@void/deploy-cloudflare 0.27.0 → 1.0.3

package/dist/index.d.mts

@@ -479,6 +479,10 @@ export declare function createCloudflareMetadataRunner(options: {
   env?: Readonly<Record<string, string | undefined>>;
 }): CloudflareCommandRunner;
 //#endregion
+//#region src/diagnostics.d.ts
+/** Keep the uploader's error, excluding stdout binding tables and redacting common credential formats. */
+export declare function cloudflareCommandDiagnostic(result: CloudflareCommandResult): string | undefined;
+//#endregion
 //#region src/secret-draft.d.ts
 export declare const VOID_SECRET_DRAFT_SOURCE = "export default { fetch() { return new Response(\"\"); } };\n";
 //#endregion

package/dist/index.mjs

@@ -1,10 +1,11 @@
 import { isDeepStrictEqual, stripVTControlCharacters } from "node:util";
-import { isRecord } from "@void/deploy-core";
+import { canonicalJson, isRecord } from "@void/deploy-core";
 import { cpSync, existsSync, mkdirSync, mkdtempSync, readFileSync, rmSync, writeFileSync } from "node:fs";
 import { SyntaxKind, applyEdits, createScanner, modify, parse, parseTree } from "jsonc-parser";
 import nodePath from "node:path";
 import { createHash } from "node:crypto";
 import { tmpdir } from "node:os";
+import { setTimeout } from "node:timers/promises";
 //#region src/config.ts
 /** Parse a root Wrangler JSON/JSONC config without accepting a partial parse. */
 function parseRootWranglerConfig(configPath) {
@@ -21,6 +22,14 @@ function parseRootWranglerConfig(configPath) {
 	if (errors.length > 0 || typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) return {};
 	return parsed;
 }
+/** Set one value in JSONC text, keeping comments and formatting elsewhere. */
+function setJsoncValue(text, path, value) {
+	return applyEdits(text, modify(text, path, value, { formattingOptions: {
+		insertSpaces: true,
+		tabSize: 2,
+		eol: "\n"
+	} }));
+}
 function readWranglerTopLevelString(config, field) {
 	return readConfigEntryString(config, field);
 }
@@ -574,11 +583,7 @@ function writeCloudflareFrameworkDeployConfig(options) {
 	const initial = existsSync(options.configPath) ? readFileSync(options.configPath, "utf-8") : "{}\n";
 	let content = initial;
 	const upsert = (path, value) => {
-		content = applyEdits(content, modify(content, path, value, { formattingOptions: {
-			insertSpaces: true,
-			tabSize: 2,
-			eol: "\n"
-		} }));
+		content = setJsoncValue(content, path, value);
 	};
 	upsert(["name"], options.name);
 	upsert(["account_id"], options.accountId);
@@ -692,12 +697,7 @@ function writeCloudflareStaticDeployConfig(options) {
 	const originalComments = extractCommentTokens(source);
 	let content = source;
 	const upsert = (path, value) => {
-		const edits = modify(content, path, value, { formattingOptions: {
-			insertSpaces: true,
-			tabSize: 2,
-			eol: "\n"
-		} });
-		content = applyEdits(content, edits);
+		content = setJsoncValue(content, path, value);
 	};
 	upsert(["name"], options.name);
 	upsert(["account_id"], options.accountId);
@@ -781,6 +781,14 @@ function cloudflareCommandDiagnostic(result) {
 	if (message === stderr && !/(?:^|\n)[ \t]*(?:[✘×X][ \t]+)?\[ERROR\]/i.test(stderr)) {
 		const box = /(?:^|\n)[ \t]*┌[ \t]*(?:APIError|Error)\b[^\n]*\n(?:[ \t]*│[^\n]*\n)*[ \t]*└[^\n]*/i.exec(stdout);
 		if (box) message = box[0].trim();
+		else {
+			const lines = stdout.split("\n");
+			const abort = lines.find((line) => line.startsWith("■  Aborting the upload operation because of conflicts."));
+			if (abort) {
+				const reason = "You are about to upload a Worker that was last updated via the script API.";
+				message = [lines.includes(`▲  ${reason}`) ? reason : "", abort.slice(3)].filter(Boolean).join("\n");
+			}
+		}
 	}
 	message = stripVTControlCharacters(message).split(/\n\s*(?:🪵|Logs (?:were )?written|If you think this is a bug)/)[0].trim();
 	if (!message) return;
@@ -910,11 +918,10 @@ function pickWranglerTriggerContext(source) {
 * schema-2 snapshot. The bounded loop fails closed if traffic never stabilizes.
 */
 async function stabilizeCloudflareVersionTriggers(options) {
-	const configPath = options.configPath;
 	let cleanupBaseline = mergeTriggerCleanupBaselines(options.previousTriggerConfig, options.targetTriggerConfig);
 	const attempts = Math.max(1, options.attempts ?? 4);
 	for (let attempt = 0; attempt < attempts; attempt++) {
-		const owner = await readCurrentProductionVersion(options, configPath);
+		const owner = await readCurrentProductionVersion(options);
 		if (owner.kind === "failed") return {
 			ok: false,
 			reason: "status-failed",
@@ -932,7 +939,7 @@ async function stabilizeCloudflareVersionTriggers(options) {
 		const activeVersionId = owner.versionId;
 		let activeTriggerConfig = activeVersionId === options.targetVersionId ? options.targetTriggerConfig : options.knownTriggerConfigs?.[activeVersionId];
 		if (!activeTriggerConfig && activeVersionId !== options.targetVersionId) {
-			const metadata = await readCloudflareVersionMetadata(options, configPath, activeVersionId);
+			const metadata = await readCloudflareVersionMetadata(options, activeVersionId);
 			activeTriggerConfig = metadata?.schema === 2 ? metadata.triggerConfig : void 0;
 		}
 		if (!activeTriggerConfig) return {
@@ -957,7 +964,7 @@ async function stabilizeCloudflareVersionTriggers(options) {
 			activeVersionId
 		};
 		cleanupBaseline = mergeTriggerCleanupBaselines(cleanupBaseline, activeTriggerConfig);
-		const after = await readCurrentProductionVersion(options, configPath);
+		const after = await readCurrentProductionVersion(options);
 		if (after.kind === "failed") return {
 			ok: false,
 			reason: "status-failed",
@@ -1097,12 +1104,7 @@ function nonVersionedSettingsHash(config) {
 		"tail_consumers",
 		"streaming_tail_consumers"
 	].filter((key) => config[key] !== void 0).map((key) => [key, config[key]]));
-	return createHash("sha256").update(stableJson(settings)).digest("hex");
-}
-function stableJson(value) {
-	if (Array.isArray(value)) return `[${value.map(stableJson).join(",")}]`;
-	if (isRecord(value)) return `{${Object.keys(value).sort().map((key) => `${JSON.stringify(key)}:${stableJson(value[key])}`).join(",")}}`;
-	return JSON.stringify(value);
+	return createHash("sha256").update(canonicalJson(settings)).digest("hex");
 }
 function parseTriggerConfig(value) {
 	if (!isRecord(value)) return null;
@@ -1190,13 +1192,12 @@ async function activateCloudflareVersion(options) {
 	}
 }
 async function activateCloudflareVersionWithSecretsFile(options) {
-	const configPath = options.configPath;
 	if (!options.verifyUploader()) return {
 		ok: false,
 		reason: "uploader-changed"
 	};
 	options.onProgress?.("Checking the current Worker deployment...");
-	const previous = await readCurrentProductionVersion(options, configPath);
+	const previous = await readCurrentProductionVersion(options);
 	if (previous.kind === "failed") return {
 		ok: false,
 		reason: "status-failed",
@@ -1230,7 +1231,7 @@ async function activateCloudflareVersionWithSecretsFile(options) {
 	let activeSecretsPinned = false;
 	let pinnedActiveSecrets;
 	if (options.expectedPreviousVersionId !== void 0 || options.verifyInheritedSecrets === true) {
-		const recent = await readRecentCloudflareVersionIds(options, configPath);
+		const recent = await readRecentCloudflareVersionIds(options);
 		if (recent === null) return {
 			ok: false,
 			reason: "inheritance-source-unavailable"
@@ -1249,13 +1250,13 @@ async function activateCloudflareVersionWithSecretsFile(options) {
 			};
 		}
 		if (options.verifyInheritedSecrets === true && previous.versionId !== latestVersionId && !trustedCandidateChain) {
-			const replacesAllRemoteSecrets = await candidateReplacesAllRemoteSecrets(options, configPath, previous.versionId, latestVersionId);
+			const replacesAllRemoteSecrets = await candidateReplacesAllRemoteSecrets(options, previous.versionId, latestVersionId);
 			if (replacesAllRemoteSecrets === null) return {
 				ok: false,
 				reason: "inheritance-source-unavailable"
 			};
 			if (!replacesAllRemoteSecrets) {
-				const activeSecrets = previous.versionId ? await readCloudflareVersionSecretBindings(options, configPath, previous.versionId) : null;
+				const activeSecrets = previous.versionId ? await readCloudflareVersionSecretBindings(options, previous.versionId) : null;
 				if (!activeSecrets || !options.pinActiveSecrets || !await options.pinActiveSecrets(previous.versionId, activeSecrets)) return {
 					ok: false,
 					reason: "inheritance-source-changed",
@@ -1270,10 +1271,10 @@ async function activateCloudflareVersionWithSecretsFile(options) {
 	}
 	const desiredMetadata = parseCloudflareVersionMessage(options.message);
 	let desiredTriggerConfig = desiredTriggerConfigFor(desiredMetadata, options.configPath);
-	let previousVersion = previousVersionId && desiredMetadata?.schema === 2 ? await readCloudflareVersionInspection(options, configPath, previousVersionId, inheritanceBaseline?.map((version) => version.inspection)) : null;
+	let previousVersion = previousVersionId && desiredMetadata?.schema === 2 ? await readCloudflareVersionInspection(options, previousVersionId, inheritanceBaseline?.map((version) => version.inspection)) : null;
 	async function previousIsSecretOnlyDraft() {
 		if (!previousVersionId) return false;
-		previousVersion ??= await readCloudflareVersionInspection(options, configPath, previousVersionId, inheritanceBaseline?.map((version) => version.inspection));
+		previousVersion ??= await readCloudflareVersionInspection(options, previousVersionId, inheritanceBaseline?.map((version) => version.inspection));
 		return previousVersion?.isSecretOnlyDraft === true;
 	}
 	const previousMetadata = desiredMetadata?.schema === 2 ? previousVersion?.metadata : null;
@@ -1314,7 +1315,7 @@ async function activateCloudflareVersionWithSecretsFile(options) {
 		if (bootstrapVoidDraft || !activeSecretsPinned && options.pinActiveSecrets) {
 			let activeSecrets;
 			try {
-				activeSecrets = await readCloudflareVersionSecretBindings(options, configPath, previous.versionId);
+				activeSecrets = await readCloudflareVersionSecretBindings(options, previous.versionId);
 			} catch {
 				return {
 					ok: false,
@@ -1348,12 +1349,12 @@ async function activateCloudflareVersionWithSecretsFile(options) {
 		return bootstrapFirstDeployment({
 			...options,
 			message
-		}, configPath, previous.versionId, options.atomic === true, previousTriggerConfig);
+		}, previous.versionId, options.atomic === true, previousTriggerConfig);
 	}
 	if (previous.versionId !== null && !activeSecretsPinned && options.pinActiveSecrets && options.candidateSecretsFilePath === void 0) {
 		let activeSecrets;
 		try {
-			activeSecrets = await readCloudflareVersionSecretBindings(options, configPath, previous.versionId);
+			activeSecrets = await readCloudflareVersionSecretBindings(options, previous.versionId);
 		} catch {
 			return {
 				ok: false,
@@ -1390,7 +1391,7 @@ async function activateCloudflareVersionWithSecretsFile(options) {
 			ok: false,
 			reason: "uploader-changed"
 		};
-		const owner = await readCurrentProductionVersion(options, configPath);
+		const owner = await readCurrentProductionVersion(options);
 		if (owner.kind === "failed") return {
 			ok: false,
 			reason: "status-failed",
@@ -1409,7 +1410,7 @@ async function activateCloudflareVersionWithSecretsFile(options) {
 	options.onProgress?.("Uploading the Worker and assets...");
 	const upload = await options.runWrangler({
 		type: "versions.upload",
-		configPath,
+		configPath: options.configPath,
 		workerName: options.workerName,
 		message,
 		secretsFilePath: options.candidateSecretsFilePath,
@@ -1422,7 +1423,7 @@ async function activateCloudflareVersionWithSecretsFile(options) {
 		if (!options.preserveTriggers && isBootstrapError && (previous.versionId === null || options.allowFirstDeploymentBootstrap === true || await previousIsSecretOnlyDraft())) return bootstrapFirstDeployment({
 			...options,
 			message
-		}, configPath, previous.versionId, false, previousTriggerConfig);
+		}, previous.versionId, false, previousTriggerConfig);
 		return {
 			ok: false,
 			reason: "upload-failed",
@@ -1440,7 +1441,7 @@ async function activateCloudflareVersionWithSecretsFile(options) {
 	};
 	options.onProgress?.("Verifying the uploaded Worker...");
 	if (inheritanceBaseline) {
-		const recent = await readRecentCloudflareVersionIds(options, configPath);
+		const recent = await readRecentCloudflareVersionIds(options);
 		const previousLatest = inheritanceBaseline.at(-1);
 		const expected = [...inheritanceBaseline.map((version) => version.id), versionId].slice(-10);
 		if (recent === null) return {
@@ -1482,7 +1483,7 @@ async function activateCloudflareVersionWithSecretsFile(options) {
 		if (!options.preserveTriggers && (previous.versionId === null || options.allowFirstDeploymentBootstrap === true || await previousIsSecretOnlyDraft())) return bootstrapFirstDeployment({
 			...options,
 			message
-		}, configPath, previous.versionId, false, previousTriggerConfig);
+		}, previous.versionId, false, previousTriggerConfig);
 		readinessUrl = desiredTriggerConfig.workers_dev ? workersDevReadinessUrl(options.workerName, options.workersDevSubdomain) : customRouteReadinessUrl(desiredTriggerConfig.routes);
 		readinessUsesCustomRoute = !desiredTriggerConfig.workers_dev && readinessUrl !== void 0;
 		if (!readinessUrl) return {
@@ -1493,17 +1494,17 @@ async function activateCloudflareVersionWithSecretsFile(options) {
 		};
 		const fallbackSubdomain = extractWorkersDevSubdomain(readinessUrl);
 		if (fallbackSubdomain && fallbackSubdomain === options.readinessHeadersWorkersDevSubdomain) authenticatedWorkersDevSubdomain = fallbackSubdomain;
-		const stagingFailure = await stageCandidateForReadiness(options, configPath, previous.versionId, versionId, message);
+		const stagingFailure = await stageCandidateForReadiness(options, previous.versionId, versionId, message);
 		if (stagingFailure) return stagingFailure;
 		stagedVersionOverride = true;
 	}
-	const probe = (url) => probeReadiness(`${url.replace(/\/$/, "")}/__void/ready`, options.workerName, readinessUsesCustomRoute ? void 0 : options.readinessHeaders, authenticatedWorkersDevSubdomain, stagedVersionOverride ? versionId : void 0, options.fetch ?? globalThis.fetch, options.sleep ?? defaultSleep, options.readinessAttempts ?? 6, Number.POSITIVE_INFINITY, options.requireVersionMetadata ? versionId : void 0);
+	const probe = (url) => probeReadiness(`${url.replace(/\/$/, "")}/__void/ready`, options.workerName, readinessUsesCustomRoute ? void 0 : options.readinessHeaders, authenticatedWorkersDevSubdomain, stagedVersionOverride ? versionId : void 0, options.fetch ?? globalThis.fetch, options.sleep ?? setTimeout, options.readinessAttempts ?? 6, Number.POSITIVE_INFINITY, options.requireVersionMetadata ? versionId : void 0);
 	options.onProgress?.("Waiting for the Worker to become ready...");
 	let ready = await probe(readinessUrl);
 	if (ready === "access-denied" && !stagedVersionOverride && previous.versionId !== null && !options.requirePreviewForReadiness) {
 		const stableReadinessUrl = desiredTriggerConfig.workers_dev ? workersDevReadinessUrl(options.workerName, extractWorkersDevSubdomain(readinessUrl) ?? options.workersDevSubdomain) : customRouteReadinessUrl(desiredTriggerConfig.routes);
 		if (stableReadinessUrl && stableReadinessUrl !== readinessUrl) {
-			const stagingFailure = await stageCandidateForReadiness(options, configPath, previous.versionId, versionId, message);
+			const stagingFailure = await stageCandidateForReadiness(options, previous.versionId, versionId, message);
 			if (stagingFailure) return stagingFailure;
 			readinessUrl = stableReadinessUrl;
 			authenticatedWorkersDevSubdomain = extractWorkersDevSubdomain(stableReadinessUrl);
@@ -1517,16 +1518,16 @@ async function activateCloudflareVersionWithSecretsFile(options) {
 		reason: ready === "access-denied" ? "readiness-access-denied" : "readiness-failed",
 		versionId,
 		previousVersionId: previous.versionId,
-		rollback: stagedVersionOverride ? await restorePreviousVersion(options, configPath, previous.versionId, "readiness failed", [stagedVersionPercentages(previous.versionId, versionId)]) : "not-needed"
+		rollback: stagedVersionOverride ? await restorePreviousVersion(options, previous.versionId, "readiness failed", [stagedVersionPercentages(previous.versionId, versionId)]) : "not-needed"
 	};
 	if (!options.verifyUploader()) return {
 		ok: false,
 		reason: "uploader-changed",
 		versionId,
 		previousVersionId: previous.versionId,
-		rollback: stagedVersionOverride ? await restorePreviousVersion(options, configPath, previous.versionId, "uploader verification failed", [stagedVersionPercentages(previous.versionId, versionId)]) : "not-needed"
+		rollback: stagedVersionOverride ? await restorePreviousVersion(options, previous.versionId, "uploader verification failed", [stagedVersionPercentages(previous.versionId, versionId)]) : "not-needed"
 	};
-	const ownerBeforeActivation = await readCurrentProductionVersion(options, configPath);
+	const ownerBeforeActivation = await readCurrentProductionVersion(options);
 	if (ownerBeforeActivation.kind === "failed") return {
 		ok: false,
 		reason: "status-failed",
@@ -1554,14 +1555,14 @@ async function activateCloudflareVersionWithSecretsFile(options) {
 		triggerRepair: "succeeded"
 	};
 	options.onProgress?.("Activating the Worker...");
-	const activate = await deployVersionPercentages(options, configPath, [`${versionId}@100`], message);
+	const activate = await deployVersionPercentages(options, [`${versionId}@100`], message);
 	if (!isCleanCommandExit(activate)) return {
 		ok: false,
 		reason: "activation-failed",
 		status: activate.status,
 		versionId,
 		previousVersionId: previous.versionId,
-		rollback: stagedVersionOverride ? await restorePreviousVersion(options, configPath, previous.versionId, "version activation failed", [stagedVersionPercentages(previous.versionId, versionId), [{
+		rollback: stagedVersionOverride ? await restorePreviousVersion(options, previous.versionId, "version activation failed", [stagedVersionPercentages(previous.versionId, versionId), [{
 			versionId,
 			percentage: 100
 		}]]) : "not-needed"
@@ -1574,7 +1575,7 @@ async function activateCloudflareVersionWithSecretsFile(options) {
 		rollback: previous.versionId ? "unsafe" : "unavailable"
 	};
 	if (options.preserveTriggers) {
-		const owner = await readCurrentProductionVersion(options, configPath);
+		const owner = await readCurrentProductionVersion(options);
 		if (owner.kind !== "ok" || owner.versionId !== versionId) return {
 			ok: false,
 			reason: "deployment-changed",
@@ -1625,7 +1626,7 @@ async function activateCloudflareVersionWithSecretsFile(options) {
 			previousVersionId: previous.versionId,
 			rollback: "unsafe"
 		};
-		const ownerBeforeCompensation = await readCurrentProductionVersion(options, configPath);
+		const ownerBeforeCompensation = await readCurrentProductionVersion(options);
 		if (ownerBeforeCompensation.kind !== "ok" || ownerBeforeCompensation.versionId === null) return {
 			ok: false,
 			reason: "triggers-failed",
@@ -1657,7 +1658,7 @@ async function activateCloudflareVersionWithSecretsFile(options) {
 				triggerRepair: triggerRepairOutcome(repair)
 			};
 		}
-		const rollback = await restorePreviousVersionAndTriggers(options, configPath, previous.versionId, "trigger activation failed", desiredTriggerConfig, versionId, versionedPreviousTriggerConfigWithTraffic);
+		const rollback = await restorePreviousVersionAndTriggers(options, previous.versionId, "trigger activation failed", desiredTriggerConfig, versionId, versionedPreviousTriggerConfigWithTraffic);
 		return {
 			ok: false,
 			reason: "triggers-failed",
@@ -1690,8 +1691,8 @@ async function activateCloudflareVersionWithSecretsFile(options) {
 		...workersDevSubdomainResult(readinessUrl)
 	};
 }
-async function restorePreviousVersionAndTriggers(options, configPath, previousVersionId, cause, failedTriggerConfig, failedVersionId, capturedTriggerConfig) {
-	const traffic = await restorePreviousVersion(options, configPath, previousVersionId, cause, [[{
+async function restorePreviousVersionAndTriggers(options, previousVersionId, cause, failedTriggerConfig, failedVersionId, capturedTriggerConfig) {
+	const traffic = await restorePreviousVersion(options, previousVersionId, cause, [[{
 		versionId: failedVersionId,
 		percentage: 100
 	}]]);
@@ -1699,7 +1700,7 @@ async function restorePreviousVersionAndTriggers(options, configPath, previousVe
 	if (!options.verifyUploader()) return "unsafe";
 	let targetTriggerConfig = capturedTriggerConfig;
 	if (!targetTriggerConfig) {
-		const metadata = await readCloudflareVersionMetadata(options, configPath, previousVersionId);
+		const metadata = await readCloudflareVersionMetadata(options, previousVersionId);
 		if (metadata?.schema !== 2) return "unavailable";
 		targetTriggerConfig = metadata.triggerConfig;
 	}
@@ -1718,16 +1719,16 @@ async function restorePreviousVersionAndTriggers(options, configPath, previousVe
 	});
 	return triggers.ok && triggers.targetOwnsTraffic ? "succeeded" : "failed";
 }
-async function readCloudflareVersionMetadata(options, configPath, versionId) {
-	return (await readCloudflareVersionInspection(options, configPath, versionId))?.metadata ?? null;
+async function readCloudflareVersionMetadata(options, versionId) {
+	return (await readCloudflareVersionInspection(options, versionId))?.metadata ?? null;
 }
-async function readCloudflareVersionInspection(options, configPath, versionId, knownVersions) {
+async function readCloudflareVersionInspection(options, versionId, knownVersions) {
 	try {
 		let versions = knownVersions;
 		if (versions === void 0) {
 			const result = await options.runWrangler({
 				type: "versions.list",
-				configPath,
+				configPath: options.configPath,
 				workerName: options.workerName
 			}, { capture: true });
 			if (!isCleanCommandExit(result)) return null;
@@ -1743,7 +1744,7 @@ async function readCloudflareVersionInspection(options, configPath, versionId, k
 				const inspection = await options.runWrangler({
 					type: "versions.view",
 					versionId,
-					configPath,
+					configPath: options.configPath,
 					workerName: options.workerName,
 					includeSource: true
 				}, { capture: true });
@@ -1765,10 +1766,10 @@ async function readCloudflareVersionInspection(options, configPath, versionId, k
 	}
 	return null;
 }
-async function readRecentCloudflareVersionIds(options, configPath) {
+async function readRecentCloudflareVersionIds(options) {
 	const result = await options.runWrangler({
 		type: "versions.list",
-		configPath,
+		configPath: options.configPath,
 		workerName: options.workerName
 	}, { capture: true });
 	if (!isCleanCommandExit(result)) {
@@ -1786,21 +1787,21 @@ async function readRecentCloudflareVersionIds(options, configPath) {
 function arraysEqual(left, right) {
 	return left.length === right.length && left.every((value, index) => value === right[index]);
 }
-async function candidateReplacesAllRemoteSecrets(options, configPath, activeVersionId, latestVersionId) {
+async function candidateReplacesAllRemoteSecrets(options, activeVersionId, latestVersionId) {
 	const versionIds = [...new Set([activeVersionId, latestVersionId].filter(Boolean))];
 	const secretBindings = [];
 	for (const versionId of versionIds) {
-		const bindings = await readCloudflareVersionSecretBindings(options, configPath, versionId);
+		const bindings = await readCloudflareVersionSecretBindings(options, versionId);
 		if (bindings === null) return null;
 		secretBindings.push(bindings);
 	}
 	return secretBindings.every((bindings) => bindings.every((binding) => binding.type === "secret_text" && Object.hasOwn(options.candidateSecrets ?? {}, binding.name)));
 }
-async function readCloudflareVersionSecretBindings(options, configPath, versionId) {
+async function readCloudflareVersionSecretBindings(options, versionId) {
 	const result = await options.runWrangler({
 		type: "versions.view",
 		versionId,
-		configPath,
+		configPath: options.configPath,
 		workerName: options.workerName
 	}, { capture: true });
 	if (!isCleanCommandExit(result)) return null;
@@ -1825,13 +1826,13 @@ async function readCloudflareVersionSecretBindings(options, configPath, versionI
 * brand-new Worker can therefore need one ordinary deploy before later releases use preview-first
 * version activation. This fallback requires prior proof that no application had been deployed.
 */
-async function bootstrapFirstDeployment(options, configPath, previousVersionId, atomic = false, previousTriggerConfig) {
+async function bootstrapFirstDeployment(options, previousVersionId, atomic = false, previousTriggerConfig) {
 	if (!options.verifyUploader()) return {
 		ok: false,
 		reason: "uploader-changed"
 	};
 	{
-		const current = await readCurrentProductionVersion(options, configPath);
+		const current = await readCurrentProductionVersion(options);
 		if (current.kind === "failed") return {
 			ok: false,
 			reason: "status-failed",
@@ -1850,7 +1851,7 @@ async function bootstrapFirstDeployment(options, configPath, previousVersionId,
 	options.onProgress?.(atomic ? "Publishing the Worker atomically..." : "Publishing the first Worker deployment...");
 	const bootstrap = await options.runWrangler({
 		type: "worker.deploy",
-		configPath,
+		configPath: options.configPath,
 		workerName: options.workerName,
 		message: options.message,
 		secretsFilePath: options.candidateSecretsFilePath,
@@ -1899,7 +1900,7 @@ async function bootstrapFirstDeployment(options, configPath, previousVersionId,
 		publishEmptyCrons: options.publishEmptyCrons
 	};
 	const verifyPublishedOwner = async () => {
-		const owner = await readCurrentProductionVersion(options, configPath);
+		const owner = await readCurrentProductionVersion(options);
 		if (owner.kind === "failed") return {
 			ok: false,
 			reason: "status-failed",
@@ -1976,7 +1977,7 @@ async function bootstrapFirstDeployment(options, configPath, previousVersionId,
 	const customDomainBootstrap = !atomic && usesCustomDomain;
 	const readinessTimeoutMs = customDomainBootstrap ? 3e5 : 6e4;
 	options.onProgress?.("Waiting for the Worker to become ready...");
-	const ready = await probeReadiness(`${previewUrl.replace(/\/$/, "")}/__void/ready`, options.workerName, extractWorkersDevSubdomain(previewUrl) ? options.readinessHeaders : void 0, extractWorkersDevSubdomain(previewUrl), void 0, options.fetch ?? globalThis.fetch, options.sleep ?? defaultSleep, options.readinessAttempts ?? (customDomainBootstrap ? 150 : 30), readinessTimeoutMs, options.requireVersionMetadata ? versionId : void 0);
+	const ready = await probeReadiness(`${previewUrl.replace(/\/$/, "")}/__void/ready`, options.workerName, extractWorkersDevSubdomain(previewUrl) ? options.readinessHeaders : void 0, extractWorkersDevSubdomain(previewUrl), void 0, options.fetch ?? globalThis.fetch, options.sleep ?? setTimeout, options.readinessAttempts ?? (customDomainBootstrap ? 150 : 30), readinessTimeoutMs, options.requireVersionMetadata ? versionId : void 0);
 	if (ready !== "ready") return {
 		ok: false,
 		reason: ready === "access-denied" ? atomic ? "atomic-readiness-access-denied" : "bootstrap-readiness-access-denied" : atomic ? "atomic-readiness-failed" : "bootstrap-readiness-failed",
@@ -1992,7 +1993,7 @@ async function bootstrapFirstDeployment(options, configPath, previousVersionId,
 		previousVersionId,
 		rollback: "unsafe"
 	};
-	const ownerAfterReadiness = await readCurrentProductionVersion(options, configPath);
+	const ownerAfterReadiness = await readCurrentProductionVersion(options);
 	if (ownerAfterReadiness.kind === "failed") return {
 		ok: false,
 		reason: "status-failed",
@@ -2048,10 +2049,10 @@ function commandDiagnosticFields(result) {
 function isContainersUnavailable(result) {
 	return result.failure === "containers-unavailable" || (result.errors?.some(({ message }) => /Cloudflare Containers[^\n]*(?:Workers Paid|not (?:enabled|available)|subscription)/i.test(message) || /\/containers\/me(?:\b|\?)/i.test(message) && /\b403\b/.test(message)) ?? false);
 }
-async function readCurrentProductionVersion(options, configPath) {
+async function readCurrentProductionVersion(options) {
 	const result = await options.runWrangler({
 		type: "deployments.status",
-		configPath,
+		configPath: options.configPath,
 		workerName: options.workerName
 	}, { capture: true });
 	if (!isCleanCommandExit(result)) {
@@ -2101,7 +2102,7 @@ function stagedVersionPercentages(previousVersionId, versionId) {
 	}] : [];
 }
 /** Stage the candidate at 0% beside the unchanged previous version so readiness can select it. */
-async function stageCandidateForReadiness(options, configPath, previousVersionId, versionId, message) {
+async function stageCandidateForReadiness(options, previousVersionId, versionId, message) {
 	if (!options.verifyUploader()) return {
 		ok: false,
 		reason: "uploader-changed",
@@ -2109,9 +2110,9 @@ async function stageCandidateForReadiness(options, configPath, previousVersionId
 		previousVersionId,
 		rollback: "not-needed"
 	};
-	const ownerFailure = await verifyReadinessStagingOwner(options, configPath, previousVersionId, versionId);
+	const ownerFailure = await verifyReadinessStagingOwner(options, previousVersionId, versionId);
 	if (ownerFailure) return ownerFailure;
-	const staged = await deployVersionPercentages(options, configPath, [`${previousVersionId}@100`, `${versionId}@0`], message);
+	const staged = await deployVersionPercentages(options, [`${previousVersionId}@100`, `${versionId}@0`], message);
 	if (!isCleanCommandExit(staged)) {
 		const cloudflareErrorCode = staged.errorCode;
 		return {
@@ -2127,8 +2128,8 @@ async function stageCandidateForReadiness(options, configPath, previousVersionId
 	}
 	return null;
 }
-async function verifyReadinessStagingOwner(options, configPath, previousVersionId, versionId) {
-	const owner = await readCurrentProductionVersion(options, configPath);
+async function verifyReadinessStagingOwner(options, previousVersionId, versionId) {
+	const owner = await readCurrentProductionVersion(options);
 	if (owner.kind === "failed") return {
 		ok: false,
 		reason: "status-failed",
@@ -2184,8 +2185,8 @@ async function probeReadiness(url, workerName, readinessHeaders, authenticatedWo
 			if (response && !response.bodyUsed) await response.body?.cancel().catch(() => {});
 		}
 		if (attempt + 1 < attempts) {
-			const delay = Math.min(250 * 2 ** attempt, 2e3, deadline - Date.now());
-			if (delay > 0) await sleep(delay);
+			const waitMs = Math.min(250 * 2 ** attempt, 2e3, deadline - Date.now());
+			if (waitMs > 0) await sleep(waitMs);
 		}
 	}
 	return "failed";
@@ -2214,7 +2215,7 @@ async function isCloudflareAccessDenial(response) {
 		return false;
 	}
 }
-async function deployVersionPercentages(options, configPath, percentages, message) {
+async function deployVersionPercentages(options, percentages, message) {
 	const metadata = parseCloudflareVersionMessage(message);
 	if ((options.preserveTriggers || metadata?.schema === 2 && metadata.triggerConfig.preserve) && options.configPath) return deployCloudflareVersionTraffic({
 		...options,
@@ -2225,7 +2226,7 @@ async function deployVersionPercentages(options, configPath, percentages, messag
 	return options.runWrangler({
 		type: "versions.deploy",
 		versions: versionPercentages(percentages),
-		configPath,
+		configPath: options.configPath,
 		workerName: options.workerName,
 		message
 	}, { capture: false });
@@ -2251,12 +2252,12 @@ async function deployCloudflareVersionTraffic(options) {
 		});
 	}
 }
-async function restorePreviousVersion(options, configPath, previousVersionId, cause, expectedOwnedTraffic) {
+async function restorePreviousVersion(options, previousVersionId, cause, expectedOwnedTraffic) {
 	if (!previousVersionId) return "unavailable";
 	if (!options.verifyUploader()) return "unsafe";
-	const owner = await readCurrentProductionVersion(options, configPath);
+	const owner = await readCurrentProductionVersion(options);
 	if (owner.kind !== "ok" || !expectedOwnedTraffic.some((expected) => productionVersionPercentagesEqual(owner.versions, expected))) return "unsafe";
-	return isCleanCommandExit(await deployVersionPercentages(options, configPath, [`${previousVersionId}@100`], `Void automatic rollback after ${cause}.`)) ? "succeeded" : "failed";
+	return isCleanCommandExit(await deployVersionPercentages(options, [`${previousVersionId}@100`], `Void automatic rollback after ${cause}.`)) ? "succeeded" : "failed";
 }
 function workersDevReadinessUrl(workerName, value) {
 	const subdomain = normalizeWorkersDevSubdomain(value);
@@ -2290,9 +2291,6 @@ function workersDevSubdomainResult(url) {
 	const workersDevSubdomain = extractWorkersDevSubdomain(url);
 	return workersDevSubdomain ? { workersDevSubdomain } : {};
 }
-function defaultSleep(milliseconds) {
-	return new Promise((resolve) => setTimeout(resolve, milliseconds));
-}
 //#endregion
 //#region src/metadata.ts
 /**
@@ -2385,4 +2383,4 @@ function createCloudflareMetadataRunner(options) {
 	};
 }
 //#endregion
-export { CloudflareWorkerInspectionError, VOID_SECRET_DRAFT_SOURCE, activateCloudflareVersion, assertCloudflareBindingsPreserved, assertCloudflareDurableObjectLifecycleSupported, assertExistingCloudflareConfig, createCloudflareMetadataRunner, deployCloudflareVersionTraffic, deployCloudflareVersionTriggers, encodeCloudflareVersionMessage, executeCloudflareDeploy, extractWorkersDevSubdomain, normalizeWorkersDevSubdomain, parseCloudflareVersionMessage, parseRootWranglerConfig, readBindingFieldPresence, readCloudflareTriggerConfig, readCloudflareVersionMigrationTag, readCloudflareWorkerMigrationTag, readConfigEntryString, readExistingCloudflareWorker, readStoredResourceName, readWranglerTopLevelString, renderCloudflareStaticEntry, resolveD1MigrateTarget, stabilizeCloudflareVersionTriggers, stageCloudflareStaticAssets, writeCloudflareFrameworkDeployConfig, writeCloudflareStaticDeployConfig };
+export { CloudflareWorkerInspectionError, VOID_SECRET_DRAFT_SOURCE, activateCloudflareVersion, assertCloudflareBindingsPreserved, assertCloudflareDurableObjectLifecycleSupported, assertExistingCloudflareConfig, cloudflareCommandDiagnostic, createCloudflareMetadataRunner, deployCloudflareVersionTraffic, deployCloudflareVersionTriggers, encodeCloudflareVersionMessage, executeCloudflareDeploy, extractWorkersDevSubdomain, normalizeWorkersDevSubdomain, parseCloudflareVersionMessage, parseRootWranglerConfig, readBindingFieldPresence, readCloudflareTriggerConfig, readCloudflareVersionMigrationTag, readCloudflareWorkerMigrationTag, readConfigEntryString, readExistingCloudflareWorker, readStoredResourceName, readWranglerTopLevelString, renderCloudflareStaticEntry, resolveD1MigrateTarget, stabilizeCloudflareVersionTriggers, stageCloudflareStaticAssets, writeCloudflareFrameworkDeployConfig, writeCloudflareStaticDeployConfig };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@void/deploy-cloudflare",
-  "version": "0.27.0",
+  "version": "1.0.3",
   "description": "Cloudflare deployment primitives for Void runtimes and deployment adapters.",
   "homepage": "https://void.cloud",
   "bugs": {
@@ -26,15 +26,15 @@
     "access": "public"
   },
   "dependencies": {
-    "@void/deploy-core": "0.27.0",
+    "@void/deploy-core": "1.0.3",
     "jsonc-parser": "^3.3.1"
   },
   "devDependencies": {
-    "@cloudflare/workers-types": "^5.20261009.1",
-    "@types/node": "^26.6.4",
+    "@cloudflare/workers-types": "^5.20261014.1",
+    "@types/node": "^26.6.5",
     "pathslash": "^0.1.0",
     "typescript": "7.0.2",
-    "vite-plus": "1.1.0"
+    "vite-plus": "1.2.0"
   },
   "scripts": {
     "build": "vp pack",