__PURE__ */ new Set();
 	const classNamesByContainerName = /* @__PURE__ */ new Map();
 	for (const [className, entry] of Object.entries(durableObjectExports)) {
@@ -44199,7 +44365,7 @@ function validateContainerExportLinks(diagnostics, containers, exports$1$1, cont
 		classNamesByContainerName.set(entry.container, [...classNamesByContainerName.get(entry.container) ?? [], className]);
 	}
 	for (const [containerName, classNames] of classNamesByContainerName) if (classNames.length > 1) diagnostics.errors.push(`The container "${containerName}" is referenced by more than one Durable Object export (${classNames.join(", ")}). A container can only back a single Durable Object.`);
-	const containerNameToClassName = getContainerNameToClassNameMap(exports$1$1);
+	const containerNameToClassName = getContainerNameToClassNameMap(exports$1);
 	const usesDurableObjectExports = Object.keys(durableObjectExports).length > 0;
 	for (const container of containers ?? []) {
 		if (typeof container.name !== "string") continue;
@@ -44777,8 +44943,8 @@ function getBindingKey(type) {
 	return "binding";
 }
 __name$3(getBindingKey, "getBindingKey");
-function extractBindingsOfType(type, bindings$1) {
-	return Object.entries(bindings$1 ?? {}).filter((binding) => binding[1].type === type).map((binding) => ({
+function extractBindingsOfType(type, bindings) {
+	return Object.entries(bindings ?? {}).filter((binding) => binding[1].type === type).map((binding) => ({
 		...binding[1],
 		[getBindingKey(type)]: binding[0]
 	}));
@@ -44795,7 +44961,7 @@ __name$3(getBindings, "getBindings");
 var { dim: dim$1, white: white$1 } = source_default;
 var brandColor$1 = source_default.hex("#BD5B08");
 var isConnectedStatusExplained = false;
-function printBindings(bindings$1, options) {
+function printBindings(bindings, options) {
 	const { containers = [], log: log$2, streamingTailConsumers = [], tailConsumers = [] } = options;
 	const context = options;
 	let hasConnectionStatus = false;
@@ -44810,48 +44976,48 @@ function printBindings(bindings$1, options) {
 		return `${s.substring(0, maxLength - 3)}...`;
 	}, "truncate");
 	const output = [];
-	const data_blobs = extractBindingsOfType("data_blob", bindings$1);
-	const durable_objects = extractBindingsOfType("durable_object_namespace", bindings$1);
-	const workflows = extractBindingsOfType("workflow", bindings$1);
-	const kv_namespaces = extractBindingsOfType("kv_namespace", bindings$1);
-	const send_email = extractBindingsOfType("send_email", bindings$1);
-	const queues = extractBindingsOfType("queue", bindings$1);
-	const d1_databases = extractBindingsOfType("d1", bindings$1);
-	const vectorize = extractBindingsOfType("vectorize", bindings$1);
-	const ai_search_namespaces = extractBindingsOfType("ai_search_namespace", bindings$1);
-	const ai_search = extractBindingsOfType("ai_search", bindings$1);
-	const websearch = extractBindingsOfType("websearch", bindings$1);
-	const agent_memory = extractBindingsOfType("agent_memory", bindings$1);
-	const hyperdrive = extractBindingsOfType("hyperdrive", bindings$1);
-	const r2_buckets = extractBindingsOfType("r2_bucket", bindings$1);
-	const logfwdr = extractBindingsOfType("logfwdr", bindings$1);
-	const secrets_store_secrets = extractBindingsOfType("secrets_store_secret", bindings$1);
-	const artifacts = extractBindingsOfType("artifacts", bindings$1);
-	const services = extractBindingsOfType("service", bindings$1);
-	const vpc_services = extractBindingsOfType("vpc_service", bindings$1);
-	const vpc_networks = extractBindingsOfType("vpc_network", bindings$1);
-	const analytics_engine_datasets = extractBindingsOfType("analytics_engine", bindings$1);
-	const text_blobs = extractBindingsOfType("text_blob", bindings$1);
-	const browser = extractBindingsOfType("browser", bindings$1);
-	const images = extractBindingsOfType("images", bindings$1);
-	const stream$2 = extractBindingsOfType("stream", bindings$1);
-	const ai = extractBindingsOfType("ai", bindings$1);
-	const version_metadata = extractBindingsOfType("version_metadata", bindings$1);
-	const vars = Object.entries(bindings$1 ?? {}).filter(([_, binding]) => binding.type === "plain_text" || binding.type === "json" || binding.type === "secret_text").map(([name, binding]) => ({
+	const data_blobs = extractBindingsOfType("data_blob", bindings);
+	const durable_objects = extractBindingsOfType("durable_object_namespace", bindings);
+	const workflows = extractBindingsOfType("workflow", bindings);
+	const kv_namespaces = extractBindingsOfType("kv_namespace", bindings);
+	const send_email = extractBindingsOfType("send_email", bindings);
+	const queues = extractBindingsOfType("queue", bindings);
+	const d1_databases = extractBindingsOfType("d1", bindings);
+	const vectorize = extractBindingsOfType("vectorize", bindings);
+	const ai_search_namespaces = extractBindingsOfType("ai_search_namespace", bindings);
+	const ai_search = extractBindingsOfType("ai_search", bindings);
+	const websearch = extractBindingsOfType("websearch", bindings);
+	const agent_memory = extractBindingsOfType("agent_memory", bindings);
+	const hyperdrive = extractBindingsOfType("hyperdrive", bindings);
+	const r2_buckets = extractBindingsOfType("r2_bucket", bindings);
+	const logfwdr = extractBindingsOfType("logfwdr", bindings);
+	const secrets_store_secrets = extractBindingsOfType("secrets_store_secret", bindings);
+	const artifacts = extractBindingsOfType("artifacts", bindings);
+	const services = extractBindingsOfType("service", bindings);
+	const vpc_services = extractBindingsOfType("vpc_service", bindings);
+	const vpc_networks = extractBindingsOfType("vpc_network", bindings);
+	const analytics_engine_datasets = extractBindingsOfType("analytics_engine", bindings);
+	const text_blobs = extractBindingsOfType("text_blob", bindings);
+	const browser = extractBindingsOfType("browser", bindings);
+	const images = extractBindingsOfType("images", bindings);
+	const stream$2 = extractBindingsOfType("stream", bindings);
+	const ai = extractBindingsOfType("ai", bindings);
+	const version_metadata = extractBindingsOfType("version_metadata", bindings);
+	const vars = Object.entries(bindings ?? {}).filter(([_, binding]) => binding.type === "plain_text" || binding.type === "json" || binding.type === "secret_text").map(([name, binding]) => ({
 		binding: name,
 		...binding
 	}));
-	const wasm_modules = extractBindingsOfType("wasm_module", bindings$1);
-	const dispatch_namespaces = extractBindingsOfType("dispatch_namespace", bindings$1);
-	const mtls_certificates = extractBindingsOfType("mtls_certificate", bindings$1);
-	const pipelines = extractBindingsOfType("pipeline", bindings$1);
-	const ratelimits = extractBindingsOfType("ratelimit", bindings$1);
-	const assets = extractBindingsOfType("assets", bindings$1);
-	const unsafe_hello_world = extractBindingsOfType("unsafe_hello_world", bindings$1);
-	const flagship = extractBindingsOfType("flagship", bindings$1);
-	const media = extractBindingsOfType("media", bindings$1);
-	const worker_loaders = extractBindingsOfType("worker_loader", bindings$1);
-	const unsafe_bindings = Object.entries(bindings$1 ?? {}).filter(([_, binding]) => isUnsafeBindingType(binding.type) && binding.type !== "unsafe_hello_world").map(([name, binding]) => ({
+	const wasm_modules = extractBindingsOfType("wasm_module", bindings);
+	const dispatch_namespaces = extractBindingsOfType("dispatch_namespace", bindings);
+	const mtls_certificates = extractBindingsOfType("mtls_certificate", bindings);
+	const pipelines = extractBindingsOfType("pipeline", bindings);
+	const ratelimits = extractBindingsOfType("ratelimit", bindings);
+	const assets = extractBindingsOfType("assets", bindings);
+	const unsafe_hello_world = extractBindingsOfType("unsafe_hello_world", bindings);
+	const flagship = extractBindingsOfType("flagship", bindings);
+	const media = extractBindingsOfType("media", bindings);
+	const worker_loaders = extractBindingsOfType("worker_loader", bindings);
+	const unsafe_bindings = Object.entries(bindings ?? {}).filter(([_, binding]) => isUnsafeBindingType(binding.type) && binding.type !== "unsafe_hello_world").map(([name, binding]) => ({
 		name,
 		...binding
 	}));
@@ -45254,7 +45420,7 @@ ${allTailConsumers.map(({ service, streaming }) => {
 		let containersTitle = "The following containers are available:";
 		if (context.name && isMultiWorker) containersTitle = `The following containers are available from ${source_default.blue(context.name)}:`;
 		log$2(`${containersTitle}
-${containers.map((c$1) => `- ${c$1.name} (${c$1.image})`).join("\n")}`);
+${containers.map((container) => container.scheduling_policy === "durable_object" ? `- ${container.class_name} (durable_object)` : `- ${container.name} (${container.image})`).join("\n")}`);
 		log$2("");
 	}
 	if (context.unsafeMetadata) {
@@ -45586,6 +45752,267 @@ function getWranglerTmpDir(projectRoot, prefix, cleanup = true) {
 	};
 }
 __name$3(getWranglerTmpDir, "getWranglerTmpDir");
+function buildDetailedError(message, ...extra) {
+	return new ParseError({
+		text: message,
+		notes: extra.map((text) => ({ text })),
+		telemetryMessage: false
+	});
+}
+__name$3(buildDetailedError, "buildDetailedError");
+function maybeThrowFriendlyError(error51) {
+	if (error51.message === "workers.api.error.email_verification_required") throw buildDetailedError("Please verify your account's email address and try again.", "Check your email for a verification link, or login to https://dash.cloudflare.com and request a new one.");
+}
+__name$3(maybeThrowFriendlyError, "maybeThrowFriendlyError");
+function logHeaders(headers, logger$1) {
+	const clone2 = cloneHeaders(headers);
+	clone2.delete("Authorization");
+	logger$1.debugWithSanitization?.("HEADERS:", JSON.stringify(Object.fromEntries(clone2), null, 2));
+}
+__name$3(logHeaders, "logHeaders");
+async function performApiFetchBase(complianceConfig, resource, init$2 = {}, userAgent, logger$1, queryParams, abortSignal, credentials) {
+	assert(credentials, "credentials are required for performApiFetch");
+	const method = init$2.method ?? "GET";
+	assert(resource.startsWith("/"), `CF API fetch - resource path must start with a "/" but got "${resource}"`);
+	const headers = cloneHeaders(new import_undici$3.Headers(init$2.headers));
+	addAuthorizationHeader(headers, credentials);
+	headers.set("User-Agent", userAgent);
+	maybeAddTraceHeader(headers);
+	const queryString = queryParams ? `?${queryParams.toString()}` : "";
+	logger$1.debug(`-- START CF API REQUEST: ${method} ${getCloudflareApiBaseUrl(complianceConfig)}${resource}`);
+	logger$1.debugWithSanitization?.("QUERY STRING:", queryString);
+	logHeaders(headers, logger$1);
+	logger$1.debugWithSanitization?.("INIT:", JSON.stringify({ ...init$2 }, null, 2));
+	if (init$2.body instanceof import_undici$3.FormData) logger$1.debugWithSanitization?.("BODY:", await new import_undici$3.Response(init$2.body).text(), null, 2);
+	logger$1.debug("-- END CF API REQUEST");
+	return await (0, import_undici$3.fetch)(`${getCloudflareApiBaseUrl(complianceConfig)}${resource}${queryString}`, {
+		method,
+		...init$2,
+		headers,
+		signal: abortSignal
+	});
+}
+__name$3(performApiFetchBase, "performApiFetchBase");
+async function fetchInternalBase(complianceConfig, resource, init$2 = {}, userAgent, logger$1, queryParams, abortSignal, credentials) {
+	const method = init$2.method ?? "GET";
+	const response = await performApiFetchBase(complianceConfig, resource, init$2, userAgent, logger$1, queryParams, abortSignal, credentials);
+	const jsonText = await response.text();
+	logger$1.debug("-- START CF API RESPONSE:", response.statusText, response.status);
+	logHeaders(response.headers, logger$1);
+	logger$1.debugWithSanitization?.("RESPONSE:", jsonText);
+	logger$1.debug("-- END CF API RESPONSE");
+	const retryAfterMs = parseRetryAfterMs(response.headers);
+	if (!jsonText && (response.status === 204 || response.status === 205)) return {
+		response: {
+			result: {},
+			success: true,
+			errors: [],
+			messages: []
+		},
+		status: response.status,
+		retryAfterMs
+	};
+	if (isWAFBlockResponse(response.headers)) throwWAFBlockError(response.headers, method, resource, response.status, response.statusText, retryAfterMs);
+	try {
+		return {
+			response: parseJSON(jsonText),
+			status: response.status,
+			retryAfterMs
+		};
+	} catch {
+		const rayId = extractWAFBlockRayId(response.headers);
+		throw new APIError({
+			text: "Received a malformed response from the API",
+			notes: [
+				{ text: truncate(jsonText, 100) },
+				{ text: `${method} ${resource} -> ${response.status} ${response.statusText}` },
+				...rayId ? [{ text: `Cloudflare Ray ID: ${rayId}` }] : []
+			],
+			status: response.status,
+			retryAfterMs,
+			telemetryMessage: false
+		});
+	}
+}
+__name$3(fetchInternalBase, "fetchInternalBase");
+async function fetchResultBase(complianceConfig, resource, init$2 = {}, userAgent, logger$1, queryParams, abortSignal, credentials) {
+	const { response: json2, status: status$1, retryAfterMs } = await fetchInternalBase(complianceConfig, resource, init$2, userAgent, logger$1, queryParams, abortSignal, credentials);
+	if (json2.success) return json2.result;
+	else throwFetchError(resource, json2, status$1, retryAfterMs);
+}
+__name$3(fetchResultBase, "fetchResultBase");
+async function fetchListResultBase(complianceConfig, resource, init$2 = {}, userAgent, logger$1, queryParams, credentials) {
+	const results = [];
+	let getMoreResults = true;
+	let cursor$1;
+	while (getMoreResults) {
+		if (cursor$1) {
+			queryParams = new URLSearchParams$1(queryParams);
+			queryParams.set("cursor", cursor$1);
+		}
+		const { response: json2, status: status$1, retryAfterMs } = await fetchInternalBase(complianceConfig, resource, init$2, userAgent, logger$1, queryParams, void 0, credentials);
+		if (json2.success) {
+			results.push(...json2.result);
+			if (hasCursor(json2.result_info)) cursor$1 = json2.result_info?.cursor;
+			else getMoreResults = false;
+		} else throwFetchError(resource, json2, status$1, retryAfterMs);
+	}
+	return results;
+}
+__name$3(fetchListResultBase, "fetchListResultBase");
+function truncate(text, maxLength) {
+	const { length } = text;
+	if (length <= maxLength) return text;
+	return `${text.substring(0, maxLength)}... (length = ${length})`;
+}
+__name$3(truncate, "truncate");
+function isWAFBlockResponse(headers) {
+	return headers.get("cf-mitigated") === "challenge";
+}
+__name$3(isWAFBlockResponse, "isWAFBlockResponse");
+function parseRetryAfterValue(retryAfter) {
+	if (!retryAfter) return;
+	if (/^\d+$/.test(retryAfter.trim())) return Number(retryAfter) * 1e3;
+	const retryAfterDate = new Date(retryAfter);
+	if (!Number.isNaN(retryAfterDate.getTime())) return Math.max(0, retryAfterDate.getTime() - Date.now());
+}
+__name$3(parseRetryAfterValue, "parseRetryAfterValue");
+function parseRetryAfterMs(headers) {
+	return parseRetryAfterValue(headers.get("Retry-After"));
+}
+__name$3(parseRetryAfterMs, "parseRetryAfterMs");
+function extractWAFBlockRayId(headers) {
+	return headers.get("cf-ray") ?? void 0;
+}
+__name$3(extractWAFBlockRayId, "extractWAFBlockRayId");
+function extractAccountTag(resource) {
+	return (/* @__PURE__ */ new RegExp("/accounts/([a-zA-Z0-9]+)/?")).exec(resource)?.[1];
+}
+__name$3(extractAccountTag, "extractAccountTag");
+function hasMorePages(result_info) {
+	const page = result_info?.page;
+	const per_page = result_info?.per_page;
+	const total = result_info?.total_count;
+	return page !== void 0 && per_page !== void 0 && total !== void 0 && page * per_page < total;
+}
+__name$3(hasMorePages, "hasMorePages");
+function renderError(err, level = 0) {
+	const indent = "  ".repeat(level);
+	const message = err.message ?? "";
+	const chainedMessages = "error_chain" in err ? err.error_chain?.map((chainedError) => `
+
+${indent}- ${renderError(chainedError, level + 1)}`).join("\n") ?? "" : "";
+	return (err.code ? `${message} [code: ${err.code}]` : message) + (err.documentation_url ? `
+${indent}To learn more about this error, visit: ${err.documentation_url}` : "") + chainedMessages;
+}
+__name$3(renderError, "renderError");
+function addAuthorizationHeader(headers, auth, overrideExisting = false) {
+	if (!headers.has("Authorization") || overrideExisting) if ("apiToken" in auth) {
+		const authorizationHeader = `Bearer ${auth.apiToken}`;
+		validateAuthorizationHeaderValue(authorizationHeader);
+		headers.set("Authorization", authorizationHeader);
+	} else {
+		headers.set("X-Auth-Key", auth.authKey);
+		headers.set("X-Auth-Email", auth.authEmail);
+	}
+}
+__name$3(addAuthorizationHeader, "addAuthorizationHeader");
+function validateAuthorizationHeaderValue(value) {
+	for (const character of value) {
+		const codePoint = character.codePointAt(0);
+		if (codePoint === void 0 || codePoint > 255) throw new UserError$1(`The configured Cloudflare API token contains a character that cannot be used in an HTTP Authorization header: ${formatAuthorizationHeaderCharacter(character, codePoint)}. Recreate or copy the token again, making sure it does not include characters such as ellipses.`, { telemetryMessage: "cfetch auth invalid authorization header" });
+	}
+}
+__name$3(validateAuthorizationHeaderValue, "validateAuthorizationHeaderValue");
+function formatAuthorizationHeaderCharacter(character, codePoint) {
+	if (codePoint === void 0) return "\"\\u{unknown}\"";
+	const codePointLabel = `U+${codePoint.toString(16).toUpperCase().padStart(4, "0")}`;
+	return `${isPrintableCharacter(character) ? `"${character}"` : `"${escapeCharacter(character)}"`} (${codePointLabel})`;
+}
+__name$3(formatAuthorizationHeaderCharacter, "formatAuthorizationHeaderCharacter");
+function isPrintableCharacter(character) {
+	return !/[\p{Cc}\p{Cf}\p{Zl}\p{Zp}]/u.test(character);
+}
+__name$3(isPrintableCharacter, "isPrintableCharacter");
+function escapeCharacter(character) {
+	return Array.from(character).map((c$1) => {
+		const codePoint = c$1.codePointAt(0);
+		if (codePoint === void 0) return "";
+		return codePoint <= 65535 ? `\\u${codePoint.toString(16).toUpperCase().padStart(4, "0")}` : `\\u{${codePoint.toString(16).toUpperCase()}}`;
+	}).join("");
+}
+__name$3(escapeCharacter, "escapeCharacter");
+function throwFetchError(resource, response, status$1, retryAfterMs) {
+	const errors$1 = response.errors ?? [];
+	for (const error52 of errors$1) maybeThrowFriendlyError(error52);
+	const notes = [...errors$1.map((err) => ({ text: renderError(err) })), ...response.messages?.map((msg) => ({ text: typeof msg === "string" ? msg : msg.message ?? String(msg) })) ?? []];
+	if (notes.length === 0) {
+		const raw = response;
+		const fallbackMessage = typeof raw.error === "string" ? `${raw.error}${raw.code ? ` [code: ${raw.code}]` : ""}` : void 0;
+		if (fallbackMessage) notes.push({ text: fallbackMessage });
+	}
+	if (retryAfterMs !== void 0) notes.push({ text: `The API responded with a "Retry-After" header indicating you should wait ${Math.ceil(retryAfterMs / 1e3)} second(s) before retrying.` });
+	const error51 = new APIError({
+		text: `A request to the Cloudflare API (${resource}) failed.`,
+		notes,
+		status: status$1,
+		retryAfterMs,
+		telemetryMessage: false
+	});
+	const code = errors$1[0]?.code;
+	if (code) error51.code = code;
+	const meta3 = errors$1[0]?.meta;
+	if (meta3) error51.meta = meta3;
+	error51.accountTag = extractAccountTag(resource);
+	throw error51;
+}
+__name$3(throwFetchError, "throwFetchError");
+function throwWAFBlockError(headers, method, resource, status$1, statusText, retryAfterMs) {
+	const rayId = extractWAFBlockRayId(headers);
+	throw new APIError({
+		text: "The Cloudflare API responded with a WAF block page instead of the expected JSON response",
+		notes: [
+			{ text: "Cloudflare's firewall (WAF) blocked this API request. This is usually a false positive." },
+			...rayId ? [{ text: `Cloudflare Ray ID: ${rayId}` }] : [],
+			{ text: rayId ? "If the issue persists, please open a Cloudflare Support ticket and include the Ray ID above." : "If the issue persists, please open a Cloudflare Support ticket. You can find the Cloudflare Ray ID on the block page in your browser." },
+			{ text: `${method} ${resource} -> ${status$1} ${statusText}` }
+		],
+		status: status$1,
+		retryAfterMs,
+		telemetryMessage: false
+	});
+}
+__name$3(throwWAFBlockError, "throwWAFBlockError");
+async function fetchKVGetValueBase(complianceConfig, accountId, namespaceId, key, userAgent, logger$1, credentials) {
+	const headers = new import_undici$3.Headers();
+	addAuthorizationHeader(headers, credentials);
+	headers.set("User-Agent", userAgent);
+	maybeAddTraceHeader(headers);
+	const resource = `${getCloudflareApiBaseUrl(complianceConfig)}/accounts/${accountId}/storage/kv/namespaces/${namespaceId}/values/${key}`;
+	logger$1.debug(`-- START CF API REQUEST: GET ${resource}`);
+	logger$1.debug("-- END CF API REQUEST");
+	const response = await (0, import_undici$3.fetch)(resource, {
+		method: "GET",
+		headers
+	});
+	if (response.ok) return await response.arrayBuffer();
+	else throw new Error(`Failed to fetch ${resource} - ${response.status}: ${response.statusText}`);
+}
+__name$3(fetchKVGetValueBase, "fetchKVGetValueBase");
+function hasCursor(result_info) {
+	const cursor$1 = result_info?.cursor;
+	return cursor$1 !== void 0 && cursor$1 !== null && cursor$1 !== "";
+}
+__name$3(hasCursor, "hasCursor");
+function maybeAddTraceHeader(headers) {
+	const traceHeader = getTraceHeader();
+	if (traceHeader) headers.set("Cf-Trace-Id", traceHeader);
+}
+__name$3(maybeAddTraceHeader, "maybeAddTraceHeader");
+function cloneHeaders(headers) {
+	return new import_undici$3.Headers(headers);
+}
+__name$3(cloneHeaders, "cloneHeaders");
 var import_command_exists$1 = __toESM(require_command_exists2());
 var UPDATE_SERVICE_URL = "https://update.argotunnel.com";
 var CLOUDFLARED_VERSION_PATTERN = /^\d{4}\.\d+\.\d+$/;
@@ -45975,12 +46402,93 @@ function removeCloudflaredCache(version2) {
 }
 __name$3(removeCloudflaredCache, "removeCloudflaredCache");
 var TUNNEL_STARTUP_TIMEOUT_MS = 3e4;
+var TUNNEL_API_TIMEOUT_MS = 6e4;
 var TUNNEL_FORCE_KILL_TIMEOUT_MS = 5e3;
 var DEFAULT_TUNNEL_EXPIRY_MS = 3600 * 1e3;
 var DEFAULT_TUNNEL_EXTENSION_MS = 3600 * 1e3;
 var DEFAULT_TUNNEL_MAX_REMAINING_MS = 10800 * 1e3;
 var DEFAULT_TUNNEL_REMINDER_INTERVAL_MS = 600 * 1e3;
 var QUICK_TUNNEL_URL_REGEX = /https:\/\/[a-z0-9-]+\.trycloudflare\.com/;
+var LOCAL_TUNNEL_HOSTNAMES = /* @__PURE__ */ new Set([
+	"localhost",
+	"127.0.0.1",
+	"::1",
+	"0.0.0.0",
+	"::"
+]);
+async function resolveNamedTunnel(name, origin, options) {
+	const { accountId, apiToken, complianceRegion, logger: logger$1, userAgent, abortSignal } = options;
+	const complianceConfig = { compliance_region: complianceRegion };
+	const resource = `/accounts/${accountId}/cfd_tunnel`;
+	const tunnel = (await fetchResultBase(complianceConfig, resource, void 0, userAgent, logger$1, new URLSearchParams({
+		name,
+		is_deleted: "false"
+	}), createApiAbortSignal(TUNNEL_API_TIMEOUT_MS, abortSignal), apiToken)).find((item) => item.name === name);
+	if (!tunnel) throw new UserError$1(`No Cloudflare Tunnel named "${name}" was found in this account. Use "wrangler tunnel list" to see available tunnels.`, { telemetryMessage: "tunnel resolve named missing tunnel" });
+	const tunnelId = tunnel.id;
+	if (!tunnelId) throw new FatalError$1(`Tunnel "${name}" was found but has no ID. This is unexpected.`, { telemetryMessage: "tunnel resolve named missing tunnel id" });
+	const ingress = (await fetchResultBase(complianceConfig, `${resource}/${tunnelId}/configurations`, void 0, userAgent, logger$1, void 0, createApiAbortSignal(TUNNEL_API_TIMEOUT_MS, abortSignal), apiToken)).config?.ingress ?? [];
+	const hostnames = getMatchingIngressHostnames(origin, ingress);
+	if (hostnames.length === 0) throw new UserError$1(createMissingIngressMessage(name, origin, {
+		dashboardUrl: `https://dash.cloudflare.com/${accountId}/tunnels/${tunnelId}`,
+		ingress
+	}), { telemetryMessage: "tunnel resolve named ingress mismatch" });
+	const token = await fetchResultBase(complianceConfig, `${resource}/${tunnelId}/token`, void 0, userAgent, logger$1, void 0, createApiAbortSignal(TUNNEL_API_TIMEOUT_MS, abortSignal), apiToken);
+	return {
+		hostnames,
+		token: String(token)
+	};
+}
+__name$3(resolveNamedTunnel, "resolveNamedTunnel");
+function getMatchingIngressHostnames(origin, ingressConfig) {
+	const hostnames = /* @__PURE__ */ new Set();
+	const originUrl = normalizeURL(origin);
+	for (const ingress of ingressConfig) try {
+		const serviceUrl = normalizeURL(ingress.service);
+		if (ingress.hostname && serviceUrl.toString() === originUrl.toString()) hostnames.add(ingress.hostname);
+	} catch {}
+	return [...hostnames];
+}
+__name$3(getMatchingIngressHostnames, "getMatchingIngressHostnames");
+function normalizeURL(url2) {
+	const normalizedUrl = new URL(url2);
+	if (LOCAL_TUNNEL_HOSTNAMES.has(normalizedUrl.hostname)) normalizedUrl.hostname = "localhost";
+	if (!normalizedUrl.port) switch (normalizedUrl.protocol) {
+		case "http:":
+			normalizedUrl.port = "80";
+			break;
+		case "https:":
+			normalizedUrl.port = "443";
+			break;
+	}
+	return normalizedUrl;
+}
+__name$3(normalizeURL, "normalizeURL");
+function createApiAbortSignal(timeoutMs, abortSignal) {
+	const timeoutSignal = AbortSignal.timeout(timeoutMs);
+	return abortSignal ? AbortSignal.any([abortSignal, timeoutSignal]) : timeoutSignal;
+}
+__name$3(createApiAbortSignal, "createApiAbortSignal");
+function createMissingIngressMessage(name, origin, { dashboardUrl, ingress }) {
+	if (ingress.length === 0) return [
+		`Tunnel "${name}" has no routes configured.`,
+		"",
+		`Add a route for ${origin} in the Cloudflare dashboard:`,
+		dashboardUrl,
+		""
+	].join("\n");
+	return [
+		`Tunnel "${name}" has no route for ${origin}`,
+		"",
+		"Resolved routes:",
+		...ingress.map(({ hostname: hostname3, service }) => `  - ${hostname3 ?? "(no hostname)"} -> ${service}`),
+		"",
+		"Update your local server settings or the tunnel routes in the Cloudflare dashboard:",
+		dashboardUrl,
+		""
+	].join("\n");
+}
+__name$3(createMissingIngressMessage, "createMissingIngressMessage");
 function startTunnel(options) {
 	let disposed = false;
 	let reminderInterval;
@@ -46161,267 +46669,6 @@ The local dev server started at ${origin.href}
 	return new Error(errorMessage);
 }
 __name$3(createTunnelStartupError, "createTunnelStartupError");
-function buildDetailedError(message, ...extra) {
-	return new ParseError({
-		text: message,
-		notes: extra.map((text) => ({ text })),
-		telemetryMessage: false
-	});
-}
-__name$3(buildDetailedError, "buildDetailedError");
-function maybeThrowFriendlyError(error51) {
-	if (error51.message === "workers.api.error.email_verification_required") throw buildDetailedError("Please verify your account's email address and try again.", "Check your email for a verification link, or login to https://dash.cloudflare.com and request a new one.");
-}
-__name$3(maybeThrowFriendlyError, "maybeThrowFriendlyError");
-function logHeaders(headers, logger$1) {
-	const clone2 = cloneHeaders(headers);
-	clone2.delete("Authorization");
-	logger$1.debugWithSanitization?.("HEADERS:", JSON.stringify(Object.fromEntries(clone2), null, 2));
-}
-__name$3(logHeaders, "logHeaders");
-async function performApiFetchBase(complianceConfig, resource, init$2 = {}, userAgent, logger$1, queryParams, abortSignal, credentials) {
-	assert(credentials, "credentials are required for performApiFetch");
-	const method = init$2.method ?? "GET";
-	assert(resource.startsWith("/"), `CF API fetch - resource path must start with a "/" but got "${resource}"`);
-	const headers = cloneHeaders(new import_undici$3.Headers(init$2.headers));
-	addAuthorizationHeader(headers, credentials);
-	headers.set("User-Agent", userAgent);
-	maybeAddTraceHeader(headers);
-	const queryString = queryParams ? `?${queryParams.toString()}` : "";
-	logger$1.debug(`-- START CF API REQUEST: ${method} ${getCloudflareApiBaseUrl(complianceConfig)}${resource}`);
-	logger$1.debugWithSanitization?.("QUERY STRING:", queryString);
-	logHeaders(headers, logger$1);
-	logger$1.debugWithSanitization?.("INIT:", JSON.stringify({ ...init$2 }, null, 2));
-	if (init$2.body instanceof import_undici$3.FormData) logger$1.debugWithSanitization?.("BODY:", await new import_undici$3.Response(init$2.body).text(), null, 2);
-	logger$1.debug("-- END CF API REQUEST");
-	return await (0, import_undici$3.fetch)(`${getCloudflareApiBaseUrl(complianceConfig)}${resource}${queryString}`, {
-		method,
-		...init$2,
-		headers,
-		signal: abortSignal
-	});
-}
-__name$3(performApiFetchBase, "performApiFetchBase");
-async function fetchInternalBase(complianceConfig, resource, init$2 = {}, userAgent, logger$1, queryParams, abortSignal, credentials) {
-	const method = init$2.method ?? "GET";
-	const response = await performApiFetchBase(complianceConfig, resource, init$2, userAgent, logger$1, queryParams, abortSignal, credentials);
-	const jsonText = await response.text();
-	logger$1.debug("-- START CF API RESPONSE:", response.statusText, response.status);
-	logHeaders(response.headers, logger$1);
-	logger$1.debugWithSanitization?.("RESPONSE:", jsonText);
-	logger$1.debug("-- END CF API RESPONSE");
-	const retryAfterMs = parseRetryAfterMs(response.headers);
-	if (!jsonText && (response.status === 204 || response.status === 205)) return {
-		response: {
-			result: {},
-			success: true,
-			errors: [],
-			messages: []
-		},
-		status: response.status,
-		retryAfterMs
-	};
-	if (isWAFBlockResponse(response.headers)) throwWAFBlockError(response.headers, method, resource, response.status, response.statusText, retryAfterMs);
-	try {
-		return {
-			response: parseJSON(jsonText),
-			status: response.status,
-			retryAfterMs
-		};
-	} catch {
-		const rayId = extractWAFBlockRayId(response.headers);
-		throw new APIError({
-			text: "Received a malformed response from the API",
-			notes: [
-				{ text: truncate(jsonText, 100) },
-				{ text: `${method} ${resource} -> ${response.status} ${response.statusText}` },
-				...rayId ? [{ text: `Cloudflare Ray ID: ${rayId}` }] : []
-			],
-			status: response.status,
-			retryAfterMs,
-			telemetryMessage: false
-		});
-	}
-}
-__name$3(fetchInternalBase, "fetchInternalBase");
-async function fetchResultBase(complianceConfig, resource, init$2 = {}, userAgent, logger$1, queryParams, abortSignal, credentials) {
-	const { response: json2, status: status$1, retryAfterMs } = await fetchInternalBase(complianceConfig, resource, init$2, userAgent, logger$1, queryParams, abortSignal, credentials);
-	if (json2.success) return json2.result;
-	else throwFetchError(resource, json2, status$1, retryAfterMs);
-}
-__name$3(fetchResultBase, "fetchResultBase");
-async function fetchListResultBase(complianceConfig, resource, init$2 = {}, userAgent, logger$1, queryParams, credentials) {
-	const results = [];
-	let getMoreResults = true;
-	let cursor$1;
-	while (getMoreResults) {
-		if (cursor$1) {
-			queryParams = new URLSearchParams$1(queryParams);
-			queryParams.set("cursor", cursor$1);
-		}
-		const { response: json2, status: status$1, retryAfterMs } = await fetchInternalBase(complianceConfig, resource, init$2, userAgent, logger$1, queryParams, void 0, credentials);
-		if (json2.success) {
-			results.push(...json2.result);
-			if (hasCursor(json2.result_info)) cursor$1 = json2.result_info?.cursor;
-			else getMoreResults = false;
-		} else throwFetchError(resource, json2, status$1, retryAfterMs);
-	}
-	return results;
-}
-__name$3(fetchListResultBase, "fetchListResultBase");
-function truncate(text, maxLength) {
-	const { length } = text;
-	if (length <= maxLength) return text;
-	return `${text.substring(0, maxLength)}... (length = ${length})`;
-}
-__name$3(truncate, "truncate");
-function isWAFBlockResponse(headers) {
-	return headers.get("cf-mitigated") === "challenge";
-}
-__name$3(isWAFBlockResponse, "isWAFBlockResponse");
-function parseRetryAfterValue(retryAfter) {
-	if (!retryAfter) return;
-	if (/^\d+$/.test(retryAfter.trim())) return Number(retryAfter) * 1e3;
-	const retryAfterDate = new Date(retryAfter);
-	if (!Number.isNaN(retryAfterDate.getTime())) return Math.max(0, retryAfterDate.getTime() - Date.now());
-}
-__name$3(parseRetryAfterValue, "parseRetryAfterValue");
-function parseRetryAfterMs(headers) {
-	return parseRetryAfterValue(headers.get("Retry-After"));
-}
-__name$3(parseRetryAfterMs, "parseRetryAfterMs");
-function extractWAFBlockRayId(headers) {
-	return headers.get("cf-ray") ?? void 0;
-}
-__name$3(extractWAFBlockRayId, "extractWAFBlockRayId");
-function extractAccountTag(resource) {
-	return (/* @__PURE__ */ new RegExp("/accounts/([a-zA-Z0-9]+)/?")).exec(resource)?.[1];
-}
-__name$3(extractAccountTag, "extractAccountTag");
-function hasMorePages(result_info) {
-	const page = result_info?.page;
-	const per_page = result_info?.per_page;
-	const total = result_info?.total_count;
-	return page !== void 0 && per_page !== void 0 && total !== void 0 && page * per_page < total;
-}
-__name$3(hasMorePages, "hasMorePages");
-function renderError(err, level = 0) {
-	const indent = "  ".repeat(level);
-	const message = err.message ?? "";
-	const chainedMessages = "error_chain" in err ? err.error_chain?.map((chainedError) => `
-
-${indent}- ${renderError(chainedError, level + 1)}`).join("\n") ?? "" : "";
-	return (err.code ? `${message} [code: ${err.code}]` : message) + (err.documentation_url ? `
-${indent}To learn more about this error, visit: ${err.documentation_url}` : "") + chainedMessages;
-}
-__name$3(renderError, "renderError");
-function addAuthorizationHeader(headers, auth, overrideExisting = false) {
-	if (!headers.has("Authorization") || overrideExisting) if ("apiToken" in auth) {
-		const authorizationHeader = `Bearer ${auth.apiToken}`;
-		validateAuthorizationHeaderValue(authorizationHeader);
-		headers.set("Authorization", authorizationHeader);
-	} else {
-		headers.set("X-Auth-Key", auth.authKey);
-		headers.set("X-Auth-Email", auth.authEmail);
-	}
-}
-__name$3(addAuthorizationHeader, "addAuthorizationHeader");
-function validateAuthorizationHeaderValue(value) {
-	for (const character of value) {
-		const codePoint = character.codePointAt(0);
-		if (codePoint === void 0 || codePoint > 255) throw new UserError$1(`The configured Cloudflare API token contains a character that cannot be used in an HTTP Authorization header: ${formatAuthorizationHeaderCharacter(character, codePoint)}. Recreate or copy the token again, making sure it does not include characters such as ellipses.`, { telemetryMessage: "cfetch auth invalid authorization header" });
-	}
-}
-__name$3(validateAuthorizationHeaderValue, "validateAuthorizationHeaderValue");
-function formatAuthorizationHeaderCharacter(character, codePoint) {
-	if (codePoint === void 0) return "\"\\u{unknown}\"";
-	const codePointLabel = `U+${codePoint.toString(16).toUpperCase().padStart(4, "0")}`;
-	return `${isPrintableCharacter(character) ? `"${character}"` : `"${escapeCharacter(character)}"`} (${codePointLabel})`;
-}
-__name$3(formatAuthorizationHeaderCharacter, "formatAuthorizationHeaderCharacter");
-function isPrintableCharacter(character) {
-	return !/[\p{Cc}\p{Cf}\p{Zl}\p{Zp}]/u.test(character);
-}
-__name$3(isPrintableCharacter, "isPrintableCharacter");
-function escapeCharacter(character) {
-	return Array.from(character).map((c$1) => {
-		const codePoint = c$1.codePointAt(0);
-		if (codePoint === void 0) return "";
-		return codePoint <= 65535 ? `\\u${codePoint.toString(16).toUpperCase().padStart(4, "0")}` : `\\u{${codePoint.toString(16).toUpperCase()}}`;
-	}).join("");
-}
-__name$3(escapeCharacter, "escapeCharacter");
-function throwFetchError(resource, response, status$1, retryAfterMs) {
-	const errors$1 = response.errors ?? [];
-	for (const error52 of errors$1) maybeThrowFriendlyError(error52);
-	const notes = [...errors$1.map((err) => ({ text: renderError(err) })), ...response.messages?.map((msg) => ({ text: typeof msg === "string" ? msg : msg.message ?? String(msg) })) ?? []];
-	if (notes.length === 0) {
-		const raw = response;
-		const fallbackMessage = typeof raw.error === "string" ? `${raw.error}${raw.code ? ` [code: ${raw.code}]` : ""}` : void 0;
-		if (fallbackMessage) notes.push({ text: fallbackMessage });
-	}
-	if (retryAfterMs !== void 0) notes.push({ text: `The API responded with a "Retry-After" header indicating you should wait ${Math.ceil(retryAfterMs / 1e3)} second(s) before retrying.` });
-	const error51 = new APIError({
-		text: `A request to the Cloudflare API (${resource}) failed.`,
-		notes,
-		status: status$1,
-		retryAfterMs,
-		telemetryMessage: false
-	});
-	const code = errors$1[0]?.code;
-	if (code) error51.code = code;
-	const meta3 = errors$1[0]?.meta;
-	if (meta3) error51.meta = meta3;
-	error51.accountTag = extractAccountTag(resource);
-	throw error51;
-}
-__name$3(throwFetchError, "throwFetchError");
-function throwWAFBlockError(headers, method, resource, status$1, statusText, retryAfterMs) {
-	const rayId = extractWAFBlockRayId(headers);
-	throw new APIError({
-		text: "The Cloudflare API responded with a WAF block page instead of the expected JSON response",
-		notes: [
-			{ text: "Cloudflare's firewall (WAF) blocked this API request. This is usually a false positive." },
-			...rayId ? [{ text: `Cloudflare Ray ID: ${rayId}` }] : [],
-			{ text: rayId ? "If the issue persists, please open a Cloudflare Support ticket and include the Ray ID above." : "If the issue persists, please open a Cloudflare Support ticket. You can find the Cloudflare Ray ID on the block page in your browser." },
-			{ text: `${method} ${resource} -> ${status$1} ${statusText}` }
-		],
-		status: status$1,
-		retryAfterMs,
-		telemetryMessage: false
-	});
-}
-__name$3(throwWAFBlockError, "throwWAFBlockError");
-async function fetchKVGetValueBase(complianceConfig, accountId, namespaceId, key, userAgent, logger$1, credentials) {
-	const headers = new import_undici$3.Headers();
-	addAuthorizationHeader(headers, credentials);
-	headers.set("User-Agent", userAgent);
-	maybeAddTraceHeader(headers);
-	const resource = `${getCloudflareApiBaseUrl(complianceConfig)}/accounts/${accountId}/storage/kv/namespaces/${namespaceId}/values/${key}`;
-	logger$1.debug(`-- START CF API REQUEST: GET ${resource}`);
-	logger$1.debug("-- END CF API REQUEST");
-	const response = await (0, import_undici$3.fetch)(resource, {
-		method: "GET",
-		headers
-	});
-	if (response.ok) return await response.arrayBuffer();
-	else throw new Error(`Failed to fetch ${resource} - ${response.status}: ${response.statusText}`);
-}
-__name$3(fetchKVGetValueBase, "fetchKVGetValueBase");
-function hasCursor(result_info) {
-	const cursor$1 = result_info?.cursor;
-	return cursor$1 !== void 0 && cursor$1 !== null && cursor$1 !== "";
-}
-__name$3(hasCursor, "hasCursor");
-function maybeAddTraceHeader(headers) {
-	const traceHeader = getTraceHeader();
-	if (traceHeader) headers.set("Cf-Trace-Id", traceHeader);
-}
-__name$3(maybeAddTraceHeader, "maybeAddTraceHeader");
-function cloneHeaders(headers) {
-	return new import_undici$3.Headers(headers);
-}
-__name$3(cloneHeaders, "cloneHeaders");
 var import_update_check = __toESM(require_update_check());
 var UPDATE_CHECK_TIMEOUT_MS = 3e3;
 var TIMED_OUT = Symbol("timed_out");
@@ -46445,7 +46692,7 @@ async function fetchLatestNpmVersion(name, version2) {
 __name$3(fetchLatestNpmVersion, "fetchLatestNpmVersion");
 async function openInBrowser(url2, logger$1) {
 	try {
-		const { default: open } = await import("./open-PBXRGS4R-Bd-FUZNf.mjs");
+		const { default: open } = await import("./open-PBXRGS4R-CzyP5HqI.mjs");
 		(await open(url2)).on("error", (err) => {
 			handleBrowserOpenError(url2, err, logger$1);
 		});
@@ -48660,8 +48907,8 @@ await cjsModuleLexer.init();
 * using the same package as Node.
 */
 async function getCjsNamedExports(vite, filePath, contents, seen = /* @__PURE__ */ new Set()) {
-	const { exports: exports$2, reexports } = cjsModuleLexer.parse(contents);
-	const result = new Set(exports$2);
+	const { exports: exports$1, reexports } = cjsModuleLexer.parse(contents);
+	const result = new Set(exports$1);
 	for (const reexport of reexports) {
 		const resolved = await viteResolve(vite, reexport, filePath, true);
 		if (seen.has(resolved)) continue;
@@ -52976,7 +53223,7 @@ function createOAuthFlow(ctx) {
 __name$2(createOAuthFlow, "createOAuthFlow");
 var RESERVED_PROFILE_NAMES = ["default", "staging"];
 function createProfileStore(args) {
-	const bindings$1 = {
+	const bindings = {
 		read() {
 			return args.bindings.read();
 		},
@@ -53042,14 +53289,14 @@ function createProfileStore(args) {
 	};
 	return {
 		configs: args.configs,
-		bindings: bindings$1,
+		bindings,
 		resolve(resolveArgs) {
 			if (resolveArgs.profile) {
 				if (resolveArgs.profile === "default") return "default";
 				validateProfileName(resolveArgs.profile);
 				return resolveArgs.profile;
 			}
-			const dirProfile = bindings$1.getProfileForDirectory(resolveArgs.cwd);
+			const dirProfile = bindings.getProfileForDirectory(resolveArgs.cwd);
 			if (dirProfile) return dirProfile;
 			return "default";
 		}
@@ -53065,9 +53312,9 @@ function formatDirectoryForUserError(dir$1) {
 	return path.relative(process.cwd(), dir$1) || ".";
 }
 __name$2(formatDirectoryForUserError, "formatDirectoryForUserError");
-function getProfileForDirectoryFromBindings(startDir, bindings$1) {
+function getProfileForDirectoryFromBindings(startDir, bindings) {
 	const normalizedDir = path.resolve(startDir);
-	const sortedEntries = Object.entries(bindings$1).sort(([a], [b]) => b.length - a.length);
+	const sortedEntries = Object.entries(bindings).sort(([a], [b]) => b.length - a.length);
 	for (const [boundDir, profile] of sortedEntries) {
 		if (normalizedDir === boundDir) return {
 			profile,
@@ -59693,7 +59940,7 @@ var require_command_exists = /* @__PURE__ */ __commonJS$2({ "../../node_modules/
 }) });
 
 //#endregion
-//#region ../deploy-helpers/dist/chunk-PXVCTRCA.mjs
+//#region ../deploy-helpers/dist/chunk-3G6JZQDH.mjs
 var import_undici$1 = require_undici();
 var import_command_exists = require_command_exists();
 function handleUnsafeCapnp(capnp) {
@@ -59733,7 +59980,7 @@ function fromMimeType(mimeType) {
 	return moduleType;
 }
 __name$1(fromMimeType, "fromMimeType");
-function createWorkerUploadForm(worker, bindings$1, options) {
+function createWorkerUploadForm(worker, bindings, options) {
 	const formData = new import_undici$1.FormData();
 	const { main, sourceMaps, migrations, exports: configuredExports, compatibility_date, compatibility_flags, keepVars, keepSecrets, keepBindings, logpush, placement, tail_consumers, streaming_tail_consumers, limits, annotations, keep_assets, assets, observability, cache: cache$1, package_dependencies } = worker;
 	const assetConfig = {
@@ -59757,47 +60004,47 @@ function createWorkerUploadForm(worker, bindings$1, options) {
 	}
 	let { modules } = worker;
 	const metadataBindings = [];
-	const plain_text = extractBindingsOfType("plain_text", bindings$1);
-	const json_bindings = extractBindingsOfType("json", bindings$1);
-	const secret_text = extractBindingsOfType("secret_text", bindings$1);
-	const kv_namespaces = extractBindingsOfType("kv_namespace", bindings$1);
-	const send_email = extractBindingsOfType("send_email", bindings$1);
-	const durable_objects = extractBindingsOfType("durable_object_namespace", bindings$1);
-	const workflows = extractBindingsOfType("workflow", bindings$1);
-	const queues = extractBindingsOfType("queue", bindings$1);
-	const r2_buckets = extractBindingsOfType("r2_bucket", bindings$1);
-	const d1_databases = extractBindingsOfType("d1", bindings$1);
-	const vectorize = extractBindingsOfType("vectorize", bindings$1);
-	const ai_search_namespaces = extractBindingsOfType("ai_search_namespace", bindings$1);
-	const ai_search = extractBindingsOfType("ai_search", bindings$1);
-	const websearch = extractBindingsOfType("websearch", bindings$1)[0];
-	const agent_memory = extractBindingsOfType("agent_memory", bindings$1);
-	const hyperdrive = extractBindingsOfType("hyperdrive", bindings$1);
-	const secrets_store_secrets = extractBindingsOfType("secrets_store_secret", bindings$1);
-	const artifacts = extractBindingsOfType("artifacts", bindings$1);
-	const unsafe_hello_world = extractBindingsOfType("unsafe_hello_world", bindings$1);
-	const flagship = extractBindingsOfType("flagship", bindings$1);
-	const ratelimits = extractBindingsOfType("ratelimit", bindings$1);
-	const vpc_services = extractBindingsOfType("vpc_service", bindings$1);
-	const vpc_networks = extractBindingsOfType("vpc_network", bindings$1);
-	const services = extractBindingsOfType("service", bindings$1);
-	const analytics_engine_datasets = extractBindingsOfType("analytics_engine", bindings$1);
-	const dispatch_namespaces = extractBindingsOfType("dispatch_namespace", bindings$1);
-	const mtls_certificates = extractBindingsOfType("mtls_certificate", bindings$1);
-	const pipelines = extractBindingsOfType("pipeline", bindings$1);
-	const worker_loaders = extractBindingsOfType("worker_loader", bindings$1);
-	const logfwdr = extractBindingsOfType("logfwdr", bindings$1);
-	const wasm_modules = extractBindingsOfType("wasm_module", bindings$1);
-	const browser = extractBindingsOfType("browser", bindings$1)[0];
-	const ai = extractBindingsOfType("ai", bindings$1)[0];
-	const images = extractBindingsOfType("images", bindings$1)[0];
-	const stream$2 = extractBindingsOfType("stream", bindings$1)[0];
-	const media = extractBindingsOfType("media", bindings$1)[0];
-	const version_metadata = extractBindingsOfType("version_metadata", bindings$1)[0];
-	const assetsBinding = extractBindingsOfType("assets", bindings$1)[0];
-	const text_blobs = extractBindingsOfType("text_blob", bindings$1);
-	const data_blobs = extractBindingsOfType("data_blob", bindings$1);
-	extractBindingsOfType("inherit", bindings$1).forEach(({ binding }) => {
+	const plain_text = extractBindingsOfType("plain_text", bindings);
+	const json_bindings = extractBindingsOfType("json", bindings);
+	const secret_text = extractBindingsOfType("secret_text", bindings);
+	const kv_namespaces = extractBindingsOfType("kv_namespace", bindings);
+	const send_email = extractBindingsOfType("send_email", bindings);
+	const durable_objects = extractBindingsOfType("durable_object_namespace", bindings);
+	const workflows = extractBindingsOfType("workflow", bindings);
+	const queues = extractBindingsOfType("queue", bindings);
+	const r2_buckets = extractBindingsOfType("r2_bucket", bindings);
+	const d1_databases = extractBindingsOfType("d1", bindings);
+	const vectorize = extractBindingsOfType("vectorize", bindings);
+	const ai_search_namespaces = extractBindingsOfType("ai_search_namespace", bindings);
+	const ai_search = extractBindingsOfType("ai_search", bindings);
+	const websearch = extractBindingsOfType("websearch", bindings)[0];
+	const agent_memory = extractBindingsOfType("agent_memory", bindings);
+	const hyperdrive = extractBindingsOfType("hyperdrive", bindings);
+	const secrets_store_secrets = extractBindingsOfType("secrets_store_secret", bindings);
+	const artifacts = extractBindingsOfType("artifacts", bindings);
+	const unsafe_hello_world = extractBindingsOfType("unsafe_hello_world", bindings);
+	const flagship = extractBindingsOfType("flagship", bindings);
+	const ratelimits = extractBindingsOfType("ratelimit", bindings);
+	const vpc_services = extractBindingsOfType("vpc_service", bindings);
+	const vpc_networks = extractBindingsOfType("vpc_network", bindings);
+	const services = extractBindingsOfType("service", bindings);
+	const analytics_engine_datasets = extractBindingsOfType("analytics_engine", bindings);
+	const dispatch_namespaces = extractBindingsOfType("dispatch_namespace", bindings);
+	const mtls_certificates = extractBindingsOfType("mtls_certificate", bindings);
+	const pipelines = extractBindingsOfType("pipeline", bindings);
+	const worker_loaders = extractBindingsOfType("worker_loader", bindings);
+	const logfwdr = extractBindingsOfType("logfwdr", bindings);
+	const wasm_modules = extractBindingsOfType("wasm_module", bindings);
+	const browser = extractBindingsOfType("browser", bindings)[0];
+	const ai = extractBindingsOfType("ai", bindings)[0];
+	const images = extractBindingsOfType("images", bindings)[0];
+	const stream$2 = extractBindingsOfType("stream", bindings)[0];
+	const media = extractBindingsOfType("media", bindings)[0];
+	const version_metadata = extractBindingsOfType("version_metadata", bindings)[0];
+	const assetsBinding = extractBindingsOfType("assets", bindings)[0];
+	const text_blobs = extractBindingsOfType("text_blob", bindings);
+	const data_blobs = extractBindingsOfType("data_blob", bindings);
+	extractBindingsOfType("inherit", bindings).forEach(({ binding }) => {
 		metadataBindings.push({
 			name: binding,
 			type: "inherit"
@@ -60154,7 +60401,7 @@ function createWorkerUploadForm(worker, bindings$1, options) {
 		});
 		formData.set(name, new File(["contents" in source ? source.contents : readFileSync(source.path)], "path" in source ? source.path ?? name : name, { type: "application/octet-stream" }));
 	});
-	for (const [bindingName, config$1] of Object.entries(bindings$1 ?? {})) if (isUnsafeBindingType(config$1.type) && config$1.type !== "unsafe_hello_world") {
+	for (const [bindingName, config$1] of Object.entries(bindings ?? {})) if (isUnsafeBindingType(config$1.type) && config$1.type !== "unsafe_hello_world") {
 		const { type,...data } = config$1;
 		metadataBindings.push({
 			name: bindingName,
@@ -60217,7 +60464,8 @@ function createWorkerUploadForm(worker, bindings$1, options) {
 		bindings: metadataBindings,
 		containers: worker.containers === void 0 ? void 0 : worker.containers.map((c$1) => ({
 			...c$1.name !== void 0 && { name: c$1.name },
-			...c$1.class_name !== void 0 && { class_name: c$1.class_name }
+			...c$1.class_name !== void 0 && { class_name: c$1.class_name },
+			...c$1.images !== void 0 && { images: c$1.images }
 		})),
 		...compatibility_date && { compatibility_date },
 		...compatibility_flags && { compatibility_flags },
@@ -60252,7 +60500,7 @@ __name$1(createWorkerUploadForm, "createWorkerUploadForm");
 //#endregion
 //#region ../remote-bindings/dist/index.mjs
 var import_undici = require_undici();
-var version = "0.0.20";
+var version = "0.0.22";
 var NoDefaultValueProvided = class extends UserError$1 {
 	constructor() {
 		super("This command cannot be run in a non-interactive context", { telemetryMessage: "remote bindings prompt default missing" });
@@ -60693,7 +60941,7 @@ function handlePreviewSessionCreationError(err, accountId) {
 * (flat Record<string, Binding>).
 */
 function createRemoteWorkerInit(props) {
-	const bindings$1 = { ...props.bindings };
+	const bindings = { ...props.bindings };
 	return {
 		name: props.name,
 		main: {
@@ -60703,7 +60951,7 @@ function createRemoteWorkerInit(props) {
 			content: props.bundle.entrypointSource
 		},
 		modules: props.bundle.modules,
-		bindings: bindings$1,
+		bindings,
 		migrations: void 0,
 		exports: void 0,
 		compatibility_date: props.compatibilityDate,
@@ -61026,11 +61274,11 @@ function findRemoteSessionAuthError(error$2) {
 	if (isErrorEvent(error$2)) return findRemoteSessionAuthError(error$2.cause);
 	if (error$2 instanceof Error) return findRemoteSessionAuthError(error$2.cause);
 }
-async function startRemoteProxySession(bindings$1, options) {
-	for (const [name, binding] of Object.entries(bindings$1 ?? {})) if (binding.type === "flagship" && binding.app_id === void 0) throw new UserError$1(`Flagship binding "${name}" has no \`app_id\` and has not been created, but needs to run remotely. Run \`wrangler flagship apps create\` to create an app.`, { telemetryMessage: "flagship remote binding missing app_id" });
+async function startRemoteProxySession(bindings, options) {
+	for (const [name, binding] of Object.entries(bindings ?? {})) if (binding.type === "flagship" && binding.app_id === void 0) throw new UserError$1(`Flagship binding "${name}" has no \`app_id\` and has not been created, but needs to run remotely. Run \`wrangler flagship apps create\` to create an app.`, { telemetryMessage: "flagship remote binding missing app_id" });
 	options.logger.log(source_default.dim("⎔ Establishing remote connection..."));
 	initLogger(getInternalLogger(options.logger));
-	const rawBindings = toRawBindings(bindings$1);
+	const rawBindings = toRawBindings(bindings);
 	const workerConfig = {
 		name: options.workerName ?? randomUUID(),
 		entrypointSource: ProxyServerWorker_default,
@@ -61097,8 +61345,8 @@ async function startRemoteProxySession(bindings$1, options) {
 		dispose: () => devEnv.teardown()
 	};
 }
-function toRawBindings(bindings$1) {
-	return Object.fromEntries(Object.entries(bindings$1 ?? {}).map(([key, binding]) => [key, {
+function toRawBindings(bindings) {
+	return Object.fromEntries(Object.entries(bindings ?? {}).map(([key, binding]) => [key, {
 		...binding,
 		raw: true
 	}]));
@@ -61117,8 +61365,8 @@ function getInternalLogger(logger$1) {
 		console: disabled
 	};
 }
-function pickRemoteBindings(bindings$1) {
-	return Object.fromEntries(Object.entries(bindings$1 ?? {}).filter(([, binding]) => {
+function pickRemoteBindings(bindings) {
+	return Object.fromEntries(Object.entries(bindings ?? {}).filter(([, binding]) => {
 		if (getBindingLocalSupport(binding.type) === "DO-NOT-USE-this-resource-will-never-have-a-local-simulator") return true;
 		return "remote" in binding && binding.remote;
 	}));
@@ -61162,35 +61410,6 @@ function deepStrictEqual(source, target) {
 	}
 }
 
-//#endregion
-//#region ../config/dist/public-BwQqexwo.mjs
-const DEFINITION = Symbol.for("@cloudflare/config:definition");
-/**
-* Unwrap an authored config from its value / promise / function shape, awaiting
-* the result. A function config is invoked with {@link ConfigContext}.
-*/
-async function unwrap(config$1, ctx) {
-	return typeof config$1 === "function" ? await config$1(ctx) : await config$1;
-}
-/**
-* Resolve any `cloudflare.config.ts` export to its plain config value.
-*
-* A `define*` helper stores its authored config plus `type` under the
-* {@link DEFINITION} symbol; here we unwrap the config and stamp `type` back on.
-* Every other export — a raw object/promise/function — is unwrapped as-is and
-* already carries its own `type`. Discrimination happens afterwards via `type`.
-*/
-async function resolveExportDefinition(def, ctx) {
-	if (typeof def === "object" && def !== null && DEFINITION in def) {
-		const { config: config$1, type } = def[DEFINITION];
-		return {
-			...await unwrap(config$1, ctx),
-			type
-		};
-	}
-	return await unwrap(def, ctx);
-}
-
 //#endregion
 //#region ../config/dist/index.mjs
 var __getOwnPropNames = Object.getOwnPropertyNames;
@@ -61660,15 +61879,6 @@ const ConfigExportsTypeSchema = z$1.record(z$1.string(), z$1.unknown()).check((c
 		});
 	}
 });
-const ConfigExportsObjectSchema = z$1.object({ settings: InputSettingsSchema.optional() }).catchall(InputWorkerSchema);
-/**
-* Schema for the resolved config exports, keyed by export
-* name. Each value is discriminated on its `type` field. Reserves the
-* `settings` export name exclusively for settings configs: a `settings`
-* config must live on the `settings` export, and the `settings` export
-* may only hold a `settings` config.
-*/
-const ConfigExportsSchema = ConfigExportsTypeSchema.pipe(ConfigExportsObjectSchema);
 const ModuleTypeSchema = z$1.enum([
 	"esm",
 	"cjs",
@@ -61704,9 +61914,9 @@ const ManifestSchema = z$1.strictObject({
 * base schema.
 */
 const OutputWorkerSchema = BaseWorkerSchema.extend({ manifest: ManifestSchema.optional() });
-var import_dist = (/* @__PURE__ */ __commonJS({ "../../node_modules/.pnpm/ts-dedent@2.2.0/node_modules/ts-dedent/dist/index.js": ((exports$2) => {
-	Object.defineProperty(exports$2, "__esModule", { value: true });
-	exports$2.dedent = void 0;
+var import_dist = (/* @__PURE__ */ __commonJS({ "../../node_modules/.pnpm/ts-dedent@2.2.0/node_modules/ts-dedent/dist/index.js": ((exports$1) => {
+	Object.defineProperty(exports$1, "__esModule", { value: true });
+	exports$1.dedent = void 0;
 	function dedent$1$1(templ) {
 		var values = [];
 		for (var _i = 1; _i < arguments.length; _i++) values[_i - 1] = arguments[_i];
@@ -61739,7 +61949,7 @@ var import_dist = (/* @__PURE__ */ __commonJS({ "../../node_modules/.pnpm/ts-ded
 		});
 		return string$1;
 	}
-	exports$2.dedent = dedent$1$1;
+	exports$1.dedent = dedent$1$1;
 }) }))();
 var __defProp = Object.defineProperty;
 var __name = (target, value) => __defProp(target, "name", {
@@ -62479,15 +62689,100 @@ function cleanupImportAttributes(context) {
 	context.importAttributes = attrs;
 	Object.freeze(context.importAttributes);
 }
+const CROSS_WORKER_BINDING_TYPES = new Set([
+	"durable-object",
+	"worker",
+	"workflow"
+]);
+function isRecord(value) {
+	return typeof value === "object" && value !== null;
+}
+function isConfigReference(value) {
+	return typeof value === "function" || isRecord(value);
+}
+function createDefinitionResolver(ctx) {
+	const resolvedDefinitions = /* @__PURE__ */ new Map();
+	return (input) => {
+		const cached$1 = resolvedDefinitions.get(input);
+		if (cached$1) return cached$1;
+		const resolved = (async () => {
+			return await (typeof input === "function" ? input(ctx) : input);
+		})();
+		resolvedDefinitions.set(input, resolved);
+		return resolved;
+	};
+}
+async function normalizeWorkerReferences(resolved, resolveDefinition) {
+	if (!isRecord(resolved) || !isRecord(resolved.env)) return resolved;
+	const env$2 = { ...resolved.env };
+	for (const [bindingName, binding] of Object.entries(env$2)) {
+		if (!isRecord(binding) || typeof binding.type !== "string" || !CROSS_WORKER_BINDING_TYPES.has(binding.type) || !isConfigReference(binding.worker)) continue;
+		const target = await resolveDefinition(binding.worker);
+		env$2[bindingName] = {
+			...binding,
+			worker: isRecord(target) ? target.name : void 0
+		};
+	}
+	return {
+		...resolved,
+		env: env$2
+	};
+}
+function prefixIssues(issues, prefix) {
+	return issues.map((issue$1) => ({
+		...issue$1,
+		path: [prefix, ...issue$1.path]
+	}));
+}
+/**
+* Resolve and validate loaded `cloudflare.config.ts` exports.
+*
+* Config inputs are resolved once by identity. Top-level Worker exports are
+* also parsed once by identity; unexported references are resolved only far
+* enough to replace the reference with the Worker's name.
+*/
+async function resolveAndValidateConfigExports(exports$2, ctx) {
+	const resolveDefinition = createDefinitionResolver(ctx);
+	const parsedWorkers = /* @__PURE__ */ new Map();
+	const resolvedExports = {};
+	for (const [name, input] of Object.entries(exports$2)) resolvedExports[name] = await resolveDefinition(input);
+	const typeResult = ConfigExportsTypeSchema.safeParse(resolvedExports);
+	if (!typeResult.success) return typeResult;
+	const issues = [];
+	const data = {};
+	const resolvedSettings = resolvedExports.settings;
+	const settingsResult = resolvedSettings ? InputSettingsSchema.safeParse(resolvedSettings) : void 0;
+	if (settingsResult) if (settingsResult.success) data.settings = settingsResult.data;
+	else issues.push(...prefixIssues(settingsResult.error.issues, "settings"));
+	for (const [name, input] of Object.entries(exports$2)) {
+		const resolved = resolvedExports[name];
+		if (!isRecord(resolved)) continue;
+		if (resolved.type === "worker") {
+			let result = parsedWorkers.get(input);
+			if (!result) {
+				result = InputWorkerSchema.safeParse(await normalizeWorkerReferences(resolved, resolveDefinition));
+				parsedWorkers.set(input, result);
+				if (!result.success) issues.push(...prefixIssues(result.error.issues, name));
+			}
+			if (result.success) data[name] = result.data;
+			continue;
+		}
+	}
+	return issues.length > 0 ? {
+		success: false,
+		error: new z$1.ZodError(issues)
+	} : {
+		success: true,
+		data
+	};
+}
 /**
-* Load a `cloudflare.config.ts`, resolve all exports, and validate against {@link ConfigExportsSchema}.
+* Load a `cloudflare.config.ts`, resolve all exports, and validate them.
 */
 async function loadAndValidateConfig(configPath, ctx, options) {
 	const { exports: exports$2, dependencies } = await loadConfig(configPath, options);
-	const resolved = {};
-	for (const [name, value] of Object.entries(exports$2)) resolved[name] = await resolveExportDefinition(value, ctx);
 	return {
-		result: ConfigExportsSchema.safeParse(resolved),
+		result: await resolveAndValidateConfigExports(exports$2, ctx),
 		dependencies
 	};
 }