@void/deploy-cloudflare 0.24.0 → 0.25.0

package/README.md

@@ -1,28 +1,5 @@
 # @void/deploy-cloudflare
 
-Public Cloudflare target adapter primitives for Void deployments.
+Cloudflare deployment primitives used by the Void CLI. Provides Worker configuration reads, uploads, activation, and deployment verification.
 
-This package owns Wrangler JSON/JSONC config reads and the final verified
-Cloudflare upload boundary. Source inference and app builds remain in `void`;
-provider-neutral contracts and plans remain in `@void/deploy-core`.
-
-Existing Worker handoffs read the active version, validate resource identities,
-and check the uploaded bindings before activation. Traffic-only activation uses
-an isolated config to retain Worker settings and triggers. Trigger snapshots
-record when configuration was preserved, so rollback can keep those settings
-for versions originally deployed outside Void.
-
-Handoff verifiers can accept an explicit list of new KV binding identities.
-Only those exact namespaces may be added; existing bindings, variables, secrets,
-and handlers must remain unchanged. New bindings cannot alias an existing KV
-namespace. The Void CLI uses this for the migration's explicit ISR cache choice.
-
-First-deployment readiness allows up to one minute for the new Worker's public
-route to propagate, with bounded requests and backoff. A successful check still
-requires the ready response, and Cloudflare Access denials fail immediately.
-Subsequent version previews retain the shorter retry window.
-
-Failed version uploads and first-deployment bootstraps return a bounded diagnostic
-alongside the exit status and Cloudflare error code. It retains validation messages
-and stack locations, strips terminal formatting, excludes stdout binding tables,
-and redacts common credential formats before callers display or log it.
+Applications normally deploy with `void deploy --platform cloudflare`. See the [Cloudflare guide](https://void.cloud/integrations/cloudflare) for configuration and credentials, or [Platform Development](https://void.cloud/guide/platform-development) for runtime and adapter work.

package/dist/index.mjs

@@ -1,6 +1,7 @@
 import { isDeepStrictEqual, stripVTControlCharacters } from "node:util";
 import { cpSync, existsSync, mkdirSync, mkdtempSync, readFileSync, rmSync, writeFileSync } from "node:fs";
 import { SyntaxKind, applyEdits, createScanner, modify, parse, parseTree } from "jsonc-parser";
+import { isRecord } from "@void/deploy-core";
 import nodePath from "node:path";
 import { createHash } from "node:crypto";
 import { tmpdir } from "node:os";
@@ -88,16 +89,16 @@ function resolveD1MigrateTarget(config, binding) {
 * application code configuration or non-secret resource that an ordinary deploy could own.
 */
 function isWranglerSecretOnlyDraft(entry) {
-	if (!isRecord$1(entry.annotations)) return false;
+	if (!isRecord(entry.annotations)) return false;
 	const annotationKeys = Object.keys(entry.annotations);
 	if (entry.annotations["workers/triggered_by"] !== "secret" || annotationKeys.some((key) => key !== "workers/triggered_by")) return false;
-	if (!isRecord$1(entry.resources)) return false;
+	if (!isRecord(entry.resources)) return false;
 	const { bindings, script, script_runtime: scriptRuntime } = entry.resources;
-	if (!Array.isArray(bindings) || bindings.length === 0 || !bindings.every((binding) => isRecord$1(binding) && typeof binding.name === "string" && binding.name.length > 0 && binding.type === "secret_text" && Object.keys(binding).every((key) => key === "name" || key === "type"))) return false;
-	if (!isRecord$1(script) || !Array.isArray(script.handlers) || script.handlers.length !== 1 || script.handlers[0] !== "fetch" || script.placement_mode !== void 0) return false;
-	if (!isRecord$1(scriptRuntime)) return false;
+	if (!Array.isArray(bindings) || bindings.length === 0 || !bindings.every((binding) => isRecord(binding) && typeof binding.name === "string" && binding.name.length > 0 && binding.type === "secret_text" && Object.keys(binding).every((key) => key === "name" || key === "type"))) return false;
+	if (!isRecord(script) || !Array.isArray(script.handlers) || script.handlers.length !== 1 || script.handlers[0] !== "fetch" || script.placement_mode !== void 0) return false;
+	if (!isRecord(scriptRuntime)) return false;
 	const runtimeKeys = Object.keys(scriptRuntime);
-	return scriptRuntime.usage_model === "standard" && (scriptRuntime.limits === void 0 || isRecord$1(scriptRuntime.limits) && Object.keys(scriptRuntime.limits).length === 0) && runtimeKeys.every((key) => key === "usage_model" || key === "limits");
+	return scriptRuntime.usage_model === "standard" && (scriptRuntime.limits === void 0 || isRecord(scriptRuntime.limits) && Object.keys(scriptRuntime.limits).length === 0) && runtimeKeys.every((key) => key === "usage_model" || key === "limits");
 }
 const VOID_SECRET_DRAFT_SOURCE = "export default { fetch() { return new Response(\"\"); } };\n";
 /** Prove a cf-created placeholder from the exact immutable version's source. */
@@ -120,25 +121,22 @@ function isVoidSecretOnlyDraft(entry) {
 		"env",
 		"resources"
 	]);
-	if (Object.keys(entry).some((key) => !metadataFields.has(key)) || entry.source !== "cf_cli" || !isRecord$1(entry.annotations) || Object.keys(entry.annotations).length !== 1 || entry.annotations["workers/triggered_by"] !== "secret" || entry.main_module !== "index.js" || !Array.isArray(entry.urls) || entry.urls.length !== 0 || !Array.isArray(entry.modules) || entry.modules.length !== 1 || !Array.isArray(entry.bindings) || entry.bindings.length === 0) return false;
+	if (Object.keys(entry).some((key) => !metadataFields.has(key)) || entry.source !== "cf_cli" || !isRecord(entry.annotations) || Object.keys(entry.annotations).length !== 1 || entry.annotations["workers/triggered_by"] !== "secret" || entry.main_module !== "index.js" || !Array.isArray(entry.urls) || entry.urls.length !== 0 || !Array.isArray(entry.modules) || entry.modules.length !== 1 || !Array.isArray(entry.bindings) || entry.bindings.length === 0) return false;
 	const module = entry.modules[0];
-	if (!isRecord$1(module) || Object.keys(module).length !== 3 || module.name !== "index.js" || module.content_type !== "application/javascript+module" || module.content_base64 !== Buffer.from("export default { fetch() { return new Response(\"\"); } };\n").toString("base64")) return false;
+	if (!isRecord(module) || Object.keys(module).length !== 3 || module.name !== "index.js" || module.content_type !== "application/javascript+module" || module.content_base64 !== Buffer.from("export default { fetch() { return new Response(\"\"); } };\n").toString("base64")) return false;
 	const names = /* @__PURE__ */ new Set();
 	for (const binding of entry.bindings) {
-		if (!isRecord$1(binding) || Object.keys(binding).length !== 2 || typeof binding.name !== "string" || binding.name.length === 0 || names.has(binding.name) || binding.type !== "secret_text") return false;
+		if (!isRecord(binding) || Object.keys(binding).length !== 2 || typeof binding.name !== "string" || binding.name.length === 0 || names.has(binding.name) || binding.type !== "secret_text") return false;
 		names.add(binding.name);
 	}
-	if (entry.env !== void 0 && (!isRecord$1(entry.env) || Object.keys(entry.env).length !== names.size || Object.entries(entry.env).some(([name, binding]) => !names.has(name) || !isRecord$1(binding) || Object.keys(binding).length !== 1 || binding.type !== "secret_text"))) return false;
+	if (entry.env !== void 0 && (!isRecord(entry.env) || Object.keys(entry.env).length !== names.size || Object.entries(entry.env).some(([name, binding]) => !names.has(name) || !isRecord(binding) || Object.keys(binding).length !== 1 || binding.type !== "secret_text"))) return false;
 	if (entry.resources !== void 0) {
-		if (!isRecord$1(entry.resources) || Object.keys(entry.resources).length !== 1) return false;
+		if (!isRecord(entry.resources) || Object.keys(entry.resources).length !== 1) return false;
 		const bindings = entry.resources.bindings;
 		if (!Array.isArray(bindings) || !isDeepStrictEqual(bindings, entry.bindings)) return false;
 	}
 	return true;
 }
-function isRecord$1(value) {
-	return typeof value === "object" && value !== null && !Array.isArray(value);
-}
 //#endregion
 //#region src/existing.ts
 /** A failed remote read, distinct from an invalid or changing Worker configuration. */
@@ -1058,9 +1056,10 @@ function hasCustomDomains(routes) {
 /** Select a configured HTTPS route that is guaranteed to cover /__void/ready. */
 function customRouteReadinessUrl(routes) {
 	for (const route of routes) {
-		const pattern = typeof route === "string" ? route : isRecord(route) && typeof route.pattern === "string" ? route.pattern : void 0;
+		const record = isRecord(route) ? route : void 0;
+		const pattern = typeof route === "string" ? route : typeof record?.pattern === "string" ? record.pattern : void 0;
 		if (!pattern) continue;
-		const customDomain = isRecord(route) && route.custom_domain === true;
+		const customDomain = record?.custom_domain === true;
 		const withoutScheme = pattern.replace(/^https?:\/\//i, "");
 		const slash = withoutScheme.indexOf("/");
 		const hostname = (slash < 0 ? withoutScheme : withoutScheme.slice(0, slash)).trim();
@@ -1108,7 +1107,6 @@ function stableJson(value) {
 	return JSON.stringify(value);
 }
 function parseTriggerConfig(value) {
-	if (value === void 0) return null;
 	if (!isRecord(value)) return null;
 	if ([
 		"preserve",
@@ -1165,9 +1163,6 @@ function resolvePreservedTraffic(desired, previous, workerExists) {
 		...desired.addresses === void 0 ? {} : { addresses: desired.addresses }
 	};
 }
-function isRecord(value) {
-	return typeof value === "object" && value !== null && !Array.isArray(value);
-}
 function isCandidatePreviewUrl(value, workerName, versionId, alias) {
 	try {
 		const url = new URL(value);
@@ -1803,7 +1798,7 @@ async function readCloudflareVersionInspection(options, configPath, versionId, k
 			const isVoidDraft = isVoidSecretOnlyDraft(draft);
 			return {
 				metadata: typeof message === "string" ? parseCloudflareVersionMessage(message) : null,
-				isSecretOnlyDraft: isWranglerSecretOnlyDraft(draft) || isVoidSecretOnlyDraft(draft),
+				isSecretOnlyDraft: isWranglerSecretOnlyDraft(draft) || isVoidDraft,
 				isVoidSecretOnlyDraft: isVoidDraft,
 				voidDraftSecretNames: isVoidDraft ? draft.bindings.map((binding) => binding.name) : null
 			};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@void/deploy-cloudflare",
-  "version": "0.24.0",
+  "version": "0.25.0",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/voidzero-dev/void.git",
@@ -20,12 +20,12 @@
     "access": "public"
   },
   "dependencies": {
-    "@void/deploy-core": "0.24.0",
+    "@void/deploy-core": "0.25.0",
     "jsonc-parser": "3.3.1"
   },
   "devDependencies": {
     "@cloudflare/workers-types": "^4.20260702.1",
-    "@types/node": "^26.6.3",
+    "@types/node": "^26.6.4",
     "pathslash": "^0.1.0",
     "typescript": "7.0.2",
     "vite-plus": "1.0.0"